aboutsummaryrefslogtreecommitdiffstats
path: root/conf/composites.conf
diff options
context:
space:
mode:
authorheraklit256 <37872459+heraklit256@users.noreply.github.com#>2018-10-04 17:58:07 +0200
committerheraklit256 <37872459+heraklit256@users.noreply.github.com#>2018-10-04 17:58:07 +0200
commitbaec25184f36cacca647700aad82920c4fbd9f05 (patch)
treef3358f56977b771cc703395aa9b3a920d03a7b89 /conf/composites.conf
parent34f9fca5431dd7df8f35a73ce7a298a61ac4ef49 (diff)
downloadrspamd-baec25184f36cacca647700aad82920c4fbd9f05.tar.gz
rspamd-baec25184f36cacca647700aad82920c4fbd9f05.zip
leave original symbols for composite rules
Removing original symbols if a composite rule triggers is kind of confusing and makes debugging harder.
Diffstat (limited to 'conf/composites.conf')
-rw-r--r--conf/composites.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/conf/composites.conf b/conf/composites.conf
index 7197adc8f..bf772be07 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -103,16 +103,19 @@ composites {
expression = "(HAS_X_POS | HAS_PHPMAILER_SIG | HAS_X_PHP_SCRIPT) & (SUBJECT_ENDS_QUESTION | SUBJECT_ENDS_EXCLAIM | MANY_INVISIBLE_PARTS)";
description = "Message was generated by PHP script and contains some spam indicators";
score = 1.0;
+ policy = "leave";
}
PHISH_EMOTION {
expression = "(PHISHING | DBL_PHISH | PHISHED_OPENPHISH | PHISHED_PHISHTANK) & (SUBJECT_ENDS_QUESTION | SUBJECT_ENDS_EXCLAIM)";
description = "Phish message with subject trying to address users emotion";
score = 2.0;
+ policy = "leave";
}
HAS_ANON_DOMAIN {
expression = "HAS_GUC_PROXY_URI | URIBL_RED | DBL_ABUSE_REDIR";
description = "Contains one or more domains trying to disguise owner/destination";
score = 0.5;
+ policy = "leave";
}
.include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf"