diff options
| author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2019-09-19 12:13:48 +0100 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2019-09-19 12:13:48 +0100 |
| commit | 84384ae4e65ff85b0feedd00ec27506dd5b9dbc7 (patch) | |
| tree | 5c4297d39f425afbfd07b037daf42ae80a6bf431 /conf/composites.conf | |
| parent | 90fb3cc2868a3ee4d5995aefb71fb6d66b450edf (diff) | |
| download | rspamd-84384ae4e65ff85b0feedd00ec27506dd5b9dbc7.tar.gz rspamd-84384ae4e65ff85b0feedd00ec27506dd5b9dbc7.zip | |
[Conf] Make LEAKED_PASSWORD_SCAM a composite rule again
Diffstat (limited to 'conf/composites.conf')
| -rw-r--r-- | conf/composites.conf | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/conf/composites.conf b/conf/composites.conf index 37b1c3da9..2204f1e71 100644 --- a/conf/composites.conf +++ b/conf/composites.conf @@ -148,7 +148,13 @@ composites { score = 0.0; policy = "remove_weight"; } - + LEAKED_PASSWORD_SCAM { + description = "Contains BTC wallet address and scam patterns"; + expression = "BITCOIN_ADDR & (LEAKED_PASSWORD_SCAM_RE | R_MIXED_CHARSET | R_EMPTY_IMAGE)"; + policy = "leave"; + score = 7.0; + group = "scams"; + } .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf" .include(try=true; priority=10) "$LOCAL_CONFDIR/override.d/composites.conf" |