commit b605f37: [Minor] Improve readability of composites rule configuration

twesterhever 40121680+twesterhever at users.noreply.github.com
Fri Feb 17 21:56:18 UTC 2023


Author: twesterhever
Date: 2023-02-17 15:09:48 +0000
URL: https://github.com/rspamd/rspamd/commit/b605f37d65b704632a013091d1a3ba5bc5345a94

[Minor] Improve readability of composites rule configuration

---
 conf/composites.conf | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/conf/composites.conf b/conf/composites.conf
index e2096b291..82373b093 100644
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -98,7 +98,7 @@ composites {
   }
   RCVD_UNAUTH_PBL {
     expression = "RECEIVED_PBL & !RCVD_VIA_SMTP_AUTH";
-    description = "Relayed through ZEN PBL IP without sufficient authentication (possible indicating an open relay)";
+    description = "Relayed through Spamhaus PBL IP without sufficient authentication (possible indicating an open relay)";
     score = 2.0;
     policy = "leave";
   }
@@ -133,18 +133,16 @@ composites {
     policy = "leave";
   }
   BAD_REP_POLICIES {
-    description = "Contains valid policies but are also marked by fuzzy/bayes/surbl/rbl";
+    description = "Contains valid policies but are also marked by fuzzy/bayes/SURBL/RBL";
     expression = "(~g-:policies) & (-g+:fuzzy | -g+:statistics | -g+:surbl | -g+:rbl)";
     score = 0.1;
   }
-
   VIOLATED_DIRECT_SPF {
     description = "Has no Received (or no trusted received relays) and SPF policy fails or soft fails";
     expression = "(R_SPF_FAIL | R_SPF_SOFTFAIL) & (RCVD_COUNT_ZERO | RCVD_NO_TLS_LAST)";
     policy = "leave";
     score = 3.5;
   }
-
   IP_SCORE_FREEMAIL {
     description = "Negate IP_SCORE when message comes from FreeMail";
     expression = "FREEMAIL_FROM & SENDER_REP_SPAM";
@@ -164,12 +162,11 @@ composites {
     score = 7.0;
     group = "scams";
   }
-  
   FREEMAIL_AFF {
-	  expression = "(FREEMAIL_FROM | FREEMAIL_ENVFROM | FREEMAIL_REPLYTO) & R_UNDISC_RCPT & (INTRODUCTION | FROM_NAME_HAS_TITLE | FREEMAIL_REPLYTO_NEQ_FROM_DOM)";
-	  score = 4.0;
-	  policy = "leave";
-	  description = "Message exhibits strong characteristics of advance fee fraud (AFF a/k/a '419' spam) involving freemail addresses";
+    expression = "(FREEMAIL_FROM | FREEMAIL_ENVFROM | FREEMAIL_REPLYTO) & R_UNDISC_RCPT & (INTRODUCTION | FROM_NAME_HAS_TITLE | FREEMAIL_REPLYTO_NEQ_FROM_DOM)";
+    score = 4.0;
+    policy = "leave";
+    description = "Message exhibits strong characteristics of advance fee fraud (AFF a/k/a '419' spam) involving freemail addresses";
   }
 
   .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf"


More information about the Commits mailing list