summaryrefslogtreecommitdiffstats
path: root/rules/regexp
Commit message (Collapse)AuthorAgeFilesLines
* [Fix] Fix usage of util.parse_mail_addressVsevolod Stakhov2018-03-311-2/+2
|
* [Minor] Catch upstream `X-Spam` flag as well with `SPAM_FLAG` regexpAlexander Moisseev2018-03-201-1/+1
|
* Fix HAS_GUC_PROXY_URI and HAS_GOOGLE_REDIRSteve Freegard2018-03-191-2/+2
|
* Add new header rulesSteve Freegard2018-03-191-0/+33
|
* Fix missing regexpSteve Freegard2018-03-191-0/+1
|
* Improve URI_HIDDEN_PATH based on corpus testingSteve Freegard2018-03-191-5/+17
|
* Split MISSING_SUBJECT into EMPTY_SUBJECT based on corpus testingSteve Freegard2018-03-191-5/+11
|
* [Minor] Treat 'In-Reply-To' as 'References'Vsevolod Stakhov2018-03-111-1/+1
| | | | | Issue: #2042 Closes: #2042
* [Fix] Fix *_EXCESS_BASE64 rulesAlexander Moisseev2018-03-051-9/+9
|
* [Minor] Fix various minor issuesVsevolod Stakhov2018-03-031-12/+0
|
* Add additional needs_encoding rulesSteve Freegard2018-03-011-0/+20
|
* [Fix] Replace space like characters in headers with plain spaceVsevolod Stakhov2017-12-261-2/+2
|
* [Minor] Reduce score MICROSOFT_SPAMAL2017-12-101-1/+1
| | | Many false positive
* [Minor] check for spam flag from United InternetFelix Schwarz2017-11-151-0/+7
| | | | | | This header is present for most outgoing messages from United Internet which includes "web.de" and GMX (freemailers which are very popular in Germany) as well as messages sent from 1and1 webhosting packages.
* [Fix] Cleanup mess with groupsVsevolod Stakhov2017-11-112-1/+8
|
* [Minor] Suppress base64 symbols for mails sent with 1C v8Alexander Moisseev2017-08-231-0/+8
|
* Improve CTYPE_MIXED_BOGUS and MIME_BASE64_TEXT rulesSteve Freegard2017-07-271-11/+0
|
* [Minor] Massive spelling correctionAlexander Moisseev2017-06-271-1/+1
| | | | by a bot https://github.com/ka7/misspell_fixer
* [Minor] Fix R_MISSING_CHARSET ruleAlexander Moisseev2017-05-191-1/+1
| | | | Do not trigger on messages with empty payload body as Content-Type header is not mandatory (RFC7231).
* [Minor] Fix ruleVsevolod Stakhov2017-04-251-1/+1
|
* [Fix] Fix R_BAD_CTE_7BIT ruleVsevolod Stakhov2017-04-241-14/+0
| | | | Issue: #1590
* [Minor] Suppress CTYPE_MIXED_BOGUS for yandex.ru web-mailAlexander Moisseev2017-04-171-0/+10
|
* New rulesSteve Freegard2017-04-121-0/+11
|
* Rules updatesSteve Freegard2017-03-291-1/+1
|
* Fix RCVD_TLS_ALL and add RCVD_TLS_LASTSteve Freegard2017-03-241-8/+0
|
* Rules fixesSteve Freegard2017-03-241-1/+1
|
* Updates to previous commitSteve Freegard2017-03-231-0/+8
|
* New rulesSteve Freegard2017-03-232-0/+13
|
* [Rework] Remove outdated SA rulesVsevolod Stakhov2017-03-233-234/+0
|
* [Fix] Fix parsing of cte in expressionsVsevolod Stakhov2017-03-071-1/+2
|
* [Minor] Update mail.ru Received header regexpAlexander Moisseev2017-02-201-1/+1
| | | | as header format has been changed by mail.ru
* [Minor] Recognize Icedove MUA as Thunderbird (#1359)Alexander Moisseev2017-01-211-1/+1
|
* [Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902)Alexander Moisseev2016-12-121-0/+10
|
* Merge pull request #1205 from smfreegard/rules_161129Vsevolod Stakhov2016-11-292-5/+11
|\ | | | | Adjust scores and add new rules
| * Remove score from SUBJECT_END_EXCLAIMSteve Freegard2016-11-291-1/+1
| |
| * Adjust scores and add new rulesSteve Freegard2016-11-292-4/+10
| |
* | [Minor] Remove duplicated ruleAndrew Lewis2016-11-292-9/+2
|/
* [Minor] Reduce scoring on some rulesAndrew Lewis2016-11-291-1/+1
|
* [Fix] Remove or fix hyperscan incompatible regexpsVsevolod Stakhov2016-11-262-9/+2
|
* [Config] Add groups for message id rulesVsevolod Stakhov2016-11-261-2/+5
|
* Fix another typo...Steve Freegard2016-11-211-1/+1
|
* Fix typoSteve Freegard2016-11-211-1/+1
|
* Rules updatesSteve Freegard2016-11-212-0/+130
|
* [Minor] Trim whitespaceAndrew Lewis2016-11-183-6/+6
|
* [Minor] Some linting for rulesAndrew Lewis2016-11-131-7/+0
|
* [Minor] Add missing requireAndrew Lewis2016-11-101-0/+1
|
* Fix test failure...Steve Freegard2016-11-091-1/+1
|
* Add compromised_host rulesSteve Freegard2016-11-091-0/+190
|
* [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeriesAndrew Lewis2016-11-091-0/+7
|
* [CritFix] Introduce raw content to text partsVsevolod Stakhov2016-10-311-1/+1
| | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule