You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2011/11/03 02:33:25 UTC
svn commit: r1196913 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Nov 3 01:33:24 2011
New Revision: 1196913
URL: http://svn.apache.org/viewvc?rev=1196913&view=rev
Log:
Add LARGE_PCT_AFTER_MANY for testing
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1196913&r1=1196912&r2=1196913&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Nov 3 01:33:24 2011
@@ -776,3 +776,10 @@ body __SCANNED_HP /(?:(
meta SCANNED_EXTERNAL __SCANNED_HP && !ALL_TRUSTED
describe SCANNED_EXTERNAL "Scanned Document" email from external source - malware?
+# real estate scam spams 11/2011
+# roughly similar to FS_LARGE_PERCENT2, better S/O?
+body __LARGE_PERCENT_AFTER /\d{4}% after/i
+tflags __LARGE_PERCENT_AFTER multiple maxhits=4
+meta LARGE_PCT_AFTER_MANY __LARGE_PERCENT_AFTER > 3
+describe LARGE_PCT_AFTER_MANY Many large percentages after...
+