You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2020/11/10 17:38:32 UTC
svn commit: r1883256 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Tue Nov 10 17:38:31 2020
New Revision: 1883256
URL: http://svn.apache.org/viewvc?rev=1883256&view=rev
Log:
Add some subrules for evaluation
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1883256&r1=1883255&r2=1883256&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Tue Nov 10 17:38:31 2020
@@ -3250,3 +3250,12 @@ score GOOG_STO_IMG_NOHTML 2.
tflags GOOG_STO_IMG_NOHTML publish
+# download-a-file pitch, malware? 11/2020
+header CRAIGSLIST_DATING Subject =~ /Sexy \w+ From Craigs?list/i
+describe CRAIGSLIST_DATING Possible malware
+score CRAIGSLIST_DATING 4.000 # limit
+
+uri __URI_PVT_SHAREPOINT m,^https?://(?!www\.)(?:[^/.]+\.)+sharepoint\.com/,i
+
+
+