aboutsummaryrefslogtreecommitdiffstats
path: root/rules
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #1420 from fatalbanana/newrulesVsevolod Stakhov2017-02-131-2/+30
|\ | | | | New rules
| * [Feature] Add FROM_NAME_EXCESS_SPACE ruleAndrew Lewis2017-02-131-0/+6
| |
| * [Feature] Add REPLYTO_EMAIL_HAS_TITLE ruleAndrew Lewis2017-02-131-0/+16
| |
| * [Minor] Yield matched title in FROM_NAME_HAS_TITLE ruleAndrew Lewis2017-02-131-2/+8
| |
* | [Feature] Implement received headers flagsVsevolod Stakhov2017-02-131-10/+14
| |
* | [Fix] Improve OMOGRAPH_URL ruleVsevolod Stakhov2017-02-131-3/+14
|/ | | | | | - Calculate omographs in each dot component separately - Normalize omographs - Count utf8 characters properly
* [Feature] Add more meta tokens from received headersVsevolod Stakhov2017-02-111-10/+38
|
* [Minor] Store metatokens in task cacheVsevolod Stakhov2017-02-101-4/+12
|
* [Feature] Detect URLs with suspicious omographsVsevolod Stakhov2017-02-041-1/+25
|
* [Minor] Recognize Icedove MUA as Thunderbird (#1359)Alexander Moisseev2017-01-211-1/+1
|
* [Fix] Stop hardcoding of lua in CVsevolod Stakhov2017-01-112-0/+518
|
* [Minor] Be more strict about bad mime structureVsevolod Stakhov2017-01-091-8/+3
|
* [Minor] Use gmt dates if possibleVsevolod Stakhov2016-12-231-2/+2
|
* [Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902)Alexander Moisseev2016-12-121-0/+10
|
* [Minor] Fix condition, avoid `nil` indexAlexander Moisseev2016-12-041-4/+6
|
* [Minor] Avoid nil indexAlexander Moisseev2016-12-041-3/+3
|
* [Minor] Avoid nil indexAlexander Moisseev2016-12-031-1/+1
|
* [Feature] Add EXT_CSS ruleVsevolod Stakhov2016-12-011-0/+32
|
* [Minor] Make FREEMAIL_REPLYTO_NEQ_FROM_DOM normal symbolAndrew Lewis2016-11-291-1/+0
|
* Merge pull request #1205 from smfreegard/rules_161129Vsevolod Stakhov2016-11-294-6/+34
|\ | | | | Adjust scores and add new rules
| * Remove score from SUBJECT_END_EXCLAIMSteve Freegard2016-11-291-1/+1
| |
| * Adjust scores and add new rulesSteve Freegard2016-11-294-5/+33
| |
* | [Minor] Remove duplicated ruleAndrew Lewis2016-11-292-9/+2
|/
* [Minor] Reduce scoring on some rulesAndrew Lewis2016-11-292-2/+2
|
* [Minor] Avoid nil indexAndrew Lewis2016-11-281-1/+2
|
* [Fix] Remove or fix hyperscan incompatible regexpsVsevolod Stakhov2016-11-262-9/+2
|
* [Minor] Really set groupVsevolod Stakhov2016-11-261-6/+6
|
* [Config] Add groups for message id rulesVsevolod Stakhov2016-11-262-8/+11
|
* [Minor] Move mid checks to a separated rules fileVsevolod Stakhov2016-11-262-0/+67
|
* Update commit as per commentsSteve Freegard2016-11-251-309/+70
|
* Fix trailing whitespace for testsSteve Freegard2016-11-211-6/+6
|
* Fix another typo...Steve Freegard2016-11-211-1/+1
|
* Fix typoSteve Freegard2016-11-211-1/+1
|
* Rules updatesSteve Freegard2016-11-214-0/+713
|
* [Minor] Trim whitespaceAndrew Lewis2016-11-184-9/+9
|
* [Minor] Fix invocation of fun.eachAndrew Lewis2016-11-151-5/+5
|
* [Minor] Lint Lua plugins & global functionsAndrew Lewis2016-11-143-3/+3
|
* [Minor] Some linting for rulesAndrew Lewis2016-11-136-38/+17
|
* [Minor] Add missing requireAndrew Lewis2016-11-101-0/+1
|
* Fix test failure...Steve Freegard2016-11-091-1/+1
|
* Add compromised_host rulesSteve Freegard2016-11-092-0/+191
|
* [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeriesAndrew Lewis2016-11-091-0/+7
|
* [Minor] Kill a few more globalsAndrew Lewis2016-11-031-3/+3
|
* [Feature] Track visibility of HTML elementsVsevolod Stakhov2016-11-011-1/+1
|
* [Feature] Consider more tags when doing WHITE_ON_WHITE ruleVsevolod Stakhov2016-11-011-1/+2
|
* [CritFix] Introduce raw content to text partsVsevolod Stakhov2016-10-311-1/+1
| | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule
* [Minor] Update http headers rulesAndrew Lewis2016-10-121-13/+82
| | | | | | - Fix some inaccuracies - Add new symbols - Use symbols from configuration
* [Minor] Retire FORGED_X_PHP_SCRIPT1 ruleAndrew Lewis2016-10-101-18/+0
|
* [Minor] Fix FORGED_X_PHP_SCRIPT1Andrew Lewis2016-10-081-4/+4
| | | | | | | - Narrow regex match - Fix syntax error - Fix comparison - Reduce scoring: worried this could match something real
* [Fix] Try avoid false-positives in HEADER_FORGED_MDN ruleAndrew Lewis2016-10-051-10/+12
| | | | | Issue: #621 Reported by: @AdUser