You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/05/03 03:49:43 UTC
svn commit: r1592136 - /spamassassin/trunk/rules/20_uri_tests.cf
Author: khopesh
Date: Sat May 3 01:49:43 2014
New Revision: 1592136
URL: http://svn.apache.org/r1592136
Log:
refined NORMAL_HTTP_TO_IP to target only public IPv4 addresses
Modified:
spamassassin/trunk/rules/20_uri_tests.cf
Modified: spamassassin/trunk/rules/20_uri_tests.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_uri_tests.cf?rev=1592136&r1=1592135&r2=1592136&view=diff
==============================================================================
--- spamassassin/trunk/rules/20_uri_tests.cf (original)
+++ spamassassin/trunk/rules/20_uri_tests.cf Sat May 3 01:49:43 2014
@@ -116,6 +116,6 @@ describe URI_NO_WWW_BIZ_CGI CGI in .biz
###########################################################################
-uri NORMAL_HTTP_TO_IP m{^https?://\d+\.\d+\.\d+\.\d+}i
-describe NORMAL_HTTP_TO_IP Uses a dotted-decimal IP address in URL
+uri NORMAL_HTTP_TO_IP m{^https?://(?!1(?:0|27|69\.254|72\.(?:1[6-9]|2\d|3[01])|92\.168)\.)\d+\.\d+\.\d+\.\d+\b(?![.-])}i
+describe NORMAL_HTTP_TO_IP URI host has a public dotted-decimal IPv4 address