aboutsummaryrefslogtreecommitdiffstats
path: root/conf/composites.conf
diff options
context:
space:
mode:
authortwesterhever <40121680+twesterhever@users.noreply.github.com>2024-04-09 11:01:39 +0000
committertwesterhever <40121680+twesterhever@users.noreply.github.com>2024-04-09 11:01:39 +0000
commit3bebfa089ee5e0a3c38f376a49f805d9ee69a497 (patch)
tree554eecd897956c2692db1ce4cb3671f0b7b8701f /conf/composites.conf
parenta0069e42556725e928f8e6067f54a738abe25aab (diff)
downloadrspamd-3bebfa089ee5e0a3c38f376a49f805d9ee69a497.tar.gz
rspamd-3bebfa089ee5e0a3c38f376a49f805d9ee69a497.zip
[Minor] Also respect HAS_XOIP for authenticated messages
Diffstat (limited to 'conf/composites.conf')
-rw-r--r--conf/composites.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/conf/composites.conf b/conf/composites.conf
index 2526e701b..c1b603e51 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -178,7 +178,7 @@ composites {
description = "Message only contains a redirector URL";
}
SUSPICIOUS_AUTH_ORIGIN {
- expression = "RCVD_VIA_SMTP_AUTH & (!RECEIVED_SPAMHAUS_PBL | RECEIVED_SPAMHAUS_XBL | RECEIVED_SPAMHAUS_SBL | RECEIVED_BLOCKLISTDE)";
+ expression = "(HAS_XOIP | RCVD_FROM_SMTP_AUTH) & (!RECEIVED_SPAMHAUS_PBL | RECEIVED_SPAMHAUS_XBL | RECEIVED_SPAMHAUS_SBL | RECEIVED_BLOCKLISTDE)";
score = 0.0;
policy = "leave";
description = "Message authenticated, but from a suspicios origin (potentially an injector)";