You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2012/04/01 00:01:16 UTC
svn commit: r1307918 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sat Mar 31 22:01:16 2012
New Revision: 1307918
URL: http://svn.apache.org/viewvc?rev=1307918&view=rev
Log:
Add URI with doubled domain name rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1307918&r1=1307917&r2=1307918&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sat Mar 31 22:01:16 2012
@@ -811,4 +811,9 @@ endif
meta ACH_CANCELLED __ACH_CANCELLED
describe ACH_CANCELLED "ACH cancelled" probable malware
+# spams from users list query 03/2012
+uri URI_DBL_DOM_1 m,^https?://([^/]+)/.*https?://(?:[^.]+\.)?\1/,i
+describe URI_DBL_DOM_1 domain appears twice
+uri URI_DBL_DOM_2 m,^https?://[^.]+\.([^/]+)/.*https?://[^.]+\.\1/,i
+describe URI_DBL_DOM_2 domain appears twice