You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2020/10/23 12:04:32 UTC
[Bug 7863] Suggest rule to score messages with attachments
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7863
ricardo.matos@cgtp.pt changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|Rules suggest |Suggest rule to score
| |messages with attachments
CC| |ricardo.matos@cgtp.pt
--- Comment #1 from ricardo.matos@cgtp.pt ---
ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
mimeheader __MIMEHEADER_CONTENTTYPE_ATTACHMENT_DOC Content-Type =~
/\.(doc|xls|ppt)(x|)/i
mimeheader __MIMEHEADER_CONTENTDISP_ATTACHMENT_DOC Content-Disposition =~
/\.(doc|xls|ppt)(x|)/i
meta MIMEHEADER_ATTACHMENT_DOC ((__MIMEHEADER_CONTENTDISP_ATTACHMENT_DOC ||
__MIMEHEADER_CONTENTTYPE_ATTACHMENT_DOC) && !(ALL_TRUSTED))
describe MIMEHEADER_ATTACHMENT_DOC HEADER: email contains a DOC file attachment
score MIMEHEADER_ATTACHMENT_DOC 1.5
mimeheader __MIMEHEADER_CONTENTTYPE_ATTACHMENT_ARCH Content-Type =~
/\.(rar|zip|tar|img)/i
mimeheader __MIMEHEADER_CONTENTDISP_ATTACHMENT_ARCH Content-Disposition =~
/\.(rar|zip|tar|img)/i
mimeheader __MIMEHEADER_CONTENTDISP_ANY Content-Disposition =~ /./i
meta MIMEHEADER_ATTACHMENT_ARCH ((__MIMEHEADER_CONTENTDISP_ATTACHMENT_ARCH ||
__MIMEHEADER_CONTENTTYPE_ATTACHMENT_ARCH) && !ALL_TRUSTED)
describe MIMEHEADER_ATTACHMENT_ARCH HEADER: email contains an archive file
attachment
score MIMEHEADER_ATTACHMENT_ARCH 0.1
mimeheader __MIMEHEADER_CONTENTTYPE_ATTACHMENT_HTML Content-Type =~
/\.htm(l|)/i
mimeheader __MIMEHEADER_CONTENTDISP_ATTACHMENT_HTML Content-Disposition =~
/\.htm(l|)/i
meta MIMEHEADER_ATTACHMENT_HTML (__MIMEHEADER_CONTENTDISP_ATTACHMENT_HTML ||
__MIMEHEADER_CONTENTTYPE_ATTACHMENT_HTML)
describe MIMEHEADER_ATTACHMENT_HTML HEADER: email contains a HTML file
attachment
score MIMEHEADER_ATTACHMENT_HTML 1.0
mimeheader __MIMEHEADER_CONTENTTYPE_ATTACHMENT_JAR Content-Type =~
/application.*\.(jar|js|bat|exe|com|sh|vb|vbs|pif)"/i
mimeheader __MIMEHEADER_CONTENTDISP_ATTACHMENT_JAR Content-Disposition =~
/\.(jar|js|bat|exe|com|sh|vb|vbs|pif)"/i
meta MIMEHEADER_ATTACHMENT_JAR (__MIMEHEADER_CONTENTDISP_ATTACHMENT_JAR ||
__MIMEHEADER_CONTENTTYPE_ATTACHMENT_JAR)
describe MIMEHEADER_ATTACHMENT_JAR HEADER: email contains a JAR (or other
executable) file attachment
score MIMEHEADER_ATTACHMENT_JAR 2.0
endif
--
You are receiving this mail because:
You are the assignee for the bug.