| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | [Fix] Fix dynamic_symbols in the multimap plugin | Vsevolod Stakhov | 2024-05-20 | 1 | -2/+2 | |
| |/ | ||||||
| * | [Minor] Add bad file types commonly found in archives attached to malspam | twesterhever | 2024-04-28 | 1 | -0/+4 | |
| | | ||||||
| * | [Enhancement] Exclude false positives of MIME_DOUBLE_BAD_EXTENSION | Dmitriy Alekseev | 2024-04-11 | 1 | -1/+6 | |
| | | | | If we detected extension of the file and this extension is equal to the real extension then we should not pass second extension to check function as it will trigger false positive for MIME_DOUBLE_BAD_EXTENSION. | |||||
| * | [Fix] Honor dynamic thresholds for greylisting module | Vsevolod Stakhov | 2024-04-05 | 1 | -1/+1 | |
| | | ||||||
| * | [Minor] Remove redundant metric name | Vsevolod Stakhov | 2024-04-05 | 1 | -1/+1 | |
| | | ||||||
| * | [Fix] Update greylisting threshold as it can be easily dynamic | Vsevolod Stakhov | 2024-04-05 | 1 | -7/+4 | |
| | | | | | | Issue: #4908 Closes: #4908 | |||||
| * | [Minor] Fix format of example setting (rspamd.com#736) | Andrew Lewis | 2024-03-25 | 1 | -1/+1 | |
| | | ||||||
| * | [Rework] Another rework of the dkim signing logic | Vsevolod Stakhov | 2024-03-09 | 1 | -21/+18 | |
| | | ||||||
| * | [Rework] Allow multiple conditions for dkim signing when using vault/redis | Vsevolod Stakhov | 2024-03-09 | 1 | -1/+1 | |
| | | ||||||
| * | [Fix] Allow different template expansion parameters | Vsevolod Stakhov | 2024-02-21 | 1 | -3/+3 | |
| | | | | | Probably one of the most dirty hacks I've used in the Lua code in Rspamd... | |||||
| * | Revert "[Fix] Fix history key, as we use `{=` and not `{{` in templates" | Vsevolod Stakhov | 2024-02-21 | 1 | -1/+1 | |
| | | ||||||
| * | [Fix] Fix history key, as we use `{=` and not `{{` in templates | Vsevolod Stakhov | 2024-02-21 | 1 | -1/+1 | |
| | | ||||||
| * | [Fix] Encode headers in metadata exporter | Vsevolod Stakhov | 2024-02-13 | 1 | -7/+8 | |
| | | | | | Issue: #4808 | |||||
| * | [Minor] Fix doc string | Vsevolod Stakhov | 2024-01-29 | 1 | -1/+1 | |
| | | ||||||
| * | [Feature] Allow to add templates to redis history prefix | Vsevolod Stakhov | 2024-01-29 | 1 | -11/+14 | |
| | | | | | | Issue: #4793 Closes: #4793 | |||||
| * | [Rework] Breaking: Do not report module as action | Alexander Moisseev | 2024-01-28 | 1 | -2/+1 | |
| | | | | | | | | | in the /history response since we have the `passthrough_module` key for that purpose. While that might be handy in some situations, mixing actions and module names is confusing in general. | |||||
| * | [Minor] Allow the same logic for recipients | Vsevolod Stakhov | 2024-01-27 | 1 | -5/+41 | |
| | | ||||||
| * | [Feature] Add extraction type for `from` maps | Vsevolod Stakhov | 2024-01-27 | 1 | -5/+29 | |
| | | | | | | | | | | Attribute name: `extract_from`. Possible values: * `default` - try smtp, if not exists try mime * `mime` - check mime only * `smtp` - check smtp only * `both` - try to match both | |||||
| * | [Minor] rbl: fix warning | Andrew Lewis | 2024-01-25 | 1 | -1/+1 | |
| | | ||||||
| * | [Fix] multimap: rawtext: use decoded parts | Andrew Lewis | 2024-01-19 | 1 | -1/+1 | |
| | | ||||||
| * | [Feature] Support suppressing DMARC reporting for particular recipients | Andrew Lewis | 2024-01-10 | 1 | -1/+13 | |
| | | ||||||
| * | [Minor] Fix typo in hfilter map | moisseev | 2023-12-24 | 1 | -2/+2 | |
| | | ||||||
| * | [Minor] Log a debug message when ratelimit skipped | moisseev | 2023-12-22 | 1 | -0/+1 | |
| | | | | | for a local request | |||||
| * | [Minor] ratelimit: make per-bucket symbol behave like global symbol | Andrew Lewis | 2023-12-21 | 1 | -1/+1 | |
| | | ||||||
| * | [Feature] rbl: support disabling or replacing url_whitelist per RBL | Andrew Lewis | 2023-12-12 | 1 | -2/+2 | |
| | | ||||||
| * | [Fix] known_senders: fix config handling | Andrew Lewis | 2023-11-09 | 1 | -2/+3 | |
| | | ||||||
| * | [Minor] force_actions: set a group for symbols | Andrew Lewis | 2023-11-04 | 1 | -1/+3 | |
| | | ||||||
| * | Merge pull request #4678 from fatalbanana/rbl_exclude_local | Vsevolod Stakhov | 2023-11-03 | 1 | -4/+2 | |
| |\ | | | | | [Fix] rbl: unbreak `exclude_local` | |||||
| | * | [Fix] rbl: fix `exclude_local` | Andrew Lewis | 2023-11-03 | 1 | -4/+2 | |
| | | | ||||||
| * | | [Minor] Treat *.zpaq attachments as archives and harmful | twesterhever | 2023-11-03 | 1 | -0/+2 | |
| |/ | | | | Rationale: https://dshield.org/diary/Malware+Dropped+Through+a+ZPAQ+Archive/30366/ | |||||
| * | Merge pull request #4657 from fatalbanana/rbl_matchers | Vsevolod Stakhov | 2023-10-26 | 1 | -8/+68 | |
| |\ | | | | | [Feature] rbl: support use of different matchers for return codes | |||||
| | * | [Minor] Reiterate on the previous changes | Andrew Lewis | 2023-10-26 | 1 | -4/+4 | |
| | | | | | | | | | | | - Demote message to info level - Name it returncodes_matcher for better specificity | |||||
| | * | [Feature] rbl: support globbed return codes | Andrew Lewis | 2023-10-25 | 1 | -1/+11 | |
| | | | ||||||
| | * | [Feature] rbl: support checking returncodes by CIDR | Andrew Lewis | 2023-10-25 | 1 | -19/+41 | |
| | | | ||||||
| | * | [Feature] rbl: support checking returncodes by regex | Andrew Lewis | 2023-10-24 | 1 | -0/+13 | |
| | | | ||||||
| | * | [Minor] rbl: support use of different matchers for return codes | Andrew Lewis | 2023-10-24 | 1 | -3/+18 | |
| | | | ||||||
| * | | [Minor] Remove duplicate *.app attachment type | twesterhever | 2023-10-25 | 1 | -1/+0 | |
| | | | | | | | | | Reported by @fatalbanana. | |||||
| * | | Revert "[Minor] Increase scoring of *.exe attachments" | twesterhever | 2023-10-24 | 1 | -1/+1 | |
| | | | | | | | | | | | | | Reverted based on feedback by @moisseev. This reverts commit 8171424d846a3e33b5d0f9f7f4ee09ec8d553a03. | |||||
| * | | [Minor] Add additional bad attachment types | twesterhever | 2023-10-22 | 1 | -0/+11 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - app: Executable Application, blocked in Outlook by default - aspx: Active Server Page Extended, blocked in Outlook by default - dll: Dynamic-link Library - dqy: Microsoft Query File, blocking recommended in MS365 - iqy: ditto - mht: MHTML File, often abused for phishing and exploit attempts - mhtml: ditto - oqy: Microsoft Query File, blocking recommended in MS365 - rqy: ditto - slk: Microsoft Symbolic Link - wim: Windows Imaging Format | |||||
| * | | [Minor] Increase scoring of *.exe attachments | twesterhever | 2023-10-22 | 1 | -1/+1 | |
| | | | | | | | | | | | These are already banned in most environments, including GMail and Outlook. We may as well bump this score up to 4 eventually. | |||||
| * | | [Minor] Incorporate additional bad attachments from Microsoft | twesterhever | 2023-10-22 | 1 | -0/+9 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These are as follows: - htc: HTML Component File - pyc: Compiled Python Script - pyo: Optimized Compiled Python Module - pyw: Python Script To Be Executed With Suppressed Terminal Window - pyz: Python Zip Application - pyzw: Python Zip Application - vhd: Virtual Hard Disk - vhdx: Virtual Hard Disk Extended - wsf: Windows Script File Note that the Python file types remain unscored in archives, so distribution of these in source tarballs and the like is not affected by this commit. Source: https://support.microsoft.com/en-us/office/blocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519?ui=en-us&rs=en-us&ad=us | |||||
| * | | [Minor] Refer to third parties for attachment handling whenever possible | twesterhever | 2023-10-22 | 1 | -6/+6 | |
| |/ | | | | | | | This avoids confusion and enqueries to the rspamd project, if it is made clear that the decision to score certain attachments high has been incorporated from a well-known third party, such as Google's or Microsoft's attachment handling policy. | |||||
| * | [Fix] DMARC reporting: fix reporting for subdomains | Andrew Lewis | 2023-10-16 | 1 | -1/+1 | |
| | | | | | - Reported by: @bilym | |||||
| * | [Minor] Treat *.cue attachments as harmful | twesterhever | 2023-10-13 | 1 | -0/+1 | |
| | | | | | Rationale: https://arstechnica.com/information-technology/2023/10/one-click-remote-code-exploit-in-cd-cue-files-affects-most-gnome-based-linux-distros/ | |||||
| * | [Minor] RBL: Show DNS verification failure reason | Vsevolod Stakhov | 2023-09-26 | 1 | -13/+19 | |
| | | ||||||
| * | [Minor] Fix symbol name | Vsevolod Stakhov | 2023-09-25 | 1 | -2/+2 | |
| | | ||||||
| * | [Minor] Insert `UNKNOWN_SENDER` for the new senders | Vsevolod Stakhov | 2023-09-25 | 1 | -1/+21 | |
| | | ||||||
| * | [Project] Fix various issues | Vsevolod Stakhov | 2023-09-24 | 1 | -4/+14 | |
| | | ||||||
| * | [Conf] Add new plugin default configuration | Vsevolod Stakhov | 2023-09-24 | 1 | -2/+11 | |
| | | ||||||
| * | [Minor] Fix misprint | Vsevolod Stakhov | 2023-09-23 | 1 | -1/+1 | |
| | | ||||||
 |
index : rspamd.git | |
| Rapid spam filtering system: https://github.com/rspamd/rspamd | www-data |
| summaryrefslogtreecommitdiffstats |