diff options
Diffstat (limited to 'rules/misc.lua')
-rw-r--r-- | rules/misc.lua | 20 |
1 files changed, 18 insertions, 2 deletions
diff --git a/rules/misc.lua b/rules/misc.lua index 26f2a1357..05d4af5d5 100644 --- a/rules/misc.lua +++ b/rules/misc.lua @@ -101,25 +101,41 @@ rspamd_config.DATE_IN_PAST = { type = 'mime', } -rspamd_config.R_SUSPICIOUS_URL = { +local obscured_id = rspamd_config:register_symbol{ callback = function(task) local urls = task:get_urls() if urls then for _,u in ipairs(urls) do - if u:is_obscured() then + local fl = u:get_flags() + if fl.obscured then task:insert_result('R_SUSPICIOUS_URL', 1.0, u:get_host()) end + if fl.zw_spaces then + task:insert_result('ZERO_WIDTH_SPACE_URL', 1.0, u:get_host()) + end end end + return false end, + name = 'R_SUSPICIOUS_URL', score = 5.0, one_shot = true, description = 'Obfusicated or suspicious URL has been found in a message', group = 'url' } +rspamd_config:register_symbol{ + type = 'virtual', + name = 'ZERO_WIDTH_SPACE_URL', + score = 7.0, + one_shot = true, + description = 'Zero width space in url', + group = 'url', + parent = obscured_id, +} + rspamd_config.ENVFROM_PRVS = { callback = function (task) |