You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by pd...@apache.org on 2019/09/25 10:15:09 UTC
svn commit: r1867513 - in /spamassassin/trunk/rulesrc/sandbox/pds:
10_menaces.cf 20_freshfmb.cf
Author: pds
Date: Wed Sep 25 10:15:09 2019
New Revision: 1867513
URL: http://svn.apache.org/viewvc?rev=1867513&view=rev
Log:
New rules
Modified:
spamassassin/trunk/rulesrc/sandbox/pds/10_menaces.cf
spamassassin/trunk/rulesrc/sandbox/pds/20_freshfmb.cf
Modified: spamassassin/trunk/rulesrc/sandbox/pds/10_menaces.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/10_menaces.cf?rev=1867513&r1=1867512&r2=1867513&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/10_menaces.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/10_menaces.cf Wed Sep 25 10:15:09 2019
@@ -79,3 +79,9 @@ meta PDS_TONAME_EQ_TOLOCAL_FREEM_FOR
describe PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE Forged replyto and __PDS_TONAME_EQ_TOLOCAL
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.0 # limit
reuse PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE
+
+meta PDS_TONAME_EQ_TOLOCAL_VSHORT __KAM_BODY_LENGTH_LT_128 && __PDS_TONAME_EQ_TOLOCAL
+describe PDS_TONAME_EQ_TOLOCAL_VSHORT Very short body and From looks like 2 different emails
+score PDS_TONAME_EQ_TOLOCAL_VSHORT 1.0 # limit
+reuse PDS_TONAME_EQ_TOLOCAL_VSHORT
+
Modified: spamassassin/trunk/rulesrc/sandbox/pds/20_freshfmb.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/20_freshfmb.cf?rev=1867513&r1=1867512&r2=1867513&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/20_freshfmb.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/20_freshfmb.cf Wed Sep 25 10:15:09 2019
@@ -11,9 +11,14 @@ reuse NUMBEREND_LINKBAIT
meta NUMBERONLY_BITCOIN_EXP __NUMBERONLY_TLD && __BITCOIN_ID && __NAKED_TO
describe NUMBERONLY_BITCOIN_EXP Domain ends in a large number and very short body with link
-score NUMBERONLY_BITCOIN_EXP 1.0 # limit
+score NUMBERONLY_BITCOIN_EXP 2.0 # limit
reuse NUMBERONLY_BITCOIN_EXP
+meta PDS_NAKED_TO_NUMERO __NAKED_TO && __NUMBERONLY_TLD
+describe PDS_NAKED_TO_NUMERO Naked-to, numberonly domain
+score PDS_NAKED_TO_NUMERO 2.0
+reuse PDS_NAKED_TO_NUMERO
+
# _AUTHORDOMAIN_ implemented only from 3.4.1
if (version >= 3.004001)
ifplugin Mail::SpamAssassin::Plugin::AskDNS