You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2019/06/25 16:37:42 UTC
svn commit: r1862076 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Tue Jun 25 16:37:42 2019
New Revision: 1862076
URL: http://svn.apache.org/viewvc?rev=1862076&view=rev
Log:
Clean up and push a couple of rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1862076&r1=1862075&r2=1862076&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Tue Jun 25 16:37:42 2019
@@ -2801,14 +2801,23 @@ score URI_HEX_IP 2
describe URI_HEX_IP URI with hex-encoded IP-address host
tflags URI_HEX_IP publish
-uri URI_PHP_REDIR m;/redirect\.php\?;i
+uri __URI_PHP_REDIR m;/redirect\.php\?;i
+meta URI_PHP_REDIR __URI_PHP_REDIR && !__USING_VERP1
+score URI_PHP_REDIR 3.500 # limit
+describe URI_PHP_REDIR PHP redirect to different URL (link obfuscation)
+tflags URI_PHP_REDIR publish
+
if can(Mail::SpamAssassin::Conf::feature_bug6558_free)
- body __DAY_I_EARNED /day,?\sI\s(?:earned|got|received|made)\s\$\s?\d{3}/i
+ body __DAY_I_EARNED /day,?\sI\s(?:earned|got|received|made|brought\sin)\s\$\s?\d{3}/i
tflags __DAY_I_EARNED multiple maxhits=4
- meta __DAY_I_EARNED_1 __DAY_I_EARNED >= 1
- meta __DAY_I_EARNED_2 __DAY_I_EARNED >= 2
- meta __DAY_I_EARNED_3 __DAY_I_EARNED >= 3
+ #meta __DAY_I_EARNED_1 __DAY_I_EARNED >= 1
+ #meta __DAY_I_EARNED_2 __DAY_I_EARNED >= 2
+ #meta __DAY_I_EARNED_3 __DAY_I_EARNED >= 3
+ meta DAY_I_EARNED __DAY_I_EARNED >= 3
+ score DAY_I_EARNED 3.000 # limit
+ describe DAY_I_EARNED Work-at-home spam
+ tflags DAY_I_EARNED publish
endif