You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2009/09/07 05:57:30 UTC
svn commit: r811992 - in /spamassassin/trunk/rulesrc/sandbox/jhardin:
20_lotsa_money.cf 20_misc_testing.cf 20_tbird_image_spam.cf
Author: jhardin
Date: Mon Sep 7 03:57:29 2009
New Revision: 811992
URL: http://svn.apache.org/viewvc?rev=811992&view=rev
Log:
Small rule tweaks, add descriptions
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf?rev=811992&r1=811991&r2=811992&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf Mon Sep 7 03:57:29 2009
@@ -30,6 +30,9 @@
meta MONEY_FORM LOTS_OF_MONEY && (FILL_THIS_FORM_LONG || FILL_THIS_FORM_ML)
describe MONEY_FORM Lots of money if you fill out a form
+meta MONEY_ACCOUNT LOTS_OF_MONEY && __YOUR_ACCOUNT
+describe MONEY_ACCOUNT Lots of money to your account
+
# The ADVANCE_FEE rules should probably be updated with LOTS_OF_MONEY
meta MONEY_FEE LOTS_OF_MONEY && (ADVANCE_FEE_2 || ADVANCE_FEE_3 || ADVANCE_FEE_4)
describe MONEY_FEE Lots of money if you first pay a fee
@@ -68,7 +71,10 @@
body __DEAL /\b(?:business|financial|this)\s(?:deal|transaction)/i
body __HUSH_HUSH /\b(?:confidential|private|secre(?:t|cy)|sensitive)\b/i
-body __NO_RISK /\b(?:no\srisk|risk[-\s]free)/i
+
+body NO_RISK /\b(?:no\srisk|risk[-\s]free)\b/i
+describe NO_RISK No risk involved
+
meta MONEY_DEAL LOTS_OF_MONEY && __DEAL && __HUSH_HUSH && __NO_RISK
describe MONEY_DEAL Lots of money in a secret deal
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=811992&r1=811991&r2=811992&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon Sep 7 03:57:29 2009
@@ -17,8 +17,10 @@
ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
mimeheader HTML_ATTACH Content-Type =~ m,text/html;.+\.html?\b,i
+ describe HTML_ATTACH HTML attachment to bypass scanning?
mimeheader OBFU_TEXT_ATTACH Content-Type =~ m,application/octet-stream;.+\.txt\b,i
+ describe OBFU_TEXT_ATTACH Text attachment with non-text MIME type
endif
# general case of spample observation
@@ -44,11 +46,11 @@
ifplugin Mail::SpamAssassin::Plugin::FreeMail
meta FROM_MISSP_FREEMAIL __FROM_MISSPACED && (FREEMAIL_FROM || FREEMAIL_REPLYTO)
- describe FROM_MISSP_FREEMAIL From misspaced + from freemail
+ describe FROM_MISSP_FREEMAIL From misspaced + freemail provider
endif
meta FROM_MISSP_MSFT __FROM_MISSPACED && (__ANY_OUTLOOK_MUA || __HAS_MIMEOLE || __MIMEOLE_MS)
-describe FROM_MISSP_MSFT Microsoft tools don't botch the From header
+describe FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
meta FROM_MISSP_DYNIP __FROM_MISSPACED && RDNS_DYNAMIC
describe FROM_MISSP_DYNIP From misspaced + dynamic rDNS
@@ -63,9 +65,4 @@
meta TBIRD_SUSP_MIME_BDRY __MUA_TBIRD && __TB_MIME_BDRY_NO_Z
describe TBIRD_SUSP_MIME_BDRY Unlikely Thunderbird MIME boundary
-header UNQ_MIME_BDRY Content-Type =~ /boundary=[^"]/i
-describe UNQ_MIME_BDRY Unquoted MIME boundary string
-
-# one spam, 9/3/2009
-header __MSGID_QUOTES Message-id: =~ /<"[^"]+"\@/
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf?rev=811992&r1=811991&r2=811992&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf Mon Sep 7 03:57:29 2009
@@ -46,7 +46,8 @@
endif
meta TO_NO_BRKTS_FROM_MSSP __TO_NO_ARROWS_R && __FROM_MISSPACED
-score TO_NO_BRKTS_FROM_MSSP 0.20
+score TO_NO_BRKTS_FROM_MSSP 1.00
+describe TO_NO_BRKTS_FROM_MSSP Multiple formatting errors