You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/12/05 14:27:27 UTC
svn commit: r482642 - /spamassassin/rules/branches/3.1/80_additional.cf
Author: jm
Date: Tue Dec 5 05:27:26 2006
New Revision: 482642
URL: http://svn.apache.org/viewvc?view=rev&rev=482642
Log:
replace RCVD_FORGED_WROTE with RCVD_CORRUPT_ESMTP test rule; it hits more spam and completely subsumes the existing hits
Modified:
spamassassin/rules/branches/3.1/80_additional.cf
Modified: spamassassin/rules/branches/3.1/80_additional.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/branches/3.1/80_additional.cf?view=diff&rev=482642&r1=482641&r2=482642
==============================================================================
--- spamassassin/rules/branches/3.1/80_additional.cf (original)
+++ spamassassin/rules/branches/3.1/80_additional.cf Tue Dec 5 05:27:26 2006
@@ -284,7 +284,7 @@
endif # Mail::SpamAssassin::Plugin::MIMEHeader
-header RCVD_FORGED_WROTE Received =~ /from [0-9.]+ \(HELO \S+[a-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
+header RCVD_FORGED_WROTE Received =~ / by \S+ with esmtp \([^a-z ]{6,} [^a-z ]{3,}\) id/
describe RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:' spam)
header __MIMEOLE_1106 X-MimeOLE =~ /^Produced By Microsoft MimeOLE V6.00.2800.1106$/