You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/10/06 18:34:21 UTC
svn commit: r1843026 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sat Oct 6 18:34:21 2018
New Revision: 1843026
URL: http://svn.apache.org/viewvc?rev=1843026&view=rev
Log:
Tuning the obfuscated bitcoin rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1843026&r1=1843025&r2=1843026&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sat Oct 6 18:34:21 2018
@@ -1872,11 +1872,17 @@ describe BTC_ORG Bitcoin
# __BTC_OBFU_4 may duplicate (to a degree) FUZZY_BITCOIN, clean up if this performs well
body __BTC_OBFU_2 /\b\W{0,10}b(?!itcoin)\W{0,10}i\W{0,10}t\W{0,10}c\W{0,10}o\W{0,10}i\W{0,10}n\W{0,10}\b/i
body __BTC_OBFU_3 /\b\W{0,10}b(?!tc\b)\W{0,10}t\W{0,10}c\W{0,10}\b/i
-body __BTC_OBFU_4 /\bb[i\x{0456}]t[c\x{0441}][o\x{043E}][i\x{0456}]n\b/i
+body __BTC_OBFU_4 /\bb(?!itcoin)[i\x{0456}]t[c\x{0441}][o\x{043E}][i\x{0456}]n\b/i
meta OBFU_BITCOIN ( __BITCOIN_ID && ( __BTC_OBFU_2 || __BTC_OBFU_3 || __BTC_OBFU_4 ) )
describe OBFU_BITCOIN Obfuscated BitCoin references
score OBFU_BITCOIN 2.000 # limit
+ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
+ # for masscheck comparison
+ meta T_OBFU_BITCOIN_FUZZY ( __BITCOIN_ID && ( __BTC_OBFU_2 || __BTC_OBFU_3 || FUZZY_BITCOIN ) )
+endif
+
+
#body NUM_FREE /\b\d+free/i
#describe NUM_FREE Number + free