You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kb...@apache.org on 2008/06/19 01:58:50 UTC

svn commit: r669337 - /spamassassin/rules/trunk/sandbox/kb/70_misc.cf

Author: kb
Date: Wed Jun 18 16:58:50 2008
New Revision: 669337

URL: http://svn.apache.org/viewvc?rev=669337&view=rev
Log:
Some Opera MUA Message-Id checks. Early stage testing, alpha quality...


Modified:
    spamassassin/rules/trunk/sandbox/kb/70_misc.cf

Modified: spamassassin/rules/trunk/sandbox/kb/70_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/kb/70_misc.cf?rev=669337&r1=669336&r2=669337&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/kb/70_misc.cf (original)
+++ spamassassin/rules/trunk/sandbox/kb/70_misc.cf Wed Jun 18 16:58:50 2008
@@ -3,3 +3,23 @@
 
 header  THEBAT_UNREG  X-Mailer =~ /^The Bat! .{0,20} UNREG$/
 
+
+# Bunch of rules to detect Opera MUA fakes.  These seem to just have started.
+# The Message-Id masks used are based on very brief investigation.  Needs
+# work, seriously.  Lets's see how they perform anyway.
+
+header   __OPERA_MUA           User-Agent =~ /^Opera /
+
+header   __OPERA_MID_NO_DIGIT  Message-ID =~ /^<[^0-9]{2,40}\@/
+header   __OPERA_MID_NON_OP    Message-ID =~ /^<[^o][^p]\./
+header   __OPERA_MID_MASK      Message-ID =~ /^<[a-z0-9]{2}\.[a-z0-9]{14}\@/
+
+meta     OPERA_MID_NO_DIGIT    __OPERA_MUA && __OPERA_MID_NO_DIGIT
+describe OPERA_MID_NO_DIGIT    MUA Opera, Message-Id does not contain digit
+
+meta     OPERA_MID_NON_OP      __OPERA_MUA && __OPERA_MID_NON_OP
+describe OPERA_MID_NON_OP      MUA Opera, Message-Id does not start with op
+
+meta     OPERA_MID_BAD_MASK    __OPERA_MUA && !__OPERA_MID_MASK
+describe OPERA_MID_BAD_MASK    MUA Opera, bad Message-Id mask
+