Merge pull request #2543 from heraklit256/extended-dnswl-scores

leaving original symbols if DNSWL composite rules are triggered

1 files changed, 5 insertions, 2 deletions

diff --git a/conf/composites.conf b/conf/composites.conf
index 7197adc8f..0de2ee2a0 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -88,16 +88,19 @@ composites {
         expression = "RECEIVED_PBL & -RCVD_VIA_SMTP_AUTH";
         description = "Relayed through ZEN PBL IP without sufficient authentication (possible indicating an open relay)";
         score = 2.0;
+        policy = "leave";
     }
     RCVD_DKIM_ARC_DNSWL_MED {
         expression = "(R_DKIM_ALLOW | ARC_ALLOW) & RCVD_IN_DNSWL_MED";
         description = "Sufficiently DKIM/ARC signed and received from IP with medium trust at DNSWL";
-        score = -1.5;
+        score = -0.5;
+        policy = "leave";
     }
     RCVD_DKIM_ARC_DNSWL_HI {
         expression = "(R_DKIM_ALLOW | ARC_ALLOW) & RCVD_IN_DNSWL_HI";
         description = "Sufficiently DKIM/ARC signed and received from IP with high trust at DNSWL";
-        score = -3.5;
+        score = -1.0;
+        policy = "leave";
     }
     AUTOGEN_PHP_SPAMMY {
         expression = "(HAS_X_POS | HAS_PHPMAILER_SIG | HAS_X_PHP_SCRIPT) & (SUBJECT_ENDS_QUESTION | SUBJECT_ENDS_EXCLAIM | MANY_INVISIBLE_PARTS)";