aboutsummaryrefslogtreecommitdiffstats
path: root/src/plugins
diff options
context:
space:
mode:
authorVsevolod Stakhov <vsevolod@highsecure.ru>2022-01-13 20:44:57 +0000
committerVsevolod Stakhov <vsevolod@highsecure.ru>2022-01-13 20:44:57 +0000
commit1ae43b63ba3196c80ee64821b686c5f12ed9d46a (patch)
treebc52c2ae66a029da952f05b7c1d4cf67020be74c /src/plugins
parentf1b30e10fa54d5d01d7932ecc0dd42cbaa5600d0 (diff)
downloadrspamd-1ae43b63ba3196c80ee64821b686c5f12ed9d46a.tar.gz
rspamd-1ae43b63ba3196c80ee64821b686c5f12ed9d46a.zip
[Minor] Mime_types: Insert MIME_OBFUSCATED_ARCHIVE symbol
Diffstat (limited to 'src/plugins')
-rw-r--r--src/plugins/lua/mime_types.lua15
1 files changed, 15 insertions, 0 deletions
diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua
index fd1c7e2d5..a2e570ef8 100644
--- a/src/plugins/lua/mime_types.lua
+++ b/src/plugins/lua/mime_types.lua
@@ -35,6 +35,7 @@ local settings = {
symbol_good = 'MIME_GOOD',
symbol_attachment = 'MIME_BAD_ATTACHMENT',
symbol_encrypted_archive = 'MIME_ENCRYPTED_ARCHIVE',
+ symbol_obfuscated_archive = 'MIME_OBFUSCATED_ARCHIVE',
symbol_exe_in_gen_split_rar = 'MIME_EXE_IN_GEN_SPLIT_RAR',
symbol_archive_in_archive = 'MIME_ARCHIVE_IN_ARCHIVE',
symbol_double_extension = 'MIME_DOUBLE_BAD_EXTENSION',
@@ -429,6 +430,7 @@ local function check_mime_type(task)
end
local arch = p:get_archive()
+ -- TODO: migrate to flags once C part is ready
if arch:is_encrypted() then
task:insert_result(settings.symbol_encrypted_archive, 1.0, filename)
task:insert_result('MIME_TRACE', 0.0,
@@ -440,6 +442,13 @@ local function check_mime_type(task)
})
task:insert_result('MIME_TRACE', 0.0,
string.format("%s:%s", p:get_id(), '-'))
+ elseif arch:is_obfuscated() then
+ task:insert_result(settings.symbol_obfuscated_archive, 1.0, {
+ 'obfuscated archive',
+ filename,
+ })
+ task:insert_result('MIME_TRACE', 0.0,
+ string.format("%s:%s", p:get_id(), '-'))
end
if check then
@@ -630,6 +639,12 @@ if opts then
})
rspamd_config:register_symbol({
type = 'virtual',
+ name = settings['symbol_obfuscated_archive'],
+ parent = id,
+ group = 'mime_types',
+ })
+ rspamd_config:register_symbol({
+ type = 'virtual',
name = settings['symbol_exe_in_gen_split_rar'],
parent = id,
group = 'mime_types',