Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Merge pull request #1205 from smfreegard/rules_161129 | Vsevolod Stakhov | 2016-11-29 | 4 | -6/+34 | |
|\ | | | | | Adjust scores and add new rules | |||||
| * | Remove score from SUBJECT_END_EXCLAIM | Steve Freegard | 2016-11-29 | 1 | -1/+1 | |
| | | ||||||
| * | Adjust scores and add new rules | Steve Freegard | 2016-11-29 | 4 | -5/+33 | |
| | | ||||||
* | | [Minor] Remove duplicated rule | Andrew Lewis | 2016-11-29 | 2 | -9/+2 | |
|/ | ||||||
* | [Minor] Reduce scoring on some rules | Andrew Lewis | 2016-11-29 | 2 | -2/+2 | |
| | ||||||
* | [Minor] Avoid nil index | Andrew Lewis | 2016-11-28 | 1 | -1/+2 | |
| | ||||||
* | [Fix] Remove or fix hyperscan incompatible regexps | Vsevolod Stakhov | 2016-11-26 | 2 | -9/+2 | |
| | ||||||
* | [Minor] Really set group | Vsevolod Stakhov | 2016-11-26 | 1 | -6/+6 | |
| | ||||||
* | [Config] Add groups for message id rules | Vsevolod Stakhov | 2016-11-26 | 2 | -8/+11 | |
| | ||||||
* | [Minor] Move mid checks to a separated rules file | Vsevolod Stakhov | 2016-11-26 | 2 | -0/+67 | |
| | ||||||
* | Update commit as per comments | Steve Freegard | 2016-11-25 | 1 | -309/+70 | |
| | ||||||
* | Fix trailing whitespace for tests | Steve Freegard | 2016-11-21 | 1 | -6/+6 | |
| | ||||||
* | Fix another typo... | Steve Freegard | 2016-11-21 | 1 | -1/+1 | |
| | ||||||
* | Fix typo | Steve Freegard | 2016-11-21 | 1 | -1/+1 | |
| | ||||||
* | Rules updates | Steve Freegard | 2016-11-21 | 4 | -0/+713 | |
| | ||||||
* | [Minor] Trim whitespace | Andrew Lewis | 2016-11-18 | 4 | -9/+9 | |
| | ||||||
* | [Minor] Fix invocation of fun.each | Andrew Lewis | 2016-11-15 | 1 | -5/+5 | |
| | ||||||
* | [Minor] Lint Lua plugins & global functions | Andrew Lewis | 2016-11-14 | 3 | -3/+3 | |
| | ||||||
* | [Minor] Some linting for rules | Andrew Lewis | 2016-11-13 | 6 | -38/+17 | |
| | ||||||
* | [Minor] Add missing require | Andrew Lewis | 2016-11-10 | 1 | -0/+1 | |
| | ||||||
* | Fix test failure... | Steve Freegard | 2016-11-09 | 1 | -1/+1 | |
| | ||||||
* | Add compromised_host rules | Steve Freegard | 2016-11-09 | 2 | -0/+191 | |
| | ||||||
* | [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeries | Andrew Lewis | 2016-11-09 | 1 | -0/+7 | |
| | ||||||
* | [Minor] Kill a few more globals | Andrew Lewis | 2016-11-03 | 1 | -3/+3 | |
| | ||||||
* | [Feature] Track visibility of HTML elements | Vsevolod Stakhov | 2016-11-01 | 1 | -1/+1 | |
| | ||||||
* | [Feature] Consider more tags when doing WHITE_ON_WHITE rule | Vsevolod Stakhov | 2016-11-01 | 1 | -1/+2 | |
| | ||||||
* | [CritFix] Introduce raw content to text parts | Vsevolod Stakhov | 2016-10-31 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule | |||||
* | [Minor] Update http headers rules | Andrew Lewis | 2016-10-12 | 1 | -13/+82 | |
| | | | | | | - Fix some inaccuracies - Add new symbols - Use symbols from configuration | |||||
* | [Minor] Retire FORGED_X_PHP_SCRIPT1 rule | Andrew Lewis | 2016-10-10 | 1 | -18/+0 | |
| | ||||||
* | [Minor] Fix FORGED_X_PHP_SCRIPT1 | Andrew Lewis | 2016-10-08 | 1 | -4/+4 | |
| | | | | | | | - Narrow regex match - Fix syntax error - Fix comparison - Reduce scoring: worried this could match something real | |||||
* | [Fix] Try avoid false-positives in HEADER_FORGED_MDN rule | Andrew Lewis | 2016-10-05 | 1 | -10/+12 | |
| | | | | | Issue: #621 Reported by: @AdUser | |||||
* | [Feature] Rule to identify some X-PHP-Script forgeries | Andrew Lewis | 2016-10-03 | 1 | -0/+18 | |
| | ||||||
* | [Feature] Rules for scoring Google Message-ID fixes | Andrew Lewis | 2016-09-23 | 1 | -0/+14 | |
| | ||||||
* | [Fix] Banish table.maxn from Lua parts | Andrew Lewis | 2016-09-01 | 1 | -6/+5 | |
| | ||||||
* | [Minor] Finish reworking rules | Andrew Lewis | 2016-08-31 | 6 | -70/+148 | |
| | ||||||
* | [Minor] Fix rules post-update | Andrew Lewis | 2016-08-30 | 4 | -10/+10 | |
| | ||||||
* | [Minor] Update rule style: headers.lua | Andrew Lewis | 2016-08-30 | 1 | -84/+427 | |
| | ||||||
* | [Minor] Fix log message | Andrew Lewis | 2016-08-21 | 1 | -2/+2 | |
| | | | | - Also clean up X_PHP_EVAL rule | |||||
* | Merge pull request #867 from xpunkt/patch-1 | Vsevolod Stakhov | 2016-08-21 | 1 | -3/+1 | |
|\ | | | | | kam_lotto7 moved to r_lotto_subject | |||||
| * | kam_lotto7 moved to r_lotto_subject | Benny Pedersen | 2016-08-21 | 1 | -3/+1 | |
| | | | | | | hopefully i did this right | |||||
* | | Update forwarding.lua | Alexey AL | 2016-08-21 | 1 | -1/+1 | |
| | | ||||||
* | | [Feature] Add Yandex and Mail.ru forwarding rules | Alexey AL | 2016-08-21 | 1 | -0/+36 | |
|/ | ||||||
* | [Feature] Add rule for identifying mail sent by eval()'d PHP code | Andrew Lewis | 2016-08-19 | 1 | -0/+7 | |
| | ||||||
* | [Minor] Zero scoring on some informational symbols | Andrew Lewis | 2016-08-19 | 3 | -7/+7 | |
| | ||||||
* | [Fix] Further fixes for white on white rule | Vsevolod Stakhov | 2016-08-08 | 1 | -1/+1 | |
| | ||||||
* | [Fix] Fix length calculations in white on white rule | Vsevolod Stakhov | 2016-08-08 | 1 | -3/+6 | |
| | ||||||
* | [Fix] Some more fixes for low contrast fonts detector | Vsevolod Stakhov | 2016-08-08 | 1 | -19/+11 | |
| | ||||||
* | [Feature] Try to avoid FP for low contrast fonts detection | Vsevolod Stakhov | 2016-08-08 | 1 | -2/+26 | |
| | ||||||
* | [Feature] Properly implement R_WHITE_ON_WHITE rule | Vsevolod Stakhov | 2016-08-05 | 1 | -0/+47 | |
| | ||||||
* | [Feature] Remove old ugly rules | Vsevolod Stakhov | 2016-08-05 | 1 | -6/+0 | |
| |