You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2015/05/12 16:50:52 UTC
svn commit: r1678965 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Tue May 12 14:50:51 2015
New Revision: 1678965
URL: http://svn.apache.org/r1678965
Log:
Add SPOOFED_FREEM_REPTO family
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1678965&r1=1678964&r2=1678965&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Tue May 12 14:50:51 2015
@@ -1955,6 +1955,17 @@ tflags __RAW_TOKEN
meta RAW_TOKENS __RAW_TOKEN > 2
describe RAW_TOKENS Raw mail merge tokens in body
+header __REPTO_CHN_FREEM Reply-To =~ /\@(?:sina|aliyun)\.com/i
+
+meta __SPOOFED_FREEM_REPTO __SPOOFED_FREEMAIL && FREEMAIL_REPLYTO
+
+meta SPOOFED_FREEM_REPTO_CHN __SPOOFED_FREEM_REPTO && __REPTO_CHN_FREEM
+describe SPOOFED_FREEM_REPTO_CHN Forged freemail sender with Chinese freemail reply-to
+score SPOOFED_FREEM_REPTO_CHN 2.000
+
+meta SPOOFED_FREEM_REPTO __SPOOFED_FREEM_REPTO && !__REPTO_CHN_FREEM
+describe SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
+score SPOOFED_FREEM_REPTO 2.000