commit eb577f1: [Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points

Vsevolod Stakhov vsevolod at highsecure.ru
Thu Jan 13 20:56:06 UTC 2022


Author: Vsevolod Stakhov
Date: 2022-01-13 20:45:14 +0000
URL: https://github.com/rspamd/rspamd/commit/eb577f16af7e55e8bf7d40e5a35c386d14101539

[Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points

---
 conf/scores.d/mime_types_group.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/conf/scores.d/mime_types_group.conf b/conf/scores.d/mime_types_group.conf
index b9e373600..4e95f6835 100644
--- a/conf/scores.d/mime_types_group.conf
+++ b/conf/scores.d/mime_types_group.conf
@@ -43,6 +43,11 @@ symbols = {
         description = "Encrypted archive in a message";
         one_shot = true;
     }
+    "MIME_OBFUSCATED_ARCHIVE" {
+        weight = 8.0;
+        description = "Archive has files with clear obfuscation signs";
+        one_shot = true;
+    }
     "MIME_EXE_IN_GEN_SPLIT_RAR" {
         weight = 5.0;
         description = "EXE file in RAR archive with generic split extension (e.g. .001)";


More information about the Commits mailing list