You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/04/25 07:23:29 UTC
svn commit: r937745 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf
Author: khopesh
Date: Sun Apr 25 05:23:29 2010
New Revision: 937745
URL: http://svn.apache.org/viewvc?rev=937745&view=rev
Log:
sync with channel
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf?rev=937745&r1=937744&r2=937745&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_blessed.cf Sun Apr 25 05:23:29 2010
@@ -1,7 +1,37 @@
-# From Adam Katz (khopesh) testing grounds and live channels
-# http://khopesh.com/Anti-spam
+## khop-blessed.cf v 2010032819
+##
+## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
+## http://khopesh.com/Anti-spam
+## khopesh on irc://irc.freenode.net/#spamassassin
+##
+## sa-update --gpgkey E8B493D6 --channel khop-blessed.sa.khopesh.com
+##
+## These rules are Copyright (C) 2001-2009 by Adam Katz <antispamATkhopiscom>
+## Licensed under the Creative Commons Non-Commercial Share-alike License 2.0.
+## The author is receptive to relicensing requests.
-### select rules from khop-blessed
+# SVN version; minor tweaks, removed scores and redundant sandbox rules.
+
+header __BSD_REPORT Subject =~ /.(?:ail|ecurit|eekl|onthl)y run output$/
+meta KHOP_BSD_REPORT __BSD_REPORT && ALL_TRUSTED
+describe KHOP_BSD_REPORT Regular run output from a BSD system
+tflags KHOP_BSD_REPORT nice noautolearn nopublish
+#score KHOP_BSD_REPORT -8 # 20050822
+
+header __LOGWATCH_REPORT Subject =~ /^LogWatch for /
+meta KHOP_LOGWATCH_REPORT __LOGWATCH_REPORT && ALL_TRUSTED
+describe KHOP_LOGWATCH_REPORT System report from LogWatch
+tflags KHOP_LOGWATCH_REPORT nice noautolearn nopublish
+#score KHOP_LOGWATCH_REPORT -8 # 20050822
+
+
+### ENCRYPTION
+
+header KHOP_ENCRYPTED_CONTENT Content-Type =~ /^multipart\/(?:x-)?(?:pgp-)?encrypted|application\/(?:x-)?pkcs7-mime/
+describe KHOP_ENCRYPTED_CONTENT Message is encrypted
+tflags KHOP_ENCRYPTED_CONTENT nice noautolearn nopublish
+#score KHOP_ENCRYPTED_CONTENT -7.5 # 20070227
+# Note, encrypted pgp/mime data will trigger EMPTY_MESSAGE
# 2007/02/27 - Syntax taken from the OpenPGP standard, RFC 2440 section 6.2
if ! plugin (Mail::SpamAssassin::Plugin::OpenPGP)
@@ -10,7 +40,7 @@ if ! plugin (Mail::SpamAssassin::Plugin:
tflags __KHOP_PGP_I1 nice
body __KHOP_PGP_I2 /-----END PGP/
tflags __KHOP_PGP_I2 nice
- meta __PGP_INLINE ( __KHOP_PGP_I1 && __KHOP_PGP_I2 )
+ meta __PGP_INLINE ( __KHOP_PGP_I1 && __KHOP_PGP_I2 )
tflags __PGP_INLINE nice noautolearn
meta KHOP_PGP_INLINE __PGP_INLINE
describe KHOP_PGP_INLINE BODY: Contains PGP data
@@ -23,13 +53,25 @@ if ! plugin (Mail::SpamAssassin::Plugin:
meta KHOP_PGP_SIGNED __PGP_SIGNED
describe KHOP_PGP_SIGNED Message seems to contain PGP signature
tflags KHOP_PGP_SIGNED nice noautolearn nopublish
- #score KHOP_PGP_SIGNED -2 -2 -3 -3 # none net bayes net+bayes
+ #score KHOP_PGP_SIGNED -2 -2 -3 -3
endif
+# 2007/02/27 mimic KHOP_PGP_SIGNED for s/mime
+header __SMIME_SIGNED Content-Type =~ /multipart\/signed;.*\/x-pkcs7-signatu/s
+meta KHOP_SMIME_SIGNED __SMIME_SIGNED
+describe KHOP_SMIME_SIGNED Message seems to contain S/MIME signature
+tflags KHOP_SMIME_SIGNED nice noautolearn nopublish
+score KHOP_SMIME_SIGNED -2 -2 -3 -3
+
+# MASSCHECK DETAIL from 20091028-r830464-n
+# SPAM% HAM% S/O RANK NAME
+# 97.5085 71.0054 0.579 0.49 __MISSING_THREAD
+# 99.9395 61.6540 0.618 0.49 __MISSING_REF
+# 99.7691 59.9134 0.625 0.49 __MISSING_REPLY
+# 4.0280 8.7871 0.314 0.21 __INR_AND_NO_REF
+#
+
# 20091016 after much testing, has yet to hit a SINGLE spam (hits ~38% of ham)
-# 20091121 masscheck features 1.0255% spam to 39.3385% ham (S/O=0.025)
-# NOTE: This may soon move to khop-general if it is needed as a dependency
-#meta KHOP_THREADED !__MISSING_REF || !__MISSING_REPLY || !__MISSING_THREAD
meta __THREADED (!__MISSING_REPLY && !__NO_INR_YES_REF) || (__MISSING_REPLY && !__MISSING_REF)
tflags __THREADED nice
meta KHOP_THREADED __THREADED