You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2007/07/13 13:57:06 UTC
svn commit: r555952 - /spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Author: jm
Date: Fri Jul 13 04:57:05 2007
New Revision: 555952
URL: http://svn.apache.org/viewvc?view=rev&rev=555952
Log:
add a couple of promising patterns for recent stock spam
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?view=diff&rev=555952&r1=555951&r2=555952
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Fri Jul 13 04:57:05 2007
@@ -268,3 +268,7 @@
full AB_TEST_PDF2 /JVBERi0xLjIgDQoxIDAgb2JqDQo8PA0KL1R5cGUgL0N/
full AB_TEST_PDF1 /JVBERi0xLjMgCjEgMCBvYmoKPDwKPj4KZW5kb2JqCj/
+# good Message-ID pattern for recent stock spam
+header STOX_MID_1090909 Message-ID =~ /^<[A-F0-9]{8}\.[1-9]0[0-9]0[0-9]0[0-9]\@[a-z]/
+header STOX_BOUND_090909 Content-Type =~ /boundary=\"------------0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]0[0-9]\"/
+