You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by do...@apache.org on 2007/11/08 07:08:59 UTC
svn commit: r593028 - /spamassassin/rules/trunk/sandbox/dos/70_other.cf
Author: dos
Date: Wed Nov 7 22:08:58 2007
New Revision: 593028
URL: http://svn.apache.org/viewvc?rev=593028&view=rev
Log:
sandbox: DOS_REMOVE_DOMAIN_DOT and DOS_REMOVE_DOMAIN_DOT_YAHOO
Modified:
spamassassin/rules/trunk/sandbox/dos/70_other.cf
Modified: spamassassin/rules/trunk/sandbox/dos/70_other.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/dos/70_other.cf?rev=593028&r1=593027&r2=593028&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/dos/70_other.cf (original)
+++ spamassassin/rules/trunk/sandbox/dos/70_other.cf Wed Nov 7 22:08:58 2007
@@ -238,3 +238,7 @@
header DOS_FORGED_RCVD_QUADS ALL-EXTERNAL =~ /(?:^|\n)Received:\s+from \[(\d{2,3}\.\d{1,3}.\d{1,3}\.\d{1,3})\] .+\nReceived:\s+from \[\1\] by \S+; /
describe DOS_FORGED_RCVD_QUADS Probable forged received header
+# 20071108 - asks you to remove the dot from the end of the domain name
+body DOS_REMOVE_DOMAIN_DOT /e(?:mov|let)e the (?:dot|period|point) from the end/
+meta DOS_REMOVE_DOMAIN_DOT_YAHOO DOS_REMOVE_DOMAIN_DOT && FORGED_YAHOO_RCVD
+