|
@@ -68,3 +68,33 @@ WL_FWD_HOST {
|
|
ENCRYPTED_CHAT {
|
|
ENCRYPTED_CHAT {
|
|
expression = "CHAT_VERSION_HEADER & ENCRYPTED_PGP";
|
|
expression = "CHAT_VERSION_HEADER & ENCRYPTED_PGP";
|
|
}
|
|
}
|
|
|
|
+
|
|
|
|
+CLAMD_SPAM_FOUND {
|
|
|
|
+ expression = "CLAM_SECI_SPAM & !MAILCOW_WHITE";
|
|
|
|
+ description = "Probably Spam, Securite Spam Flag set through ClamAV";
|
|
|
|
+ weight = 4.5;
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+CLAMD_BAD_PDF {
|
|
|
|
+ expression = "CLAM_SECI_PDF & !MAILCOW_WHITE";
|
|
|
|
+ description = "Bad PDF Found, Securite bad PDF Flag set through ClamAV";
|
|
|
|
+ score = 6;
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+CLAMD_BAD_JPG {
|
|
|
|
+ expression = "CLAM_SECI_JPG & !MAILCOW_WHITE";
|
|
|
|
+ description = "Bad JPG Found, Securite bad JPG Flag set through ClamAV";
|
|
|
|
+ score = 3;
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+CLAMD_BAD_HTML {
|
|
|
|
+ expression = "CLAM_SECI_HTML & !MAILCOW_WHITE";
|
|
|
|
+ description = "Bad HTML Found, Securite bad HTML Flag set through ClamAV";
|
|
|
|
+ score = 8;
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+CLAMD_BAD_JS {
|
|
|
|
+ expression = "CLAM_SECI_JS & !MAILCOW_WHITE";
|
|
|
|
+ description = "Bad JS Found, Securite bad JS Flag set through ClamAV";
|
|
|
|
+ score = 8;
|
|
|
|
+}
|