diff --git a/data/conf/rspamd/local.d/composites.conf b/data/conf/rspamd/local.d/composites.conf index a6706f70..d0b9c4d5 100644 --- a/data/conf/rspamd/local.d/composites.conf +++ b/data/conf/rspamd/local.d/composites.conf @@ -30,3 +30,7 @@ BAD_WORD_BAD_TLD { expression = "FISHY_TLD & ( BAD_WORDS | BAD_WORDS_DE )" score = 10.0; } +FORGED_W_BAD_POLICY { + expression = "( ~g+:policies | ~R_SPF_NA) & ( ~FROM_NEQ_ENVFROM & ~FORGED_SENDER )" + score = 3.0; +}