summaryrefslogtreecommitdiffstats
path: root/rules/misc.lua
Commit message (Collapse)AuthorAgeFilesLines
...
* [Minor] Avoid nil indexAlexander Moisseev2016-12-031-1/+1
|
* [Minor] Make FREEMAIL_REPLYTO_NEQ_FROM_DOM normal symbolAndrew Lewis2016-11-291-1/+0
|
* Adjust scores and add new rulesSteve Freegard2016-11-291-0/+22
|
* [Minor] Avoid nil indexAndrew Lewis2016-11-281-1/+2
|
* Update commit as per commentsSteve Freegard2016-11-251-309/+70
|
* Fix trailing whitespace for testsSteve Freegard2016-11-211-6/+6
|
* Rules updatesSteve Freegard2016-11-211-0/+582
|
* [Minor] Lint Lua plugins & global functionsAndrew Lewis2016-11-141-1/+1
|
* [Minor] Some linting for rulesAndrew Lewis2016-11-131-8/+4
|
* [Minor] Retire FORGED_X_PHP_SCRIPT1 ruleAndrew Lewis2016-10-101-18/+0
|
* [Minor] Fix FORGED_X_PHP_SCRIPT1Andrew Lewis2016-10-081-4/+4
| | | | | | | - Narrow regex match - Fix syntax error - Fix comparison - Reduce scoring: worried this could match something real
* [Fix] Try avoid false-positives in HEADER_FORGED_MDN ruleAndrew Lewis2016-10-051-10/+12
| | | | | Issue: #621 Reported by: @AdUser
* [Feature] Rule to identify some X-PHP-Script forgeriesAndrew Lewis2016-10-031-0/+18
|
* [Minor] Finish reworking rulesAndrew Lewis2016-08-311-59/+81
|
* [Minor] Zero scoring on some informational symbolsAndrew Lewis2016-08-191-3/+3
|
* [Feature] Remove old ugly rulesVsevolod Stakhov2016-08-051-6/+0
|
* [Fix] Avoid `table.getn` method as it has been removed in lua 5.3Vsevolod Stakhov2016-07-041-1/+1
| | | | | Issue: #697 Reported by: @jessbo
* [Feature] Add support for non-standard BATV signaturesAlexander Moisseev2016-06-291-4/+24
|
* [Minor] Fix percents output in R_PARTS_DIFFERVsevolod Stakhov2016-04-291-1/+2
|
* [Fix] Fix setting of score for parts differVsevolod Stakhov2016-04-281-2/+3
|
* [Fix] Fix dynamic scoring of subject symbolsVsevolod Stakhov2016-04-281-1/+1
| | | | Reported by: @moisseev
* [Minor] Rework subject rules as lua rulesVsevolod Stakhov2016-04-281-20/+41
|
* [Minor] Improve subject rulesAlexander Moisseev2016-04-281-36/+30
| | | | | Make scores depend on subject length Also resolves #548
* [Fix] Fix and rescore R_PARTS_DIFFER logicVsevolod Stakhov2016-04-271-6/+15
| | | | Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* [Minor] Combine `header` and `headers` metric groupsAlexander Moisseev2016-04-261-7/+7
|
* Add MISSING_FROM testSteve Freegard2016-04-261-0/+12
|
* Update MULTIPLE_UNIQUE_HEADER to include RFC5322 rulesSteve Freegard2016-04-261-1/+11
|
* Raise MISSING_DATE on empty stringSteve Freegard2016-04-261-1/+2
|
* Fix `RCVD_TLS_ALL` rule when there are no `Received` headersAlexander Moisseev2016-04-251-0/+1
|
* New rulesSteve Freegard2016-04-221-0/+74
|
* [Minor] Attach domain part to `R_SUSPICIOUS_URL`Alexander Moisseev2016-04-151-9/+3
|
* [Minor] Raise `LONG_SUBJ` thresholdAlexander Moisseev2016-03-171-1/+1
|
* [Minor] Use utf8 length for subjectVsevolod Stakhov2016-03-051-1/+1
|
* Add LONG_SUBJ ruleAlexander Moisseev2016-03-051-0/+14
|
* Switch the rest to apache 2Vsevolod Stakhov2016-02-041-22/+12
|
* Fix rule when SMTP from is unavailableVsevolod Stakhov2016-01-291-1/+1
|
* Fix rules to avoid nil indexingVsevolod Stakhov2016-01-281-7/+15
|
* Fix HEADER_FORGED_MDN ruleVsevolod Stakhov2016-01-251-1/+1
|
* Add parsing to MDN rulesVsevolod Stakhov2016-01-251-4/+17
| | | | Issue: #480
* Add rule to detect spammers attempts to cheat mime parsingVsevolod Stakhov2016-01-241-0/+33
|
* Use `task:get_from()` to get senderVsevolod Stakhov2016-01-221-2/+2
|
* Add support for forged confirmation headersVsevolod Stakhov2016-01-221-1/+40
| | | | | | Issue: #480 Reported by: @AdUser Patch by: @AdUser
* Add `BROKEN_HEADERS` ruleVsevolod Stakhov2016-01-221-0/+13
|
* Add SUBJ_ALL_CAPS ruleVsevolod Stakhov2015-11-261-1/+25
|
* Add R_SUSPICIOUS_URL rule that detects obfusicated URL'sVsevolod Stakhov2015-11-201-0/+19
|
* Move misclenaous rules to a separate file.Vsevolod Stakhov2015-08-071-0/+92