You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by bi...@apache.org on 2018/12/05 18:53:17 UTC
svn commit: r1848235 - in /spamassassin/trunk/rulesrc/sandbox/billcole:
21_bug_7219.cf 24_mixed_es.cf
Author: billcole
Date: Wed Dec 5 18:53:17 2018
New Revision: 1848235
URL: http://svn.apache.org/viewvc?rev=1848235&view=rev
Log:
Added 'nice' tflag to calm 'bad sandox' scan
Added "Mixed E's" check
Added:
spamassassin/trunk/rulesrc/sandbox/billcole/24_mixed_es.cf
Modified:
spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf
Modified: spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf?rev=1848235&r1=1848234&r2=1848235&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf Wed Dec 5 18:53:17 2018
@@ -4,6 +4,7 @@ body __SCC_BODY_TEXT_LINE_FULL /^\s*\
tflags __SCC_BODY_TEXT_LINE_FULL multiple maxhits=3
header __SCC_SUBJECT_HAS_NON_SPACE Subject =~ /\S/
meta T_SCC_BODY_TEXT_LINE __SCC_BODY_TEXT_LINE_FULL - __SCC_SUBJECT_HAS_NON_SPACE
+tflags T_SCC_BODY_TEXT_LINE nice
meta T_SCC_BODY_SINGLE_WORD T_SCC_BODY_TEXT_LINE < 2 && !__EMPTY_BODY && !__SMIME_MESSAGE && ((__SINGLE_WORD_LINE && !__SINGLE_WORD_SUBJ) || __SINGLE_WORD_LINE > 1)
meta T_SCC_BODY_URI_ONLY T_SCC_BODY_TEXT_LINE < 2 && __HAS_ANY_URI && !__SMIME_MESSAGE
meta T_SCC_EMPTY_BODY T_SCC_BODY_TEXT_LINE < 1 && !__SMIME_MESSAGE
Added: spamassassin/trunk/rulesrc/sandbox/billcole/24_mixed_es.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/billcole/24_mixed_es.cf?rev=1848235&view=auto
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/billcole/24_mixed_es.cf (added)
+++ spamassassin/trunk/rulesrc/sandbox/billcole/24_mixed_es.cf Wed Dec 5 18:53:17 2018
@@ -0,0 +1,7 @@
+body __LOWER_E /e/i
+tflags __LOWER_E multiple
+replace_rules __E_LIKE_LETTER
+body __E_LIKE_LETTER /<E>/
+tflags __E_LIKE_LETTER multiple
+meta MIXED_ES ( __LOWER_E > 20 ) && ( __E_LIKE_LETTER > ( (__LOWER_E * 14 ) / 10) ) && ( ( __E_LIKE_LETTER / __LOWER_E ) < 10 )
+describe MIXED_ES Too many es are not es