You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by wt...@apache.org on 2009/11/16 21:01:50 UTC
svn commit: r880938 - /spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf
Author: wtogami
Date: Mon Nov 16 20:01:49 2009
New Revision: 880938
URL: http://svn.apache.org/viewvc?rev=880938&view=rev
Log:
trobert's phishing rule
Modified:
spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf
Modified: spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf?rev=880938&r1=880937&r2=880938&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf Mon Nov 16 20:01:49 2009
@@ -0,0 +1,14 @@
+# trobert 20091116
+header __SUBJECT_MAIL_DEACTIVATED Subject =~ /mail.*deactivated/
+describe __SUBJECT_MAIL_DEACTIVATED Email warns of deactivated email account
+tflags __SUBJECT_MAIL_DEACTIVATED nopublish
+
+ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
+mimeheader __ZIP_MIME_ATTACHMENT Content-Type =~ /application\/zip/
+describe __ZIP_MIME_ATTACHMENT Contains a zip file attachment
+tflags __ZIP_MIME_ATTACHMENT nopublish
+endif
+
+meta DEACTIVATED_WITH_ZIP __SUBJECT_MAIL_DEACTIVATED && __ZIP_MIME_ATTACHMENT
+describe DEACTIVATED_WITH_ZIP Deactivated email account phishing .zip
+tflags DEACTIVATED_WITH_ZIP nopublish