From 6a7291faea8ccf2c81e32ee75d6ba76040dcebdf Mon Sep 17 00:00:00 2001
From: Alex 'AdUser' Z <ad_user@runbox.com>
Date: Thu, 3 Jun 2021 12:49:23 +1000
Subject: [PATCH] * tune filters

---
 filters/exim.pcre | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/filters/exim.pcre b/filters/exim.pcre
index 22de6d6..98fcbea 100644
--- a/filters/exim.pcre
+++ b/filters/exim.pcre
@@ -1,11 +1,10 @@
+# set: defscore=10
 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from .*\[<HOST>\]
 SMTP protocol synchronization error \(next input sent too soon: pipelining was not advertised\): rejected .*\[<HOST>\]
-rejected EHLO from \[<HOST>\]: syntactically invalid argument
-rejected HELO from \[<HOST>\]: syntactically invalid argument
-Connection from \[<HOST>\] refused: too many connections from that IP address
-\[<HOST>\] .* host is listed in zen.spamhaus.org
-\[<HOST>\] .* host is listed in bl.spamcop.net
+rejected [HE][EH]HLO from \[<HOST>\]: syntactically invalid argument
+\[<HOST>\] .* host is listed in .+
 \[<HOST>\] .* relay not permitted
-\[<HOST>\] .* too many connections from that IP address
 \[<HOST>\] .* rejected after DATA: This message was detected as possible malware
+# set: defscore=5
+\[<HOST>\] .* too many connections from that IP address
 \[<HOST>\] .* temporarily rejected RCPT \<\S+\>: lowest numbered MX record points to local host