diff options
| author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2022-01-13 20:45:14 +0000 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2022-01-13 20:45:14 +0000 |
| commit | eb577f16af7e55e8bf7d40e5a35c386d14101539 (patch) | |
| tree | c1819cee46f1d9fe9f60f9b1e21c29062c11affb /conf/scores.d | |
| parent | 1ae43b63ba3196c80ee64821b686c5f12ed9d46a (diff) | |
| download | rspamd-eb577f16af7e55e8bf7d40e5a35c386d14101539.tar.gz rspamd-eb577f16af7e55e8bf7d40e5a35c386d14101539.zip | |
[Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points
Diffstat (limited to 'conf/scores.d')
| -rw-r--r-- | conf/scores.d/mime_types_group.conf | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/conf/scores.d/mime_types_group.conf b/conf/scores.d/mime_types_group.conf index b9e373600..4e95f6835 100644 --- a/conf/scores.d/mime_types_group.conf +++ b/conf/scores.d/mime_types_group.conf @@ -43,6 +43,11 @@ symbols = { description = "Encrypted archive in a message"; one_shot = true; } + "MIME_OBFUSCATED_ARCHIVE" { + weight = 8.0; + description = "Archive has files with clear obfuscation signs"; + one_shot = true; + } "MIME_EXE_IN_GEN_SPLIT_RAR" { weight = 5.0; description = "EXE file in RAR archive with generic split extension (e.g. .001)"; |