aboutsummaryrefslogtreecommitdiffstats
path: root/rules
Commit message (Collapse)AuthorAgeFilesLines
* [Minor] Some linting for rulesAndrew Lewis2016-11-136-38/+17
|
* [Minor] Add missing requireAndrew Lewis2016-11-101-0/+1
|
* Fix test failure...Steve Freegard2016-11-091-1/+1
|
* Add compromised_host rulesSteve Freegard2016-11-092-0/+191
|
* [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeriesAndrew Lewis2016-11-091-0/+7
|
* [Minor] Kill a few more globalsAndrew Lewis2016-11-031-3/+3
|
* [Feature] Track visibility of HTML elementsVsevolod Stakhov2016-11-011-1/+1
|
* [Feature] Consider more tags when doing WHITE_ON_WHITE ruleVsevolod Stakhov2016-11-011-1/+2
|
* [CritFix] Introduce raw content to text partsVsevolod Stakhov2016-10-311-1/+1
| | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule
* [Minor] Update http headers rulesAndrew Lewis2016-10-121-13/+82
| | | | | | - Fix some inaccuracies - Add new symbols - Use symbols from configuration
* [Minor] Retire FORGED_X_PHP_SCRIPT1 ruleAndrew Lewis2016-10-101-18/+0
|
* [Minor] Fix FORGED_X_PHP_SCRIPT1Andrew Lewis2016-10-081-4/+4
| | | | | | | - Narrow regex match - Fix syntax error - Fix comparison - Reduce scoring: worried this could match something real
* [Fix] Try avoid false-positives in HEADER_FORGED_MDN ruleAndrew Lewis2016-10-051-10/+12
| | | | | Issue: #621 Reported by: @AdUser
* [Feature] Rule to identify some X-PHP-Script forgeriesAndrew Lewis2016-10-031-0/+18
|
* [Feature] Rules for scoring Google Message-ID fixesAndrew Lewis2016-09-231-0/+14
|
* [Fix] Banish table.maxn from Lua partsAndrew Lewis2016-09-011-6/+5
|
* [Minor] Finish reworking rulesAndrew Lewis2016-08-316-70/+148
|
* [Minor] Fix rules post-updateAndrew Lewis2016-08-304-10/+10
|
* [Minor] Update rule style: headers.luaAndrew Lewis2016-08-301-84/+427
|
* [Minor] Fix log messageAndrew Lewis2016-08-211-2/+2
| | | | - Also clean up X_PHP_EVAL rule
* Merge pull request #867 from xpunkt/patch-1Vsevolod Stakhov2016-08-211-3/+1
|\ | | | | kam_lotto7 moved to r_lotto_subject
| * kam_lotto7 moved to r_lotto_subjectBenny Pedersen2016-08-211-3/+1
| | | | | | hopefully i did this right
* | Update forwarding.luaAlexey AL2016-08-211-1/+1
| |
* | [Feature] Add Yandex and Mail.ru forwarding rulesAlexey AL2016-08-211-0/+36
|/
* [Feature] Add rule for identifying mail sent by eval()'d PHP codeAndrew Lewis2016-08-191-0/+7
|
* [Minor] Zero scoring on some informational symbolsAndrew Lewis2016-08-193-7/+7
|
* [Fix] Further fixes for white on white ruleVsevolod Stakhov2016-08-081-1/+1
|
* [Fix] Fix length calculations in white on white ruleVsevolod Stakhov2016-08-081-3/+6
|
* [Fix] Some more fixes for low contrast fonts detectorVsevolod Stakhov2016-08-081-19/+11
|
* [Feature] Try to avoid FP for low contrast fonts detectionVsevolod Stakhov2016-08-081-2/+26
|
* [Feature] Properly implement R_WHITE_ON_WHITE ruleVsevolod Stakhov2016-08-051-0/+47
|
* [Feature] Remove old ugly rulesVsevolod Stakhov2016-08-051-6/+0
|
* [Fix] Trigger HTML_SHORT_LINK_IMG on any external imageVsevolod Stakhov2016-08-051-1/+1
|
* [Fix] Avoid `table.getn` method as it has been removed in lua 5.3Vsevolod Stakhov2016-07-042-4/+4
| | | | | Issue: #697 Reported by: @jessbo
* [Feature] Add support for non-standard BATV signaturesAlexander Moisseev2016-06-291-4/+24
|
* [Fix] Fix symbol name for spf soft failVsevolod Stakhov2016-06-081-1/+1
|
* [Fix] Fix processing of messages without received headersVsevolod Stakhov2016-06-051-14/+17
|
* [Fix] Fix possible FP in TRACKER_ID ruleVsevolod Stakhov2016-05-241-1/+1
|
* [Fix] Simplify MISSING_MIMEOLE ruleVsevolod Stakhov2016-05-241-5/+4
|
* [Minor] Fix percents output in R_PARTS_DIFFERVsevolod Stakhov2016-04-291-1/+2
|
* [Fix] Fix setting of score for parts differVsevolod Stakhov2016-04-281-2/+3
|
* [Fix] Fix dynamic scoring of subject symbolsVsevolod Stakhov2016-04-281-1/+1
| | | | Reported by: @moisseev
* [Minor] Rework subject rules as lua rulesVsevolod Stakhov2016-04-281-20/+41
|
* [Minor] Improve subject rulesAlexander Moisseev2016-04-281-36/+30
| | | | | Make scores depend on subject length Also resolves #548
* [Fix] Fix and rescore R_PARTS_DIFFER logicVsevolod Stakhov2016-04-271-6/+15
| | | | Signed-off-by: Vsevolod Stakhov <vsevolod@highsecure.ru>
* [Minor] Combine `header` and `headers` metric groupsAlexander Moisseev2016-04-261-7/+7
|
* Add MISSING_FROM testSteve Freegard2016-04-261-0/+12
|
* Update MULTIPLE_UNIQUE_HEADER to include RFC5322 rulesSteve Freegard2016-04-261-1/+11
|
* Raise MISSING_DATE on empty stringSteve Freegard2016-04-261-1/+2
|
* Fix `RCVD_TLS_ALL` rule when there are no `Received` headersAlexander Moisseev2016-04-251-0/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-18 23:09:20 +0000