diff options
| author | twesterhever <40121680+twesterhever@users.noreply.github.com> | 2023-02-17 15:09:48 +0000 |
|---|---|---|
| committer | twesterhever <40121680+twesterhever@users.noreply.github.com> | 2023-02-17 15:09:48 +0000 |
| commit | b605f37d65b704632a013091d1a3ba5bc5345a94 (patch) | |
| tree | 961b3b21ffb17791ff8fdccf82a92c5c97080de5 | |
| parent | fbe0e146a508de5b58fdbc09211d7a21ce63734a (diff) | |
| download | rspamd-b605f37d65b704632a013091d1a3ba5bc5345a94.tar.gz rspamd-b605f37d65b704632a013091d1a3ba5bc5345a94.zip | |
[Minor] Improve readability of composites rule configuration
| -rw-r--r-- | conf/composites.conf | 15 |
1 files changed, 6 insertions, 9 deletions
diff --git a/conf/composites.conf b/conf/composites.conf index e2096b291..82373b093 100644 --- a/conf/composites.conf +++ b/conf/composites.conf @@ -98,7 +98,7 @@ composites { } RCVD_UNAUTH_PBL { expression = "RECEIVED_PBL & !RCVD_VIA_SMTP_AUTH"; - description = "Relayed through ZEN PBL IP without sufficient authentication (possible indicating an open relay)"; + description = "Relayed through Spamhaus PBL IP without sufficient authentication (possible indicating an open relay)"; score = 2.0; policy = "leave"; } @@ -133,18 +133,16 @@ composites { policy = "leave"; } BAD_REP_POLICIES { - description = "Contains valid policies but are also marked by fuzzy/bayes/surbl/rbl"; + description = "Contains valid policies but are also marked by fuzzy/bayes/SURBL/RBL"; expression = "(~g-:policies) & (-g+:fuzzy | -g+:statistics | -g+:surbl | -g+:rbl)"; score = 0.1; } - VIOLATED_DIRECT_SPF { description = "Has no Received (or no trusted received relays) and SPF policy fails or soft fails"; expression = "(R_SPF_FAIL | R_SPF_SOFTFAIL) & (RCVD_COUNT_ZERO | RCVD_NO_TLS_LAST)"; policy = "leave"; score = 3.5; } - IP_SCORE_FREEMAIL { description = "Negate IP_SCORE when message comes from FreeMail"; expression = "FREEMAIL_FROM & SENDER_REP_SPAM"; @@ -164,12 +162,11 @@ composites { score = 7.0; group = "scams"; } - FREEMAIL_AFF { - expression = "(FREEMAIL_FROM | FREEMAIL_ENVFROM | FREEMAIL_REPLYTO) & R_UNDISC_RCPT & (INTRODUCTION | FROM_NAME_HAS_TITLE | FREEMAIL_REPLYTO_NEQ_FROM_DOM)"; - score = 4.0; - policy = "leave"; - description = "Message exhibits strong characteristics of advance fee fraud (AFF a/k/a '419' spam) involving freemail addresses"; + expression = "(FREEMAIL_FROM | FREEMAIL_ENVFROM | FREEMAIL_REPLYTO) & R_UNDISC_RCPT & (INTRODUCTION | FROM_NAME_HAS_TITLE | FREEMAIL_REPLYTO_NEQ_FROM_DOM)"; + score = 4.0; + policy = "leave"; + description = "Message exhibits strong characteristics of advance fee fraud (AFF a/k/a '419' spam) involving freemail addresses"; } .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf" |