You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2021/05/02 16:12:09 UTC
svn commit: r1889417 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sun May 2 16:12:09 2021
New Revision: 1889417
URL: http://svn.apache.org/viewvc?rev=1889417&view=rev
Log:
tuning GOOG_STO_EMAIL_PHISH
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1889417&r1=1889416&r2=1889417&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sun May 2 16:12:09 2021
@@ -3511,7 +3511,7 @@ score GOOG_STO_HTML_PHISH_MANY 4.
tflags GOOG_STO_HTML_PHISH_MANY publish
uri __URI_GOOG_STO_EMAIL m;^https?://(?:firebase)?storage\.googleapis\.com/.*[a-z0-9]@(?:[a-z0-9]{2,20}\.){1,3}[a-z]{2,3}$;i
-meta GOOG_STO_EMAIL_PHISH __URI_GOOG_STO_EMAIL && (__PDS_FROM_NAME_TO_DOMAIN || __TO_IN_SUBJ)
+meta GOOG_STO_EMAIL_PHISH __URI_GOOG_STO_EMAIL && (__PDS_FROM_NAME_TO_DOMAIN || __TO_IN_SUBJ || __FROM_ADMIN || __VERIFY_ACCOUNT)
describe GOOG_STO_EMAIL_PHISH Possible phishing with google hosted content URI having email address
score GOOG_STO_EMAIL_PHISH 3.00 # limit
tflags GOOG_STO_EMAIL_PHISH publish