summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndrew Lewis <nerf@judo.za.org>2016-11-29 18:29:52 +0200
committerAndrew Lewis <nerf@judo.za.org>2016-11-29 18:34:28 +0200
commit22ac7e9325b67c8aa96174b47a61960fbb3127f3 (patch)
tree00e3be0a6f8e482f1869af63434135cc23e7abac
parentfba248889c9ed4fc47f82afca5d213096c229ce4 (diff)
downloadrspamd-22ac7e9325b67c8aa96174b47a61960fbb3127f3.tar.gz
rspamd-22ac7e9325b67c8aa96174b47a61960fbb3127f3.zip
[Minor] Remove duplicated rule
-rw-r--r--rules/regexp/compromised_hosts.lua4
-rw-r--r--rules/regexp/headers.lua7
2 files changed, 2 insertions, 9 deletions
diff --git a/rules/regexp/compromised_hosts.lua b/rules/regexp/compromised_hosts.lua
index e5e6e6aec..8d224b315 100644
--- a/rules/regexp/compromised_hosts.lua
+++ b/rules/regexp/compromised_hosts.lua
@@ -83,10 +83,10 @@ reconf['HAS_X_ANTIABUSE'] = {
group = "compromised_hosts"
}
-reconf['PHP_EVALD_CODE'] = {
+reconf['X_PHP_EVAL'] = {
re = "X-PHP-Script=/eval\\(\\)\\'d/Hi || X-PHP-Originating-Script=/eval\\(\\)\\'d/Hi",
description = "Message sent using eval'd PHP",
- score = 5.0,
+ score = 4.0,
group = "compromised_hosts"
}
diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index 5118a5b9b..d05874809 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -785,13 +785,6 @@ reconf['INVALID_POSTFIX_RECEIVED'] = {
group = 'header'
}
-reconf['X_PHP_EVAL'] = {
- re = "X-PHP-Originating-Script=/ : eval\\(\\)'d code$/X",
- score = 4.0,
- description = "Message sent by eval()'d PHP code",
- group = 'header'
-}
-
reconf['X_PHP_FORGED_0X'] = {
re = "X-PHP-Originating-Script=/^0\\d/X",
score = 4.0,