commit ce23345: [Enhancement] Catch "Mail message body" Content-Description
twesterhever
40121680+twesterhever at users.noreply.github.com
Mon Jul 29 17:56:25 UTC 2024
Author: twesterhever
Date: 2024-04-28 09:44:07 +0000
URL: https://github.com/rspamd/rspamd/commit/ce23345c5de784d0ebc9bdbbcc497f34ba3af065
[Enhancement] Catch "Mail message body" Content-Description
This header frequently surfaces in spam, mostly advance fee fraud.
---
rules/regexp/headers.lua | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index f7e23501c..7397ed84b 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -910,6 +910,13 @@ reconf['HAS_CD_HEADER'] = {
group = 'headers'
}
+reconf['CD_MM_BODY'] = {
+ re = 'Content-Description=/Mail message body/Hi',
+ description = 'Content-Description header reads "Mail message body", commonly seen in spam',
+ score = 2.0,
+ group = 'headers'
+}
+
reconf['X_PHPOS_FAKE'] = {
re = 'X-PHP-Originating-Script=/^\\d{7}:/Hi',
description = 'Fake X-PHP-Originating-Script header',
More information about the Commits
mailing list