You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kb...@apache.org on 2008/06/19 01:58:50 UTC
svn commit: r669337 - /spamassassin/rules/trunk/sandbox/kb/70_misc.cf
Author: kb
Date: Wed Jun 18 16:58:50 2008
New Revision: 669337
URL: http://svn.apache.org/viewvc?rev=669337&view=rev
Log:
Some Opera MUA Message-Id checks. Early stage testing, alpha quality...
Modified:
spamassassin/rules/trunk/sandbox/kb/70_misc.cf
Modified: spamassassin/rules/trunk/sandbox/kb/70_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/kb/70_misc.cf?rev=669337&r1=669336&r2=669337&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/kb/70_misc.cf (original)
+++ spamassassin/rules/trunk/sandbox/kb/70_misc.cf Wed Jun 18 16:58:50 2008
@@ -3,3 +3,23 @@
header THEBAT_UNREG X-Mailer =~ /^The Bat! .{0,20} UNREG$/
+
+# Bunch of rules to detect Opera MUA fakes. These seem to just have started.
+# The Message-Id masks used are based on very brief investigation. Needs
+# work, seriously. Lets's see how they perform anyway.
+
+header __OPERA_MUA User-Agent =~ /^Opera /
+
+header __OPERA_MID_NO_DIGIT Message-ID =~ /^<[^0-9]{2,40}\@/
+header __OPERA_MID_NON_OP Message-ID =~ /^<[^o][^p]\./
+header __OPERA_MID_MASK Message-ID =~ /^<[a-z0-9]{2}\.[a-z0-9]{14}\@/
+
+meta OPERA_MID_NO_DIGIT __OPERA_MUA && __OPERA_MID_NO_DIGIT
+describe OPERA_MID_NO_DIGIT MUA Opera, Message-Id does not contain digit
+
+meta OPERA_MID_NON_OP __OPERA_MUA && __OPERA_MID_NON_OP
+describe OPERA_MID_NON_OP MUA Opera, Message-Id does not start with op
+
+meta OPERA_MID_BAD_MASK __OPERA_MUA && !__OPERA_MID_MASK
+describe OPERA_MID_BAD_MASK MUA Opera, bad Message-Id mask
+