aboutsummaryrefslogtreecommitdiffstats
path: root/rules/regexp
Commit message (Collapse)AuthorAgeFilesLines
* [Fix] Replace space like characters in headers with plain spaceVsevolod Stakhov2017-12-261-2/+2
|
* [Minor] Reduce score MICROSOFT_SPAMAL2017-12-101-1/+1
| | | Many false positive
* [Minor] check for spam flag from United InternetFelix Schwarz2017-11-151-0/+7
| | | | | | This header is present for most outgoing messages from United Internet which includes "web.de" and GMX (freemailers which are very popular in Germany) as well as messages sent from 1and1 webhosting packages.
* [Fix] Cleanup mess with groupsVsevolod Stakhov2017-11-112-1/+8
|
* [Minor] Suppress base64 symbols for mails sent with 1C v8Alexander Moisseev2017-08-231-0/+8
|
* Improve CTYPE_MIXED_BOGUS and MIME_BASE64_TEXT rulesSteve Freegard2017-07-271-11/+0
|
* [Minor] Massive spelling correctionAlexander Moisseev2017-06-271-1/+1
| | | | by a bot https://github.com/ka7/misspell_fixer
* [Minor] Fix R_MISSING_CHARSET ruleAlexander Moisseev2017-05-191-1/+1
| | | | Do not trigger on messages with empty payload body as Content-Type header is not mandatory (RFC7231).
* [Minor] Fix ruleVsevolod Stakhov2017-04-251-1/+1
|
* [Fix] Fix R_BAD_CTE_7BIT ruleVsevolod Stakhov2017-04-241-14/+0
| | | | Issue: #1590
* [Minor] Suppress CTYPE_MIXED_BOGUS for yandex.ru web-mailAlexander Moisseev2017-04-171-0/+10
|
* New rulesSteve Freegard2017-04-121-0/+11
|
* Rules updatesSteve Freegard2017-03-291-1/+1
|
* Fix RCVD_TLS_ALL and add RCVD_TLS_LASTSteve Freegard2017-03-241-8/+0
|
* Rules fixesSteve Freegard2017-03-241-1/+1
|
* Updates to previous commitSteve Freegard2017-03-231-0/+8
|
* New rulesSteve Freegard2017-03-232-0/+13
|
* [Rework] Remove outdated SA rulesVsevolod Stakhov2017-03-233-234/+0
|
* [Fix] Fix parsing of cte in expressionsVsevolod Stakhov2017-03-071-1/+2
|
* [Minor] Update mail.ru Received header regexpAlexander Moisseev2017-02-201-1/+1
| | | | as header format has been changed by mail.ru
* [Minor] Recognize Icedove MUA as Thunderbird (#1359)Alexander Moisseev2017-01-211-1/+1
|
* [Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902)Alexander Moisseev2016-12-121-0/+10
|
* Merge pull request #1205 from smfreegard/rules_161129Vsevolod Stakhov2016-11-292-5/+11
|\ | | | | Adjust scores and add new rules
| * Remove score from SUBJECT_END_EXCLAIMSteve Freegard2016-11-291-1/+1
| |
| * Adjust scores and add new rulesSteve Freegard2016-11-292-4/+10
| |
* | [Minor] Remove duplicated ruleAndrew Lewis2016-11-292-9/+2
|/
* [Minor] Reduce scoring on some rulesAndrew Lewis2016-11-291-1/+1
|
* [Fix] Remove or fix hyperscan incompatible regexpsVsevolod Stakhov2016-11-262-9/+2
|
* [Config] Add groups for message id rulesVsevolod Stakhov2016-11-261-2/+5
|
* Fix another typo...Steve Freegard2016-11-211-1/+1
|
* Fix typoSteve Freegard2016-11-211-1/+1
|
* Rules updatesSteve Freegard2016-11-212-0/+130
|
* [Minor] Trim whitespaceAndrew Lewis2016-11-183-6/+6
|
* [Minor] Some linting for rulesAndrew Lewis2016-11-131-7/+0
|
* [Minor] Add missing requireAndrew Lewis2016-11-101-0/+1
|
* Fix test failure...Steve Freegard2016-11-091-1/+1
|
* Add compromised_host rulesSteve Freegard2016-11-091-0/+190
|
* [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeriesAndrew Lewis2016-11-091-0/+7
|
* [CritFix] Introduce raw content to text partsVsevolod Stakhov2016-10-311-1/+1
| | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule
* [Feature] Rules for scoring Google Message-ID fixesAndrew Lewis2016-09-231-0/+14
|
* [Minor] Finish reworking rulesAndrew Lewis2016-08-314-10/+61
|
* [Minor] Fix rules post-updateAndrew Lewis2016-08-304-10/+10
|
* [Minor] Update rule style: headers.luaAndrew Lewis2016-08-301-84/+427
|
* [Minor] Fix log messageAndrew Lewis2016-08-211-2/+2
| | | | - Also clean up X_PHP_EVAL rule
* kam_lotto7 moved to r_lotto_subjectBenny Pedersen2016-08-211-3/+1
| | | hopefully i did this right
* [Feature] Add rule for identifying mail sent by eval()'d PHP codeAndrew Lewis2016-08-191-0/+7
|
* [Minor] Zero scoring on some informational symbolsAndrew Lewis2016-08-191-1/+1
|
* [Fix] Fix possible FP in TRACKER_ID ruleVsevolod Stakhov2016-05-241-1/+1
|
* [Fix] Simplify MISSING_MIMEOLE ruleVsevolod Stakhov2016-05-241-5/+4
|
* Fix upstream_spam_filtersAlexey AL2016-04-231-0/+2
|