You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by fa...@apache.org on 2006/11/27 16:19:52 UTC
svn commit: r479660 - in /spamassassin/rules/trunk/sandbox/fanf:
10_headers.cf 20_base64.cf 30_text.cf
Author: fanf
Date: Mon Nov 27 07:19:51 2006
New Revision: 479660
URL: http://svn.apache.org/viewvc?view=rev&rev=479660
Log:
Some rule ideas.
Added:
spamassassin/rules/trunk/sandbox/fanf/20_base64.cf
spamassassin/rules/trunk/sandbox/fanf/30_text.cf
Modified:
spamassassin/rules/trunk/sandbox/fanf/10_headers.cf
Modified: spamassassin/rules/trunk/sandbox/fanf/10_headers.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/fanf/10_headers.cf?view=diff&rev=479660&r1=479659&r2=479660
==============================================================================
--- spamassassin/rules/trunk/sandbox/fanf/10_headers.cf (original)
+++ spamassassin/rules/trunk/sandbox/fanf/10_headers.cf Mon Nov 27 07:19:51 2006
@@ -6,3 +6,6 @@
header RCVD_FORGED_WROTE3 Received =~ /from \[[0-9.]+\] \(port=\d+ helo=\S+[A-Za-z]+\) by (\S+) with asmtp id \S{6}-\S{6}-\S\S for \S+@\1;/s
+# bizarre
+#
+header RATWARE_WUM exists:X-Wum-Nature
Added: spamassassin/rules/trunk/sandbox/fanf/20_base64.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/fanf/20_base64.cf?view=auto&rev=479660
==============================================================================
--- spamassassin/rules/trunk/sandbox/fanf/20_base64.cf (added)
+++ spamassassin/rules/trunk/sandbox/fanf/20_base64.cf Mon Nov 27 07:19:51 2006
@@ -0,0 +1,18 @@
+# I wonder what happens if we try matching common base64 fragments?
+
+full COMMON_BASE64_01 /wMCAwOCAwACgwCCgwECgwGCgwICgwKCgwMCgwOCgwADAwCDAwEDAwGDAwIDAwKDAwP\/78KCg/
+full COMMON_BASE64_02 /wIBAwKBAwMBAwOBAwABgwCBgwEBgwGBgwIBgwKBgwMBgwOBgwACAwCCAwECAwGCAwICAwKCA/
+full COMMON_BASE64_03 /gIAggKAggMAggOAggABAgCBAgEBAgGBAgIBAgKBAgMBAgOBAgABggCBggEBggGBggIBggKBg/
+full COMMON_BASE64_04 /wEAAwGAAwIAAwKAAwMAAwOAAwAAgwCAgwEAgwGAgwIAgwKAgwMAgwOAgwABAwCBAwEBAwGBA/
+full COMMON_BASE64_05 /gADAgCDAgEDAgGDAgIDAgKDAgMDAgODAgADggCDggEDggGDggIDggKDggMDggODggAAAwCAA/
+full COMMON_BASE64_06 /gMBggOBggACAgCCAgECAgGCAgICAgKCAgMCAgOCAgACggCCggECggGCggICggKCggMCggOCg/
+full COMMON_BASE64_07 /QEDgQGDgQIDgQKDgQMDgQODgQAAAgCAAgEAAgGAAgIAAgKAAgMAAgOAAgAAggCAggEAggGAg/
+full COMMON_BASE64_08 /QIAAQKAAQMAAQOAAQAAgQCAgQEAgQGAgQIAgQKAgQMAgQOAgQABAQCBAQEBAQGBAQIBAQKBA/
+full COMMON_BASE64_09 /AEDAAGDAAIDAAKDAAMDAAODAAADgACDgAEDgAGDgAIDgAKDgAMDgAODgAAAAQCAAQEAAQGAA/
+full COMMON_BASE64_10 /AMAgAOAgAABAACBAAEBAAGBAAIBAAKBAAMBAAOBAAABgACBgAEBgAGBgAIBgAKBgAMBgAOBg/
+full COMMON_BASE64_11 /QACgQCCgQECgQGCgQICgQKCgQMCgQOCgQADAQCDAQEDAQGDAQIDAQKDAQMDAQODAQADgQCDg/
+full COMMON_BASE64_12 /QMBAQOBAQABgQCBgQEBgQGBgQIBgQKBgQMBgQOBgQACAQCCAQECAQGCAQICAQKCAQMCAQOCA/
+full COMMON_BASE64_13 /AACAACCAAECAAGCAAICAAKCAAMCAAOCAAACgACCgAECgAGCgAICgAKCgAMCgAOCgAADAACDA/
+full COMMON_BASE64_14 /CBMqXMiwocOHECNKnEixosWLGDNq3Mixo8ePIEOKHEmypMmTKFOqXMmypcuXMGPKnEmzps2b/
+full COMMON_BASE64_14 /OHPq3Mmzp8+fQIMKHUq0qNGjSJMqXcq0qdOnUKNKnUq1qtWrWLNq3cq1q9evYMOKHUu2rNmz/
+
Added: spamassassin/rules/trunk/sandbox/fanf/30_text.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/fanf/30_text.cf?view=auto&rev=479660
==============================================================================
--- spamassassin/rules/trunk/sandbox/fanf/30_text.cf (added)
+++ spamassassin/rules/trunk/sandbox/fanf/30_text.cf Mon Nov 27 07:19:51 2006
@@ -0,0 +1,5 @@
+# bits of text from spam
+
+body SHORT_TERM_TARGET /Short Term Target:/
+body LONG_TERM_TARGET /Long Term Target:/
+meta SHORT_AND_LOG_TARGETS (SHORT_TERM_TARGET && LONG_TERM_TARGET)