aboutsummaryrefslogtreecommitdiffstats
path: root/rules
Commit message (Collapse)AuthorAgeFilesLines
* [Minor] Suppress *_BASE64 for mails sent with Mail.Ru web-mail (#902)Alexander Moisseev2016-12-121-0/+10
|
* [Minor] Fix condition, avoid `nil` indexAlexander Moisseev2016-12-041-4/+6
|
* [Minor] Avoid nil indexAlexander Moisseev2016-12-041-3/+3
|
* [Minor] Avoid nil indexAlexander Moisseev2016-12-031-1/+1
|
* [Feature] Add EXT_CSS ruleVsevolod Stakhov2016-12-011-0/+32
|
* [Minor] Make FREEMAIL_REPLYTO_NEQ_FROM_DOM normal symbolAndrew Lewis2016-11-291-1/+0
|
* Merge pull request #1205 from smfreegard/rules_161129Vsevolod Stakhov2016-11-294-6/+34
|\ | | | | Adjust scores and add new rules
| * Remove score from SUBJECT_END_EXCLAIMSteve Freegard2016-11-291-1/+1
| |
| * Adjust scores and add new rulesSteve Freegard2016-11-294-5/+33
| |
* | [Minor] Remove duplicated ruleAndrew Lewis2016-11-292-9/+2
|/
* [Minor] Reduce scoring on some rulesAndrew Lewis2016-11-292-2/+2
|
* [Minor] Avoid nil indexAndrew Lewis2016-11-281-1/+2
|
* [Fix] Remove or fix hyperscan incompatible regexpsVsevolod Stakhov2016-11-262-9/+2
|
* [Minor] Really set groupVsevolod Stakhov2016-11-261-6/+6
|
* [Config] Add groups for message id rulesVsevolod Stakhov2016-11-262-8/+11
|
* [Minor] Move mid checks to a separated rules fileVsevolod Stakhov2016-11-262-0/+67
|
* Update commit as per commentsSteve Freegard2016-11-251-309/+70
|
* Fix trailing whitespace for testsSteve Freegard2016-11-211-6/+6
|
* Fix another typo...Steve Freegard2016-11-211-1/+1
|
* Fix typoSteve Freegard2016-11-211-1/+1
|
* Rules updatesSteve Freegard2016-11-214-0/+713
|
* [Minor] Trim whitespaceAndrew Lewis2016-11-184-9/+9
|
* [Minor] Fix invocation of fun.eachAndrew Lewis2016-11-151-5/+5
|
* [Minor] Lint Lua plugins & global functionsAndrew Lewis2016-11-143-3/+3
|
* [Minor] Some linting for rulesAndrew Lewis2016-11-136-38/+17
|
* [Minor] Add missing requireAndrew Lewis2016-11-101-0/+1
|
* Fix test failure...Steve Freegard2016-11-091-1/+1
|
* Add compromised_host rulesSteve Freegard2016-11-092-0/+191
|
* [Feature] Rule to detect some obvious X-PHP-Originating-Script forgeriesAndrew Lewis2016-11-091-0/+7
|
* [Minor] Kill a few more globalsAndrew Lewis2016-11-031-3/+3
|
* [Feature] Track visibility of HTML elementsVsevolod Stakhov2016-11-011-1/+1
|
* [Feature] Consider more tags when doing WHITE_ON_WHITE ruleVsevolod Stakhov2016-11-011-1/+2
|
* [CritFix] Introduce raw content to text partsVsevolod Stakhov2016-10-311-1/+1
| | | | | | | | | | | | | | Previously we had the following types of text content: - `orig`: MIME *decoded* content - `content`: same as `orig` but converted to utf8 and without HTML tags - `stripped`: same as `content` but without newlines Now we add `raw`: - `raw`: raw mime content as it was in an original message This also fixes R_BAD_CTE_7BIT rule
* [Minor] Update http headers rulesAndrew Lewis2016-10-121-13/+82
| | | | | | - Fix some inaccuracies - Add new symbols - Use symbols from configuration
* [Minor] Retire FORGED_X_PHP_SCRIPT1 ruleAndrew Lewis2016-10-101-18/+0
|
* [Minor] Fix FORGED_X_PHP_SCRIPT1Andrew Lewis2016-10-081-4/+4
| | | | | | | - Narrow regex match - Fix syntax error - Fix comparison - Reduce scoring: worried this could match something real
* [Fix] Try avoid false-positives in HEADER_FORGED_MDN ruleAndrew Lewis2016-10-051-10/+12
| | | | | Issue: #621 Reported by: @AdUser
* [Feature] Rule to identify some X-PHP-Script forgeriesAndrew Lewis2016-10-031-0/+18
|
* [Feature] Rules for scoring Google Message-ID fixesAndrew Lewis2016-09-231-0/+14
|
* [Fix] Banish table.maxn from Lua partsAndrew Lewis2016-09-011-6/+5
|
* [Minor] Finish reworking rulesAndrew Lewis2016-08-316-70/+148
|
* [Minor] Fix rules post-updateAndrew Lewis2016-08-304-10/+10
|
* [Minor] Update rule style: headers.luaAndrew Lewis2016-08-301-84/+427
|
* [Minor] Fix log messageAndrew Lewis2016-08-211-2/+2
| | | | - Also clean up X_PHP_EVAL rule
* Merge pull request #867 from xpunkt/patch-1Vsevolod Stakhov2016-08-211-3/+1
|\ | | | | kam_lotto7 moved to r_lotto_subject
| * kam_lotto7 moved to r_lotto_subjectBenny Pedersen2016-08-211-3/+1
| | | | | | hopefully i did this right
* | Update forwarding.luaAlexey AL2016-08-211-1/+1
| |
* | [Feature] Add Yandex and Mail.ru forwarding rulesAlexey AL2016-08-211-0/+36
|/
* [Feature] Add rule for identifying mail sent by eval()'d PHP codeAndrew Lewis2016-08-191-0/+7
|
* [Minor] Zero scoring on some informational symbolsAndrew Lewis2016-08-193-7/+7
|