76 lines
2.3 KiB
Plaintext
76 lines
2.3 KiB
Plaintext
# Headers rules scores
|
|
#
|
|
# Please don't modify this file as your changes might be overwritten with
|
|
# the next update.
|
|
#
|
|
# You can modify '$LOCAL_CONFDIR/rspamd.conf.local.override' to redefine
|
|
# parameters defined on the top level
|
|
#
|
|
# You can modify '$LOCAL_CONFDIR/rspamd.conf.local' to add
|
|
# parameters defined on the top level
|
|
#
|
|
# For specific modules or configuration you can also modify
|
|
# '$LOCAL_CONFDIR/local.d/file.conf' - to add your options or rewrite defaults
|
|
# '$LOCAL_CONFDIR/override.d/file.conf' - to override the defaults
|
|
#
|
|
# See https://rspamd.com/doc/tutorials/writing_rules.html for details
|
|
|
|
description = "Various headers checks";
|
|
|
|
symbols = {
|
|
"FORGED_SENDER" {
|
|
weight = 0.3;
|
|
description = "Sender is forged (different From: header and smtp MAIL FROM: addresses)";
|
|
}
|
|
"R_MIXED_CHARSET" {
|
|
weight = 5.0;
|
|
description = "Mixed characters in a message";
|
|
one_shot = true;
|
|
}
|
|
"R_MIXED_CHARSET_URL" {
|
|
weight = 7.0;
|
|
description = "Mixed characters in a URL inside message";
|
|
one_shot = true;
|
|
}
|
|
"FORGED_RECIPIENTS" {
|
|
weight = 2.0;
|
|
description = "Recipients are not the same as RCPT TO: mail command";
|
|
}
|
|
"FORGED_RECIPIENTS_MAILLIST" {
|
|
weight = 0.0;
|
|
description = "Recipients are not the same as RCPT TO: mail command, but a message from a maillist";
|
|
}
|
|
"FORGED_SENDER_MAILLIST" {
|
|
weight = 0.0;
|
|
description = "Sender is not the same as MAIL FROM: envelope, but a message is from a maillist";
|
|
}
|
|
"ONCE_RECEIVED" {
|
|
weight = 0.1;
|
|
description = "One received header in a message";
|
|
}
|
|
"RDNS_NONE" {
|
|
weight = 1.0;
|
|
description = "Cannot resolve reverse DNS for sender's IP";
|
|
}
|
|
"RDNS_DNSFAIL" {
|
|
weight = 0.0;
|
|
description = "PTR verification DNS error";
|
|
}
|
|
"ONCE_RECEIVED_STRICT" {
|
|
weight = 4.0;
|
|
description = "One received header with 'bad' patterns inside";
|
|
}
|
|
"DIRECT_TO_MX" {
|
|
weight = 0.0;
|
|
description = "Message has been directly delivered from MUA to local MX";
|
|
}
|
|
"MAILLIST" {
|
|
weight = -0.2;
|
|
description = "Message seems to be from maillist";
|
|
}
|
|
"BOUNCE" {
|
|
weight = -0.1;
|
|
description = "(Non) Delivery Status Notification";
|
|
}
|
|
}
|