1 files changed, 11 insertions, 0 deletions
diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index af63d7131..68e540aee 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -905,3 +905,14 @@ reconf['HAS_XOIP'] = {
   score = 0.0,
   group = 'headers'
 }
+
+reconf['MIME_BASE64_TEXT'] = {
+  re = string.format('(%s && %s) || (%s && %s)',
+                     'Content-Type=/^text/Hi',
+                     'Content-Transfer-Encoding=/^base64/Hi',
+                     'Content-Type=/^text/Bi',
+                     'Content-Transfer-Encoding=/^base64/Bi'),
+  description = 'Message text disguised using base64 encoding',
+  score = 0.0,
+  group = 'headers'
+}