You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2019/01/31 21:30:06 UTC
svn commit: r1852650 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Jan 31 21:30:06 2019
New Revision: 1852650
URL: http://svn.apache.org/viewvc?rev=1852650&view=rev
Log:
Add some ZW frequency evaluation rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1852650&r1=1852649&r2=1852650&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Jan 31 21:30:06 2019
@@ -2623,6 +2623,9 @@ endif
if can(Mail::SpamAssassin::Conf::feature_bug6558_free)
body __UNICODE_OBFU_ZW /[a-z0-9\s](?:\x9d|\xe2\x80[\x8b\x8c\x8d]|\xef\xbb\xbf)+[a-z0-9]{1,8}(?:\x9d|\xe2\x80[\x8b\x8c\x8d]|\xef\xbb\xbf)+[a-z0-9\s]/i
tflags __UNICODE_OBFU_ZW multiple maxhits=10
+ meta __UNICODE_OBFU_ZW_2 __UNICODE_OBFU_ZW > 1
+ meta __UNICODE_OBFU_ZW_3 __UNICODE_OBFU_ZW > 2
+ meta __UNICODE_OBFU_ZW_5 __UNICODE_OBFU_ZW > 4
meta __UNICODE_OBFU_ZW_MANY __UNICODE_OBFU_ZW > 9
meta UNICODE_OBFU_ZW __UNICODE_OBFU_ZW_MANY && !__USING_VERP1 && __DOS_LINK
describe UNICODE_OBFU_ZW Obfuscating text with hidden characters