You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/05/14 02:40:33 UTC
svn commit: r1831533 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Mon May 14 02:40:33 2018
New Revision: 1831533
URL: http://svn.apache.org/viewvc?rev=1831533&view=rev
Log:
Add scored rules for unicode domain obfuscation and multiple-address Reply-To
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1831533&r1=1831532&r2=1831533&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon May 14 02:40:33 2018
@@ -2260,7 +2260,13 @@ score HDR_ORDER_FTSDMCXX_DIRECT 2.
tflags HDR_ORDER_FTSDMCXX_DIRECT publish
body __UNICODE_OBFU_URI_DOM /[0-9a-z]\xe3\x80\x82(?:com|net|info|biz|cn)\b/i
+meta UNICODE_OBFU_DOM_NO_BODY __UNICODE_OBFU_URI_DOM && __EMPTY_BODY
+score UNICODE_OBFU_DOM_NO_BODY 3.250 # limit
+describe UNICODE_OBFU_DOM_NO_BODY Unicode-obfuscated domain + no body
header __REPTO_MULTI_ADDR Reply-To:address =~ /,/
+meta MULTI_REPTO_NO_RDNS __REPTO_MULTI_ADDR && __RDNS_NONE
+score MULTI_REPTO_NO_RDNS 2.250 # limit
+describe MULTI_REPTO_NO_RDNS Multiple Reply-to addresses + no RDNS