You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/11/22 00:55:58 UTC

svn commit: r477970 - /spamassassin/rules/branches/3.1/80_additional.cf

Author: jm
Date: Tue Nov 21 15:55:57 2006
New Revision: 477970

URL: http://svn.apache.org/viewvc?view=rev&rev=477970
Log:
change RCVD_FORGED_WROTE to use RCVD_FORGED_WROTE2 code instead; catches 4.95% of spam instead of just 4.2%

Modified:
    spamassassin/rules/branches/3.1/80_additional.cf

Modified: spamassassin/rules/branches/3.1/80_additional.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/branches/3.1/80_additional.cf?view=diff&rev=477970&r1=477969&r2=477970
==============================================================================
--- spamassassin/rules/branches/3.1/80_additional.cf (original)
+++ spamassassin/rules/branches/3.1/80_additional.cf Tue Nov 21 15:55:57 2006
@@ -284,7 +284,7 @@
 
 endif # Mail::SpamAssassin::Plugin::MIMEHeader
 
-header RCVD_FORGED_WROTE    Received =~ /from \d\S+\d \(HELO [a-z]\S+\) by \S+ with esmtp \([A-Z0-9]/s
+header RCVD_FORGED_WROTE    Received =~ /from [0-9.]+ \(HELO \S+[a-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
 describe RCVD_FORGED_WROTE  Forged 'Received' header found ('wrote:' spam)
 
 header __MIMEOLE_1106   X-MimeOLE =~ /^Produced By Microsoft MimeOLE V6.00.2800.1106$/