diff options
| author | Steve Freegard <steve@stevefreegard.com> | 2017-03-23 22:01:19 +0000 |
|---|---|---|
| committer | Steve Freegard <steve@stevefreegard.com> | 2017-03-23 22:01:19 +0000 |
| commit | 1205d530dd568af6c495c2669e86565219cd7195 (patch) | |
| tree | f1cf73bb4e998a61d1fd04a4e03f93b817004d7e /conf/composites.conf | |
| parent | c53dd6be7203038a0be6e73f1eb4beeeecd65b91 (diff) | |
| download | rspamd-1205d530dd568af6c495c2669e86565219cd7195.tar.gz rspamd-1205d530dd568af6c495c2669e86565219cd7195.zip | |
Updates to previous commit
Diffstat (limited to 'conf/composites.conf')
| -rw-r--r-- | conf/composites.conf | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/conf/composites.conf b/conf/composites.conf index 947fa7fbb..8a00b2fd1 100644 --- a/conf/composites.conf +++ b/conf/composites.conf @@ -62,14 +62,16 @@ composites { policy = "leave"; } COMPROMISED_ACCT_BULK { - expression = "HAS_XOIP & DCC_BULK"; - description = "Likely to be from a compromised webmail account"; + expression = "(HAS_XOIP | RCVD_FROM_SMTP_AUTH) & DCC_BULK"; + description = "Likely to be from a compromised account"; score = 3.0; + policy = "leave"; } UNDISC_RCPTS_BULK { expression = "DCC_BULK & (MISSING_TO | R_UNDISC_RCPT)"; description = "Missing or undisclosed recipients with a bulk signature"; score = 3.0; + policy = "leave"; } .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf" |