Vsevolod Stakhov
f0004af022
[Conf] Clarify documentation in the config files
4 роки тому
Vsevolod Stakhov
84384ae4e6
[Conf] Make LEAKED_PASSWORD_SCAM a composite rule again
4 роки тому
Vsevolod Stakhov
48d68b15e0
[Rework] Migrate from ip_score to reputation
5 роки тому
Vsevolod Stakhov
7fe418890c
[Conf] Add BROKEN_HEADERS_MAILLIST composite
5 роки тому
Vsevolod Stakhov
4cd0665750
[Rules] Rework LEAKED_PASSWORD_SCAM rule one more time
5 роки тому
Vsevolod Stakhov
6c2080f59b
[Conf] Add IP_SCORE_FREEMAIL composite rule
5 роки тому
Edmond
0d2f2dca84
Add a reference to the doc of composite rules
5 роки тому
Vsevolod Stakhov
c427048cec
[Feature] Validate BTC addresses in LEAKED_PASSWORD_SCAM
5 роки тому
heraklit256
4e878f443d
fix typo in RCVD_UNAUTH_PBL
5 роки тому
Vsevolod Stakhov
ae8f199719
[Rules] Add VIOLATED_DIRECT_SPF composite
5 роки тому
heraklit256
574536f825
lower score for PHISH_EMOTION to 1.0
5 роки тому
heraklit256
e5fbf6435a
lower score for HAS_ANON_DOMAIN to 0.1
5 роки тому
Vsevolod Stakhov
20337000c7
[Conf] Extend BAD_POLICIES composite
5 роки тому
heraklit256
8f76d99b15
add HAS_ONION_URI to HAS_ANON_DOMAIN
5 роки тому
Vsevolod Stakhov
abaa90892c
[Minor] Fixes for the previous project
5 роки тому
Vsevolod Stakhov
62b3a7c5e9
[Conf] Add composite to negate policies when fuzzy/bayes found
5 роки тому
heraklit256
b6092b1f92
lower weight of RCVD_DKIM_ARC_DNSWL_HI to -1.0
5 роки тому
heraklit256
0455923baf
Include ARC into AUTH_NA rule
5 роки тому
heraklit256
a15bd65a86
Composite rules: Minor cleanups
Added descriptions to some rules and unified AND operator.
5 роки тому
heraklit256
baec25184f
leave original symbols for composite rules
Removing original symbols if a composite rule triggers is kind
of confusing and makes debugging harder.
5 роки тому
heraklit256
1a55afb110
lower weight for RCVD_DKIM_ARC_DNSWL_MED and RCVD_DKIM_ARC_DNSWL_HIGH
These were too high as other symbols - such as ARC_ALLOW - already
introduce some negative scores.
Thanks to @moisseev for reporting this.
5 роки тому
heraklit256
fc0cec888f
Fix description for composite rule RBL_SPAMHAUS_XBL_ANY
5 роки тому
heraklit256
6e44ac9fb4
leaving original symbols if DNSWL composite rules are triggered
Without policy = "leave", rspamd replaces the original symbols
in log and message header (if enabled), which makes debugging more
hard and is not used in this case.
5 роки тому
Alexander Moisseev
957e3c6d1a
[Minor] Remove UNPRECISE_RCPT_DETAIL_FROM_SPAMMY
5 роки тому
heraklit256
648c87a935
add rule for domains trying to stay anonymous
5 роки тому
heraklit256
04b52561b0
improve composite rules for phish messages
5 роки тому
heraklit256
5312495106
add some missing composite rule description
5 роки тому
heraklit256
5afbc581fa
add rule for spammy mails with detailled sender but generic recipients
5 роки тому
heraklit256
faadf253ad
add rule for phish messages containing emotional subjects
5 роки тому
heraklit256
46bb18fa93
add rule for spammy PHP generated mails
5 роки тому
heraklit256
f1ebed1f9c
also trigger DNSWL score rule in case mails are properly ARC signed
5 роки тому
heraklit256
1ecd691570
add negative weight to DNSWL entries
However, a message must be correctly DKIM signed to get some more
negative weight in case an received IP is listed with medium or
high trust at DNSWL.
This supersedes a first patch without the DKIM condition.
6 роки тому
heraklit256
d39673f6b2
add rule for RCVD_UNAUTH_PBL
6 роки тому
Alexander Moisseev
d15ecc5fe1
[Minor] In *_FORWARDING composites remove only weights
6 роки тому
Alexander Moisseev
22f9f56f87
[Minor] Suppress base64 symbols for mails sent with 1C v8
6 роки тому
Alexander Moisseev
6f0cbd21a5
[Minor] Suppress MIME_BASE64_TEXT for Mail.Ru Mailer
7 роки тому
Alexander Moisseev
57b22b82eb
[Minor] Suppress CTYPE_MIXED_BOGUS for yandex.ru web-mail
7 роки тому
Steve Freegard
1205d530dd
Updates to previous commit
7 роки тому
Steve Freegard
c53dd6be72
New rules
7 роки тому
Vsevolod Stakhov
d10012653e
[Conf] Add composite for hacked wordpress phishing
7 роки тому
Andrew Lewis
cb7c54ccf0
[Rework] Composite configuration (#1270)
7 роки тому
Alexander Moisseev
63234cfa24
[Minor] Suppress SUBJ_EXCESS_BASE64 for Mail.Ru web-mail as well
7 роки тому
Alexander Moisseev
e181656d48
[Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902)
7 роки тому
Vsevolod Stakhov
cd0f7a9d7c
[Minor] Name composite in a proper way
7 роки тому
Andrew Lewis
38d3686269
[Minor] Avoid removing SPF failure symbols in composite
7 роки тому
Andrew Lewis
b0e378af1d
[Feature] Add R_DKIM_PERMFAIL symbol
7 роки тому
Andrew Lewis
032de97d72
[Minor] Fine-tune composites
7 роки тому
Andrew Lewis
07f4c49ea5
[Feature] Add R_DKIM_NA / R_SPF_NA / AUTH_NA symbols
7 роки тому
Andrew Lewis
9616bee5ff
[Minor] Composite: Don't penalise for SPF/DKIM failure when DMARC passed
7 роки тому
Andrew Lewis
e158dc398c
[Minor] Composite: Remove FORGED_RECIPIENTS if it's forwarding
7 роки тому