commit eb577f1: [Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points
Vsevolod Stakhov
vsevolod at highsecure.ru
Thu Jan 13 20:56:06 UTC 2022
Author: Vsevolod Stakhov
Date: 2022-01-13 20:45:14 +0000
URL: https://github.com/rspamd/rspamd/commit/eb577f16af7e55e8bf7d40e5a35c386d14101539
[Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points
---
conf/scores.d/mime_types_group.conf | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/conf/scores.d/mime_types_group.conf b/conf/scores.d/mime_types_group.conf
index b9e373600..4e95f6835 100644
--- a/conf/scores.d/mime_types_group.conf
+++ b/conf/scores.d/mime_types_group.conf
@@ -43,6 +43,11 @@ symbols = {
description = "Encrypted archive in a message";
one_shot = true;
}
+ "MIME_OBFUSCATED_ARCHIVE" {
+ weight = 8.0;
+ description = "Archive has files with clear obfuscation signs";
+ one_shot = true;
+ }
"MIME_EXE_IN_GEN_SPLIT_RAR" {
weight = 5.0;
description = "EXE file in RAR archive with generic split extension (e.g. .001)";
More information about the Commits
mailing list