This commit is contained in:
andryyy
2020-02-06 07:04:31 +01:00
6 changed files with 32 additions and 16 deletions

View File

@@ -34,3 +34,6 @@ FORGED_W_BAD_POLICY {
expression = "( ~g+:policies | ~R_SPF_NA) & ( ~FROM_NEQ_ENVFROM & ~FORGED_SENDER )"
score = 3.0;
}
RBL_EXCLUDE_FWD_HOST {
expression = "-WHITELISTED_FWD_HOST & ^g:rbl"
}

View File

@@ -1,21 +1,21 @@
# Extensions that are treated as 'bad'
# Number is score multiply factor
bad_extensions = {
scr = 4,
lnk = 4,
exe = 1,
scr = 20,
lnk = 20,
exe = 20,
msi = 1,
msp = 1,
msu = 1,
jar = 2,
com = 4,
com = 20,
bat = 4,
cmd = 4,
ps1 = 4,
ace = 4,
arj = 4,
cab = 3,
vbs = 4,
vbs = 20,
hta = 4,
shs = 4,
wsc = 4,
@@ -30,7 +30,8 @@ bad_archive_extensions = {
pdf = 1.0,
jar = 3,
js = 0.5,
vbs = 7,
vbs = 20,
exe = 20
};
# Used to detect another archive in archive

View File

@@ -45,4 +45,8 @@ symbols = {
score = 2.0;
description = "List of networks hijacked from their original owners, some of which have already used for spamming.";
}
"RECEIVED_SPAMHAUS_XBL" {
weight = 0.0;
description = "Received address is listed in ZEN XBL";
}
}