aboutsummaryrefslogtreecommitdiffstats
path: root/rules/regexp
diff options
context:
space:
mode:
authorVsevolod Stakhov <vsevolod@highsecure.ru>2018-11-12 11:16:58 +0000
committerVsevolod Stakhov <vsevolod@highsecure.ru>2018-11-12 11:16:58 +0000
commitf2f048999ee5cb3ce0cf85a1bc5ee1837d279480 (patch)
tree5a6ac5291246c33bf246dfdde2bd74dbca97e327 /rules/regexp
parent40958cbc99827ff63ba60f5b97c00104ecb47661 (diff)
downloadrspamd-f2f048999ee5cb3ce0cf85a1bc5ee1837d279480.tar.gz
rspamd-f2f048999ee5cb3ce0cf85a1bc5ee1837d279480.zip
[Rules] Reduce FP rate for LEAKE_PASSWORD_SCAM rule
Diffstat (limited to 'rules/regexp')
-rw-r--r--rules/regexp/misc.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/rules/regexp/misc.lua b/rules/regexp/misc.lua
index 846cb5ee5..7df011320 100644
--- a/rules/regexp/misc.lua
+++ b/rules/regexp/misc.lua
@@ -63,7 +63,7 @@ reconf['HAS_ONION_URI'] = {
local password_in_subject = [[Subject=/\bpassword\b/i]]
local password_in_body = [[/\bpassword\b/i{sa_body}]]
-local btc_wallet = [[/\b[13][0-9a-zA-Z]{25,34}\b/{sa_body}]]
+local btc_wallet = [[/^[13][0-9a-zA-Z]{25,34}$/{words}]]
reconf['LEAKED_PASSWORD_SCAM'] = {
re = string.format('(%s | %s) & %s', password_in_subject,