blob: b7cbe8146a4c3843d8273a1d44bf8bd15d0f4eab (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
*** Settings ***
Library ${RSPAMD_TESTDIR}/lib/rspamd.py
Resource ${RSPAMD_TESTDIR}/lib/rspamd.robot
Variables ${RSPAMD_TESTDIR}/lib/vars.py
*** Variables ***
${MESSAGE1} ${RSPAMD_TESTDIR}/messages/fws_fn.eml
${MESSAGE2} ${RSPAMD_TESTDIR}/messages/fws_fp.eml
${MESSAGE3} ${RSPAMD_TESTDIR}/messages/fws_tp.eml
${MESSAGE4} ${RSPAMD_TESTDIR}/messages/broken_richtext.eml
${MESSAGE5} ${RSPAMD_TESTDIR}/messages/badboundary.eml
${MESSAGE6} ${RSPAMD_TESTDIR}/messages/pdf_encrypted.eml
${MESSAGE7} ${RSPAMD_TESTDIR}/messages/pdf_js.eml
${MESSAGE8} ${RSPAMD_TESTDIR}/messages/yand_forward.eml
${MESSAGE} ${RSPAMD_TESTDIR}/messages/newlines.eml
*** Test Cases ***
Broken MIME
Scan File ${MESSAGE3} Settings={symbols_enabled = [MISSING_SUBJECT]}
Expect Symbol MISSING_SUBJECT
Issue 2584
Scan File ${MESSAGE1}
... Settings={symbols_enabled = [BROKEN_CONTENT_TYPE, MISSING_SUBJECT, R_MISSING_CHARSET]}
Do Not Expect Symbol BROKEN_CONTENT_TYPE
Do Not Expect Symbol MISSING_SUBJECT
Do Not Expect Symbol R_MISSING_CHARSET
Issue 2349
Scan File ${MESSAGE2}
... Settings={symbols_enabled = [MULTIPLE_UNIQUE_HEADERS]}
Do Not Expect Symbol MULTIPLE_UNIQUE_HEADERS
Broken Rich Text
Scan File ${MESSAGE4}
... Settings={symbols_enabled = [BROKEN_CONTENT_TYPE]}
Expect Symbol BROKEN_CONTENT_TYPE
Broken boundary
Scan File ${MESSAGE4}
... Settings={symbols_enabled = [BROKEN_CONTENT_TYPE]}
Expect Symbol BROKEN_CONTENT_TYPE
PDF encrypted
Scan File ${MESSAGE6}
... Settings={symbols_enabled = [PDF_ENCRYPTED]}
Expect Symbol PDF_ENCRYPTED
PDF javascript
Scan File ${MESSAGE7}
... Settings={symbols_enabled = [PDF_JAVASCRIPT]}
Expect Symbol PDF_JAVASCRIPT
BITCOIN ADDR
Scan File ${RSPAMD_TESTDIR}/messages/btc.eml
... Settings={symbols_enabled = [BITCOIN_ADDR]}
Expect Symbol BITCOIN_ADDR
BITCOIN ADDR 2
Scan File ${RSPAMD_TESTDIR}/messages/btc2.eml
... Settings={symbols_enabled = [BITCOIN_ADDR]}
Expect Symbol BITCOIN_ADDR
BITCOIN ADDR 3
Scan File ${RSPAMD_TESTDIR}/messages/btc3.eml
... Settings={symbols_enabled = [BITCOIN_ADDR]}
Expect Symbol BITCOIN_ADDR
BITCOIN ADDR 4
Scan File ${RSPAMD_TESTDIR}/messages/btc4.eml
... Settings={symbols_enabled = [BITCOIN_ADDR]}
Expect Symbol With Exact Options BITCOIN_ADDR 1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN2
... bc1qar0srrr7xfkvy5l643lydnw9re59gtzzwf5mdq bitcoincash:qztslqhavnjcgth9zwu6dw0jjcfy4zahfy7vf0smwp
RCVD_COUNT_ONE
Scan File ${RSPAMD_TESTDIR}/messages/btc.eml
... Settings={symbols_enabled = [RCVD_COUNT_ONE]}
Expect Symbol RCVD_COUNT_ONE
RCVD_COUNT_FIVE
Scan File ${RSPAMD_TESTDIR}/messages/yand_forward.eml
... Settings={symbols_enabled = [RCVD_COUNT_ONE]}
Expect Symbol RCVD_COUNT_FIVE
RCVD_COUNT_SEVEN
Scan File ${RSPAMD_TESTDIR}/messages/rcvd7.eml
... Settings={symbols_enabled = [RCVD_COUNT_ONE]}
Expect Symbol RCVD_COUNT_SEVEN
FROM_NEQ_ENVFROM
Scan File ${MESSAGE8} From=test@test.net
... Settings={symbols_enabled = [FROM_NEQ_ENVFROM]}
Expect Symbol FROM_NEQ_ENVFROM
PHISH_SENDER_A_1
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender.eml
... Settings={symbols_enabled = [MULTIPLE_FROM]}
Expect Symbol With Score And Exact Options MULTIPLE_FROM 8.0 <any@attack.com> <admin@legitimate.com>
PHISH_SENDER_A_2
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender.eml
... Settings={symbols_enabled = [MULTIPLE_UNIQUE_HEADERS]}
Expect Symbol With Score And Exact Options MULTIPLE_UNIQUE_HEADERS 7.0 From
PHISH_SENDER_B
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender2.eml
... Settings={symbols_enabled = [BROKEN_HEADERS]}
Expect Symbol BROKEN_HEADERS
PHISH_SENDER_C
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender3.eml
... Settings={symbols_enabled = [BROKEN_HEADERS]}
Expect Symbol BROKEN_HEADERS
PHISH_SENDER_D
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender4.eml
... Settings={symbols_enabled = [BROKEN_HEADERS]}
Expect Symbol BROKEN_HEADERS
PHISH_SENDER_E
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender5.eml
... Settings={symbols_enabled = [MULTIPLE_FROM, DMARC_CHECK, DKIM_CHECK, SPF_CHECK]}
Expect Symbol MULTIPLE_FROM
Expect Symbol With Exact Options DMARC_NA Duplicate From header
PHISH_SENDER_ROUTING_PART
Scan File ${RSPAMD_TESTDIR}/messages/phish_sender6.eml
... Settings={symbols_enabled = [FROM_INVALID]}
Expect Symbol FROM_INVALID
REPLYTO_ADDR_EQ_FROM
Scan File ${RSPAMD_TESTDIR}/messages/replyto_addr_eq_from.eml
... Settings={symbols_enabled = [REPLYTO_ADDR_EQ_FROM]}
Expect Symbol REPLYTO_ADDR_EQ_FROM
SUBJECT_HAS_CURRENCY
Scan File ${RSPAMD_TESTDIR}/messages/currency.eml
... Settings={symbols_enabled = [SUBJECT_HAS_CURRENCY]}
Expect Symbol SUBJECT_HAS_CURRENCY
|
