diff options
author | Vsevolod Stakhov <vsevolod@rspamd.com> | 2023-08-22 13:38:32 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-08-22 13:38:32 +0100 |
commit | 792a1ecee836d659d299b31066a9f1df43d0922e (patch) | |
tree | 90234aadcb0dc999a1d3e876dc8afcca4a9fa6ef /conf | |
parent | 460de608e007345356b7f5bb110c6fdcf11d274b (diff) | |
parent | 77b10dbe2e32bec8b60cae6d51d8a7517ace3a1d (diff) | |
download | rspamd-792a1ecee836d659d299b31066a9f1df43d0922e.tar.gz rspamd-792a1ecee836d659d299b31066a9f1df43d0922e.zip |
Merge pull request #4575 from dragoangel/feat/add-phishing-feed-exclusions
[Feature] Support feed exclusions in phishing module
Diffstat (limited to 'conf')
-rw-r--r-- | conf/modules.d/phishing.conf | 6 | ||||
-rw-r--r-- | conf/scores.d/phishing_group.conf | 4 |
2 files changed, 10 insertions, 0 deletions
diff --git a/conf/modules.d/phishing.conf b/conf/modules.d/phishing.conf index bd2e0bd86..a6531e689 100644 --- a/conf/modules.d/phishing.conf +++ b/conf/modules.d/phishing.conf @@ -21,6 +21,12 @@ phishing { # Phishtank is disabled by default in the module, so let's enable it here explicitly phishtank_enabled = true; + # List of excluded hosts from checks over openphish, phishtank and generic_service + phishing_feed_exclusion_symbol = "PHISHED_EXCLUDED"; + # Disabled by default + phishing_feed_exclusion_enabled = false; + phishing_feed_exclusion_map = "$LOCAL_CONFDIR/local.d/maps.d/phishing_feed_exclusion.inc"; + # Make exclusions for known redirectors and domains exceptions = { REDIRECTOR_FALSE = [ diff --git a/conf/scores.d/phishing_group.conf b/conf/scores.d/phishing_group.conf index 24d0ad596..54a660a55 100644 --- a/conf/scores.d/phishing_group.conf +++ b/conf/scores.d/phishing_group.conf @@ -25,6 +25,10 @@ symbols = { description = "Phished URL"; one_shot = true; } + "PHISHED_EXCLUDED" { + weight = 0.0; + description = "Phished URL found in exclusions list"; + } "PHISHED_OPENPHISH" { weight = 7.0; description = "Phished URL found in openphish.com"; |