You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2021/04/24 18:42:00 UTC
svn commit: r1889153 - in /spamassassin/trunk:
rules/73_sandbox_manual_scores.cf rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sat Apr 24 18:42:00 2021
New Revision: 1889153
URL: http://svn.apache.org/viewvc?rev=1889153&view=rev
Log:
Push possible-phishing rules for publication, spank the AdultDatingCompany joe-jobbers
Modified:
spamassassin/trunk/rules/73_sandbox_manual_scores.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rules/73_sandbox_manual_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/73_sandbox_manual_scores.cf?rev=1889153&r1=1889152&r2=1889153&view=diff
==============================================================================
--- spamassassin/trunk/rules/73_sandbox_manual_scores.cf (original)
+++ spamassassin/trunk/rules/73_sandbox_manual_scores.cf Sat Apr 24 18:42:00 2021
@@ -114,3 +114,8 @@ score AD_PREFS 0.250
#score LONG_HEX_URI (0) 0.001 (0) 0.001
#score FROM_PAYPAL_SPOOF (0) 0.001 (0) 0.001
+
+# jhardin
+# Don't joe-job a SA dev's wife
+score ADULT_DATING_COMPANY 20.000
+
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1889153&r1=1889152&r2=1889153&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sat Apr 24 18:42:00 2021
@@ -3892,12 +3892,20 @@ meta POSSIBLE_AMAZON_PHISH_02 (
meta POSSIBLE_EBAY_PHISH_01 (__FROM_NAME_EBAYCOM && __NAME_EMAIL_DIFF)
meta POSSIBLE_EBAY_PHISH_02 (__FROM_NAME_EBAYCOM && !__HDR_RCVD_EBAY)
+describe POSSIBLE_EBAY_PHISH_02 Claims to be from ebay but not processed by any ebay MTA
+tflags POSSIBLE_EBAY_PHISH_02 publish
meta POSSIBLE_APPLE_PHISH_01 (__FROM_NAME_APPLECOM && __NAME_EMAIL_DIFF)
meta POSSIBLE_APPLE_PHISH_02 (__FROM_NAME_APPLECOM && !__HDR_RCVD_APPLE)
+describe POSSIBLE_APPLE_PHISH_02 Claims to be from apple but not processed by any apple MTA
+tflags POSSIBLE_APPLE_PHISH_02 publish
meta POSSIBLE_PAYPAL_PHISH_01 (__FROM_NAME_PAYPALCOM && __NAME_EMAIL_DIFF)
+describe POSSIBLE_PAYPAL_PHISH_01 Claims to be from paypal but has non-paypal from email address
+tflags POSSIBLE_PAYPAL_PHISH_01 publish
meta POSSIBLE_PAYPAL_PHISH_02 (__FROM_NAME_PAYPALCOM && !__HDR_RCVD_PAYPAL)
+describe POSSIBLE_PAYPAL_PHISH_02 Claims to be from paypal but not processed by any paypal MTA
+tflags POSSIBLE_PAYPAL_PHISH_02 publish
header __FROM_ADDR_GMAIL From:addr =~ /\@gmail\.com>?$/i
meta POSSIBLE_GMAIL_PHISHER (__FROM_ADDR_GMAIL && __NAME_EMAIL_DIFF)