summaryrefslogtreecommitdiffstats
path: root/rules
diff options
context:
space:
mode:
authorAlexander Moisseev <moiseev@mezonplus.ru>2017-08-23 10:34:18 +0300
committerAlexander Moisseev <moiseev@mezonplus.ru>2017-08-23 12:18:03 +0300
commit22f9f56f87aead342dd13788042894b9848f592f (patch)
tree581db7d9e86b813d3314cec7164e881b89e51fe5 /rules
parenteaecf66d38c7405f3739d155b318cd7734fcf427 (diff)
downloadrspamd-22f9f56f87aead342dd13788042894b9848f592f.tar.gz
rspamd-22f9f56f87aead342dd13788042894b9848f592f.zip
[Minor] Suppress base64 symbols for mails sent with 1C v8
Diffstat (limited to 'rules')
-rw-r--r--rules/regexp/headers.lua8
1 files changed, 8 insertions, 0 deletions
diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index 4d9d2c77d..b375f6598 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -572,6 +572,14 @@ reconf['YANDEX_RU_MAILER'] = {
group = 'header'
}
+-- Detect 1C v8.2 and v8.3 mailers
+reconf['MAILER_1C_8'] = {
+ re = 'X-Mailer=/^1C:Enterprise 8\\.[23]$/H',
+ score = 0,
+ description = 'Sent with 1C:Enterprise 8',
+ group = 'header'
+}
+
-- Two received headers with ip addresses
local double_ip_spam_1 = 'Received=/from \\[\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\] by \\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3} with/H'
local double_ip_spam_2 = 'Received=/from\\s+\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\s+by\\s+\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3};/H'