diff options
| author | Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com> | 2023-07-11 21:28:43 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-11 21:28:43 +0300 |
| commit | 0729c58cb03befdb31b7a1ca56bd052abfd66477 (patch) | |
| tree | ee4e8f13f86ba203aef7f1261f68d4d025d01711 /conf | |
| parent | a0d7e033663e217d84178be5db3153a7249555b5 (diff) | |
| download | rspamd-0729c58cb03befdb31b7a1ca56bd052abfd66477.tar.gz rspamd-0729c58cb03befdb31b7a1ca56bd052abfd66477.zip | |
Add composites exclusions for known Apple Mail bad symbols
Diffstat (limited to 'conf')
| -rw-r--r-- | conf/composites.conf | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/conf/composites.conf b/conf/composites.conf index 00f46f966..a1f18749c 100644 --- a/conf/composites.conf +++ b/conf/composites.conf @@ -65,6 +65,14 @@ composites { expression = "-R_DKIM_ALLOW & (R_DKIM_TEMPFAIL | R_DKIM_PERMFAIL | R_DKIM_REJECT)" policy = "remove_weight"; } + APPLE_MAILER_COMMON { + description = "Message was sent by 'Apple Mail' and has common symbols in place"; + expression = "APPLE_MAILER & MV_CASE"; + } + APPLE_IOS_MAILER_COMMON { + description = "Message was sent by 'Apple iOS Mail' and has common symbols in place"; + expression = "APPLE_IOS_MAILER & (MV_CASE | MIME_MA_MISSING_TEXT)"; + } HACKED_WP_PHISHING { expression = "(HAS_X_POS | HAS_PHPMAILER_SIG) & HAS_WP_URI & (PHISHING | CRACKED_SURBL | PH_SURBL_MULTI | DBL_PHISH | DBL_ABUSE_PHISH | URIBL_BLACK | PHISHED_OPENPHISH | PHISHED_PHISHTANK)"; description = "Phish message sent by hacked Wordpress instance"; |