mailcow/data/conf/rspamd/local.d
Patrik Kernstock fce93609dd
Update mime_types.conf configuration (#6013)
In the last months and years, the default `mime_types.conf` of rspamd has changed and it might be also useful to make some adjustments to the weight of certain file extensions.

This PR is removing all file extensions from `mime_types.conf` which are already in rspamd's default configuration at [rspamd/src/plugins/lua/mime_types.lua](https://github.com/rspamd/rspamd/blob/master/src/plugins/lua/mime_types.lua). If file extension is not present or has a different score compared to rspamd default, it is still in the list.

There are also a few major differences to certain file extensions, which might be useful to discuss and carefully adjust. For example, `.exe` files are rated very 'badly' due to high chance of being malicious, so are other extensions like `bat`, `cmd`, etc.

Current suggestion:
```lua
# Extensions that are treated as 'bad'
# Number is score multiply factor
bad_extensions = {
  apk = 4,
  appx = 4,
  appxbundle = 4,
  bat = 8,
  cab = 20,
  cmd = 8,
  com = 20,
  diagcfg = 4,
  diagpack = 4,
  dmg = 8,
  ex = 20,
  ex_ = 20,
  exe = 20,
  img = 4,
  jar = 8,
  jnlp = 8,
  js = 8,
  jse = 8,
  lnk = 20,
  mjs = 8,
  msi = 4,
  msix = 4,
  msixbundle = 4,
  ps1 = 8,
  scr = 20,
  sct = 20,
  vb = 20,
  vbe = 20,
  vbs = 20,
  vhd = 4,
  py = 4,
  reg = 8,
  scf = 8,
  vhdx = 4,
};

# Extensions that are particularly penalized for archives
bad_archive_extensions = {
  pptx = 0.5,
  docx = 0.5,
  xlsx = 0.5,
  pdf = 1.0,
  jar = 12,
  jnlp = 12,
  bat = 12,
  cmd = 12,
};

# Used to detect another archive in archive
archive_extensions = {
  tar = 1,
  ['tar.gz'] = 1,
};
```

**As a important reminder**: For all remaining and additional file extensions and score weights, please check above default rspamd configuration!
2024-10-17 09:11:55 +02:00
..
actions.conf [Postfix] Set CA path for smtpd 2020-01-05 11:21:04 +01:00
antivirus.conf [Rspamd] Set max_size for AV 2019-01-13 23:02:09 +01:00
arc.conf Update arc.conf (#3686) 2020-07-31 19:47:03 +02:00
asn.conf [Rspamd] Enable more modules 2018-02-09 10:32:42 +01:00
composites.conf Do not add MAILCOW_WHITE on failed DMARC 2024-07-28 13:19:03 +02:00
dkim_signing.conf [Rspamd] Sign Disposition-Notification Headers (#4020) 2021-04-03 12:43:20 +02:00
external_services.conf [Rspamd] More generous timeout but no retransmit allowed for oletools: prevent further timeouts 2021-08-16 10:17:52 +02:00
force_actions.conf [rspamd] Restore add header forced action (#3440) 2020-03-31 19:21:03 +02:00
fuzzy_check.conf [Rspamd] Encrypt fuzzy communication, switch to Rspamd 2.6 2020-09-15 11:01:20 +02:00
fuzzy_group.conf [Rspamd] Add mailcow fuzzy hash store 2020-02-26 14:24:19 +01:00
greylist.conf [Compose] Update Dovecot and Rspamd images 2020-12-11 10:04:37 +01:00
groups.conf [Rspamd] Prevent LUA crash 2022-07-07 09:20:59 +02:00
headers_group.conf [Rspamd] Decrease weight of missed charset 2020-01-05 11:34:03 +01:00
hfilter_group.conf [Rspamd] Reduce ptr fail score 2019-11-24 16:09:59 +01:00
history_redis.conf [Rspamd] Lower history nrows 2019-02-14 11:11:20 +01:00
metadata_exporter.conf Added SENDER_ADDRESS and SENDER_NAME as variables for messages 2022-11-17 21:01:18 +01:00
milter_headers.conf [Rspamd] Add fuzzy hashes to headers, if matched 2020-03-08 12:24:42 +01:00
mime_types_group.conf [Rspamd] Disable extension cloaking (#3754) 2020-09-12 12:20:55 +02:00
mime_types.conf Update mime_types.conf configuration (#6013) 2024-10-17 09:11:55 +02:00
multimap.conf fix URLHAUS_ABUSE_CH check 2023-02-28 14:30:38 +01:00
mx_check.conf
options.inc Set local_addrs in Rspamd 2024-04-01 11:28:06 +03:00
phishing.conf [Rspamd] Slight changes to improve memory usage 2019-10-30 20:07:58 +01:00
policies_group.conf [Rspamd] Fix FREEMAIL_POLICY_FAILURE with SPF_SOFTFAIL (#4142) 2021-06-11 16:10:28 +03:00
ratelimit.conf [Rspamd] Added customizable global ratelimit file (disabled by default) 2023-12-07 12:04:45 +01:00
rbl_group.conf rspamd: Added DQS RBLs when key is set 2024-08-07 13:59:26 +02:00
rbl.conf rspamd: fixed dqs rbl insertion handling 2024-08-07 14:00:04 +02:00
redis.conf Rspamd: increase redis timeout 2019-10-26 13:00:31 +02:00
reputation.conf [Rspamd] Fix for Respect Redis REPLICA in reputation plugin (#4046) 2021-04-18 22:41:08 +03:00
spamassassin.conf [Rspamd] Change SA ruleset name 2019-08-21 14:37:30 +02:00
statistic.conf [Rspamd] Fix bayes config (#6000) 2024-08-12 10:05:08 +02:00
statistics_group.conf [Rspamd] Increase spam symbol weight 2021-02-11 09:32:47 +01:00