From: Vsevolod Stakhov <vsevolod@rspamd.com>
Date: Tue, 30 Apr 2024 14:07:58 +0000 (+0600)
Subject: Merge pull request #4915 from twesterhever/temp-freemail-mdn
X-Git-Tag: 3.9.0~51
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a7d2543250b176eff03668eccfa774f2e4bd3bdb;p=thirdparty%2Frspamd.git

Merge pull request #4915 from twesterhever/temp-freemail-mdn

Add detection for freemail and disposable e-mail usage for message delivery notification
---

a7d2543250b176eff03668eccfa774f2e4bd3bdb
diff --cc conf/composites.conf
index c1b603e518,d3c4f073bf..b1bff1c1a8
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@@ -169,8 -167,14 +169,15 @@@ composites 
      score = 4.0;
      policy = "leave";
      description = "Message exhibits strong characteristics of advance fee fraud (AFF a/k/a '419' spam) involving freemail addresses";
 +    group = "scams";
    }
+   SUSPICIOUS_MDN {
+     expression = "(FREEMAIL_MDN | DISPOSABLE_MDN) & !(FREEMAIL_FROM | FREEMAIL_ENVFROM)";
+     score = 2.0;
+     policy = "leave";
+     description = "Message delivery notification should go to freemail or disposable e-mail, but message was not sent from a freemail address";
+     group = "scams";
+   }
    REDIRECTOR_URL_ONLY {
      expression = "HFILTER_URL_ONLY & REDIRECTOR_URL";
      score = 1.0;