You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/05/21 18:37:48 UTC

svn commit: r1831982 - /spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Author: jhardin
Date: Mon May 21 18:37:48 2018
New Revision: 1831982

URL: http://svn.apache.org/viewvc?rev=1831982&view=rev
Log:
Tweak UNICODE_OBFU_DOM_NO_BODY score and __UNICODE_OBFU_URI_DOM

Modified:
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1831982&r1=1831981&r2=1831982&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon May 21 18:37:48 2018
@@ -2259,10 +2259,10 @@ describe   HDR_ORDER_FTSDMCXX_DIRECT  He
 score      HDR_ORDER_FTSDMCXX_DIRECT  2.500	# limit
 tflags     HDR_ORDER_FTSDMCXX_DIRECT  publish
 
-body       __UNICODE_OBFU_URI_DOM     /[0-9a-z](?:\xe3\x80\x82|\xe7\x82\xb9)(?:com|net|info|biz|cn)\b/i
+body       __UNICODE_OBFU_URI_DOM     /[0-9a-z]{3,10}(?:\xe3\x80\x82|\xe7\x82\xb9)(?:com|net|info|biz|cn)\b/i
 meta       UNICODE_OBFU_DOM_NO_BODY   __UNICODE_OBFU_URI_DOM && __EMPTY_BODY
-score      UNICODE_OBFU_DOM_NO_BODY   3.250	# limit
-describe   UNICODE_OBFU_DOM_NO_BODY   Unicode-obfuscated domain + no body
+score      UNICODE_OBFU_DOM_NO_BODY   3.750	# limit
+describe   UNICODE_OBFU_DOM_NO_BODY   Unicode/chinese obfuscated domain + no body
 
 header     __REPTO_MULTI_ADDR         Reply-To:address =~ /,/
 meta       MULTI_REPTO_NO_RDNS        __REPTO_MULTI_ADDR && __RDNS_NONE && !__DOS_HAS_LIST_UNSUB