scottk/Mailu
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/Mailu.git synced 2025-11-02 11:08:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

dimitri said "block it"

Browse Source 
So let's block any macro with AUTOEXEC
This commit is contained in:
Florent Daigniere
2022-11-24 12:04:03 +01:00
parent 3bdc57adbc
commit 709023ab5a
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/rspamd/conf/composites.conf
View File

@@ -5,7 +5,7 @@ OLETOOLS_MACRO_MRAPTOR {
score = 20.0; score = 20.0;
} }
OLETOOLS_MACRO_SUSPICIOUS { OLETOOLS_MACRO_SUSPICIOUS {
expression = "OLETOOLS_SUSPICIOUS | OLETOOLS_VBASTOMP"; expression = "OLETOOLS_SUSPICIOUS | OLETOOLS_VBASTOMP | OLETOOLS_AUTOEXEC";
message = "Rejected (malicious macro)"; message = "Rejected (malicious macro)";
policy = "leave"; policy = "leave";
score = 20.0; score = 20.0;

1
tests/compose/filters/03_email_macro.sh
View File

@@ -4,6 +4,7 @@ python3 tests/email_test.py message-macro-stomp "tests/compose/filters/2003x32_w
if [ $? -ne 25 ]; then if [ $? -ne 25 ]; then
exit 1 exit 1
fi fi
# This does Auto_Open + Alert()
python3 tests/email_test.py message-autoexec-macro "tests/compose/filters/excel4_sample_macro.slk" python3 tests/email_test.py message-autoexec-macro "tests/compose/filters/excel4_sample_macro.slk"
if [ $? -ne 25 ]; then if [ $? -ne 25 ]; then
exit 1 exit 1