From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Thu, 13 Jan 2022 20:45:14 +0000 (+0000)
Subject: [Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points
X-Git-Tag: 3.2~100
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=eb577f16af7e55e8bf7d40e5a35c386d14101539;p=thirdparty%2Frspamd.git

[Conf] Score MIME_OBFUSCATED_ARCHIVE to 8 points
---

diff --git a/conf/scores.d/mime_types_group.conf b/conf/scores.d/mime_types_group.conf
index b9e3736008..4e95f68351 100644
--- a/conf/scores.d/mime_types_group.conf
+++ b/conf/scores.d/mime_types_group.conf
@@ -43,6 +43,11 @@ symbols = {
         description = "Encrypted archive in a message";
         one_shot = true;
     }
+    "MIME_OBFUSCATED_ARCHIVE" {
+        weight = 8.0;
+        description = "Archive has files with clear obfuscation signs";
+        one_shot = true;
+    }
     "MIME_EXE_IN_GEN_SPLIT_RAR" {
         weight = 5.0;
         description = "EXE file in RAR archive with generic split extension (e.g. .001)";