You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by gb...@apache.org on 2018/03/15 07:42:35 UTC
svn commit: r1826772 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf
Author: gbechis
Date: Thu Mar 15 07:42:35 2018
New Revision: 1826772
URL: http://svn.apache.org/viewvc?rev=1826772&view=rev
Log:
Disable rule that does not pass new lint (Strange rule token: .8)
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf?rev=1826772&r1=1826771&r2=1826772&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_s25r.cf Thu Mar 15 07:42:35 2018
@@ -42,9 +42,9 @@ tflags S25R nopublish
# Early poor-mani's botnet attempts (replaced by KHOP_DYNAMIC and KHOP_DYNAMIC2)
-meta KHOP_BOTNET_4 __LAST_EXTERNAL_RELAY_NO_AUTH && !(__FROM_FREEMAIL || __NOT_SPOOFED || __GREYLISTING) && (__S25R_3 || __S25R_4 || __S25R_5 || __S25R_6 || RDNS_DYNAMIC + __S25R_1*.8 + __S25R_2*.8 > 1.7)
-describe KHOP_BOTNET_4 Relay looks like a dynamic address
-tflags KHOP_BOTNET_4 nopublish
+# meta KHOP_BOTNET_4 __LAST_EXTERNAL_RELAY_NO_AUTH && !(__FROM_FREEMAIL || __NOT_SPOOFED || __GREYLISTING) && (__S25R_3 || __S25R_4 || __S25R_5 || __S25R_6 || RDNS_DYNAMIC + __S25R_1*.8 + __S25R_2*.8 > 1.7)
+# describe KHOP_BOTNET_4 Relay looks like a dynamic address
+# tflags KHOP_BOTNET_4 nopublish
meta KHOP_BOTNET_7 !(__FROM_FREEMAIL || __NOT_SPOOFED || __GREYLISTING) && (__S25R_4 || __S25R_5 || __S25R_6 || __RDNS_HEX || __S25R_1 + __S25R_2 + __S25R_3 + __IP_IN_RELAY > 2)
describe KHOP_BOTNET_7 Relay looks like a dynamic address