diff options
author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2022-01-13 20:44:57 +0000 |
---|---|---|
committer | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2022-01-13 20:44:57 +0000 |
commit | 1ae43b63ba3196c80ee64821b686c5f12ed9d46a (patch) | |
tree | bc52c2ae66a029da952f05b7c1d4cf67020be74c /src/plugins | |
parent | f1b30e10fa54d5d01d7932ecc0dd42cbaa5600d0 (diff) | |
download | rspamd-1ae43b63ba3196c80ee64821b686c5f12ed9d46a.tar.gz rspamd-1ae43b63ba3196c80ee64821b686c5f12ed9d46a.zip |
[Minor] Mime_types: Insert MIME_OBFUSCATED_ARCHIVE symbol
Diffstat (limited to 'src/plugins')
-rw-r--r-- | src/plugins/lua/mime_types.lua | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua index fd1c7e2d5..a2e570ef8 100644 --- a/src/plugins/lua/mime_types.lua +++ b/src/plugins/lua/mime_types.lua @@ -35,6 +35,7 @@ local settings = { symbol_good = 'MIME_GOOD', symbol_attachment = 'MIME_BAD_ATTACHMENT', symbol_encrypted_archive = 'MIME_ENCRYPTED_ARCHIVE', + symbol_obfuscated_archive = 'MIME_OBFUSCATED_ARCHIVE', symbol_exe_in_gen_split_rar = 'MIME_EXE_IN_GEN_SPLIT_RAR', symbol_archive_in_archive = 'MIME_ARCHIVE_IN_ARCHIVE', symbol_double_extension = 'MIME_DOUBLE_BAD_EXTENSION', @@ -429,6 +430,7 @@ local function check_mime_type(task) end local arch = p:get_archive() + -- TODO: migrate to flags once C part is ready if arch:is_encrypted() then task:insert_result(settings.symbol_encrypted_archive, 1.0, filename) task:insert_result('MIME_TRACE', 0.0, @@ -440,6 +442,13 @@ local function check_mime_type(task) }) task:insert_result('MIME_TRACE', 0.0, string.format("%s:%s", p:get_id(), '-')) + elseif arch:is_obfuscated() then + task:insert_result(settings.symbol_obfuscated_archive, 1.0, { + 'obfuscated archive', + filename, + }) + task:insert_result('MIME_TRACE', 0.0, + string.format("%s:%s", p:get_id(), '-')) end if check then @@ -630,6 +639,12 @@ if opts then }) rspamd_config:register_symbol({ type = 'virtual', + name = settings['symbol_obfuscated_archive'], + parent = id, + group = 'mime_types', + }) + rspamd_config:register_symbol({ + type = 'virtual', name = settings['symbol_exe_in_gen_split_rar'], parent = id, group = 'mime_types', |