Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [Rework] Migrate from ip_score to reputation | Vsevolod Stakhov | 2019-07-17 | 1 | -1/+1 |
| | |||||
* | [Conf] Add BROKEN_HEADERS_MAILLIST composite | Vsevolod Stakhov | 2019-07-17 | 1 | -0/+7 |
| | |||||
* | [Rules] Rework LEAKED_PASSWORD_SCAM rule one more time | Vsevolod Stakhov | 2019-06-18 | 1 | -7/+0 |
| | |||||
* | [Conf] Add IP_SCORE_FREEMAIL composite rule | Vsevolod Stakhov | 2019-04-29 | 1 | -0/+7 |
| | |||||
* | Add a reference to the doc of composite rules | Edmond | 2019-04-08 | 1 | -1/+2 |
| | |||||
* | [Feature] Validate BTC addresses in LEAKED_PASSWORD_SCAM | Vsevolod Stakhov | 2019-03-19 | 1 | -0/+7 |
| | |||||
* | fix typo in RCVD_UNAUTH_PBL | heraklit256 | 2019-02-13 | 1 | -1/+1 |
| | |||||
* | [Rules] Add VIOLATED_DIRECT_SPF composite | Vsevolod Stakhov | 2019-01-15 | 1 | -113/+120 |
| | |||||
* | Merge pull request #2566 from heraklit256/composites-leave | Vsevolod Stakhov | 2018-10-18 | 1 | -5/+10 |
|\ | | | | | Minor Composite rule cleanup | ||||
| * | lower score for PHISH_EMOTION to 1.0 | heraklit256 | 2018-10-17 | 1 | -1/+1 |
| | | |||||
| * | lower score for HAS_ANON_DOMAIN to 0.1 | heraklit256 | 2018-10-17 | 1 | -1/+1 |
| | | |||||
| * | Include ARC into AUTH_NA rule | heraklit256 | 2018-10-04 | 1 | -2/+2 |
| | | |||||
| * | Composite rules: Minor cleanups | heraklit256 | 2018-10-04 | 1 | -1/+3 |
| | | | | | | | | Added descriptions to some rules and unified AND operator. | ||||
| * | leave original symbols for composite rules | heraklit256 | 2018-10-04 | 1 | -0/+3 |
| | | | | | | | | | | Removing original symbols if a composite rule triggers is kind of confusing and makes debugging harder. | ||||
* | | [Conf] Extend BAD_POLICIES composite | Vsevolod Stakhov | 2018-10-15 | 1 | -2/+2 |
| | | |||||
* | | add HAS_ONION_URI to HAS_ANON_DOMAIN | heraklit256 | 2018-10-13 | 1 | -1/+1 |
| | | |||||
* | | [Minor] Fixes for the previous project | Vsevolod Stakhov | 2018-10-09 | 1 | -2/+1 |
| | | |||||
* | | [Conf] Add composite to negate policies when fuzzy/bayes found | Vsevolod Stakhov | 2018-10-09 | 1 | -0/+6 |
| | | |||||
* | | Merge pull request #2543 from heraklit256/extended-dnswl-scores | Vsevolod Stakhov | 2018-10-08 | 1 | -2/+5 |
|\ \ | |/ |/| | leaving original symbols if DNSWL composite rules are triggered | ||||
| * | lower weight of RCVD_DKIM_ARC_DNSWL_HI to -1.0 | heraklit256 | 2018-10-08 | 1 | -1/+1 |
| | | |||||
| * | lower weight for RCVD_DKIM_ARC_DNSWL_MED and RCVD_DKIM_ARC_DNSWL_HIGH | heraklit256 | 2018-10-04 | 1 | -2/+2 |
| | | | | | | | | | | | | | | These were too high as other symbols - such as ARC_ALLOW - already introduce some negative scores. Thanks to @moisseev for reporting this. | ||||
| * | leaving original symbols if DNSWL composite rules are triggered | heraklit256 | 2018-09-27 | 1 | -0/+3 |
| | | | | | | | | | | | | Without policy = "leave", rspamd replaces the original symbols in log and message header (if enabled), which makes debugging more hard and is not used in this case. | ||||
* | | Fix description for composite rule RBL_SPAMHAUS_XBL_ANY | heraklit256 | 2018-09-27 | 1 | -1/+1 |
| | | |||||
* | | [Minor] Remove UNPRECISE_RCPT_DETAIL_FROM_SPAMMY | Alexander Moisseev | 2018-09-25 | 1 | -5/+0 |
| | | |||||
* | | add rule for domains trying to stay anonymous | heraklit256 | 2018-09-09 | 1 | -0/+5 |
| | | |||||
* | | improve composite rules for phish messages | heraklit256 | 2018-09-09 | 1 | -2/+2 |
| | | |||||
* | | add some missing composite rule description | heraklit256 | 2018-09-09 | 1 | -0/+2 |
| | | |||||
* | | add rule for spammy mails with detailled sender but generic recipients | heraklit256 | 2018-09-08 | 1 | -0/+6 |
| | | |||||
* | | add rule for phish messages containing emotional subjects | heraklit256 | 2018-09-08 | 1 | -0/+5 |
| | | |||||
* | | add rule for spammy PHP generated mails | heraklit256 | 2018-09-08 | 1 | -2/+7 |
|/ | |||||
* | also trigger DNSWL score rule in case mails are properly ARC signed | heraklit256 | 2018-08-27 | 1 | -6/+6 |
| | |||||
* | add negative weight to DNSWL entries | heraklit256 | 2018-08-07 | 1 | -2/+11 |
| | | | | | | | | However, a message must be correctly DKIM signed to get some more negative weight in case an received IP is listed with medium or high trust at DNSWL. This supersedes a first patch without the DKIM condition. | ||||
* | add rule for RCVD_UNAUTH_PBL | heraklit256 | 2018-05-21 | 1 | -0/+6 |
| | |||||
* | [Minor] In *_FORWARDING composites remove only weights | Alexander Moisseev | 2018-05-20 | 1 | -0/+2 |
| | |||||
* | [Minor] Suppress base64 symbols for mails sent with 1C v8 | Alexander Moisseev | 2017-08-23 | 1 | -0/+3 |
| | |||||
* | [Minor] Suppress MIME_BASE64_TEXT for Mail.Ru Mailer | Alexander Moisseev | 2017-07-31 | 1 | -1/+1 |
| | |||||
* | [Minor] Suppress CTYPE_MIXED_BOGUS for yandex.ru web-mail | Alexander Moisseev | 2017-04-17 | 1 | -0/+3 |
| | |||||
* | Updates to previous commit | Steve Freegard | 2017-03-23 | 1 | -2/+4 |
| | |||||
* | New rules | Steve Freegard | 2017-03-23 | 1 | -0/+10 |
| | |||||
* | [Conf] Add composite for hacked wordpress phishing | Vsevolod Stakhov | 2017-03-09 | 1 | -0/+4 |
| | |||||
* | [Rework] Composite configuration (#1270) | Andrew Lewis | 2016-12-21 | 1 | -43/+46 |
| | |||||
* | [Minor] Suppress SUBJ_EXCESS_BASE64 for Mail.Ru web-mail as well | Alexander Moisseev | 2016-12-12 | 1 | -1/+1 |
| | |||||
* | [Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902) | Alexander Moisseev | 2016-12-12 | 1 | -0/+3 |
| | |||||
* | [Minor] Name composite in a proper way | Vsevolod Stakhov | 2016-11-04 | 1 | -2/+1 |
| | |||||
* | [Minor] Avoid removing SPF failure symbols in composite | Andrew Lewis | 2016-10-04 | 1 | -0/+1 |
| | |||||
* | [Feature] Add R_DKIM_PERMFAIL symbol | Andrew Lewis | 2016-09-19 | 1 | -0/+5 |
| | |||||
* | [Minor] Fine-tune composites | Andrew Lewis | 2016-09-08 | 1 | -1/+3 |
| | |||||
* | [Feature] Add R_DKIM_NA / R_SPF_NA / AUTH_NA symbols | Andrew Lewis | 2016-08-29 | 1 | -0/+4 |
| | |||||
* | [Minor] Composite: Don't penalise for SPF/DKIM failure when DMARC passed | Andrew Lewis | 2016-08-22 | 1 | -0/+3 |
| | |||||
* | [Minor] Composite: Remove FORGED_RECIPIENTS if it's forwarding | Andrew Lewis | 2016-08-22 | 1 | -0/+3 |
| |