You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/01/16 01:07:40 UTC
svn commit: r899847 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf
Author: khopesh
Date: Sat Jan 16 00:07:39 2010
New Revision: 899847
URL: http://svn.apache.org/viewvc?rev=899847&view=rev
Log:
exploring warren's theory that latin americans use all-uppercase more commonly, ditto on my personal theory that that's true for AOL users too. also brushing up my APNIC rule with some sanity tests to ensure the new version is equal to the old one
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf?rev=899847&r1=899846&r2=899847&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf Sat Jan 16 00:07:39 2010
@@ -52,3 +52,33 @@
header __MSGID_JAVAMAIL Message-ID =~ /\.JavaMail\./
tflags __MSGID_JAVAMAIL nice
+
+
+meta AOL_ALL_CAPS __AT_AOL_MSGID && UPPERCASE_75_100
+describe AOL_ALL_CAPS AOL users sometimes write mail in all uppercase
+tflags AOL_ALL_CAPS nice
+
+# from http://lacnic.net/en/registro/ at 20100115
+header __RCVD_VIA_LACNIC X-Spam-Relays-External =~ /\[ ip=(?:1(?:90|8[679]|20(?:[01]\.|6\.223\.1(?:24|30))))\./
+tflags __RCVD_VIA_LACNIC nopublish
+header __RCVD_VIA_LACNIC_LE X-Spam-Relays-External =~ /^\[ ip=(?:1(?:90|8[679]|20(?:[01]\.|6\.223\.1(?:24|30))))\./
+tflags __RCVD_VIA_LACNIC_LE nopublish
+
+# __RCVD_VIA_APNIC is from my khop-bl and was adopted into warren's sandbox
+
+# just to test ... E + I should equal the original, LE should be the useful one
+header __RCVD_VIA_APNIC_E X-Spam-Relays-External =~ /\[ ip=(?-xism:0?5[89]|6[01]|1(?:[12][0-6]|1[7-9]|75|8[0123])|2(?:03|1[0189]|2[012]|02(?!\.123\.0?(?:[012]\d|3[01])))|169\.2(?:0[89]|1\d|2[01]|223)|169\.2(?:1[04]|22))\./
+tflags __RCVD_VIA_APNIC_E nopublish
+header __RCVD_VIA_APNIC_I X-Spam-Relays-Internal =~ /\[ ip=(?-xism:0?5[89]|6[01]|1(?:[12][0-6]|1[7-9]|75|8[0123])|2(?:03|1[0189]|2[012]|02(?!\.123\.0?(?:[012]\d|3[01])))|169\.2(?:0[89]|1\d|2[01]|223)|169\.2(?:1[04]|22))\./
+tflags __RCVD_VIA_APNIC_I nopublish
+
+header __RCVD_VIA_APNIC_LE X-Spam-Relays-External =~ /^\[ ip=(?-xism:0?5[89]|6[01]|1(?:[12][0-6]|1[7-9]|75|8[0123])|2(?:03|1[0189]|2[012]|02(?!\.123\.0?(?:[012]\d|3[01])))|169\.2(?:0[89]|1\d|2[01]|223)|169\.2(?:1[04]|22))\./
+tflags __RCVD_VIA_APNIC_LE nopublish
+
+# testing warren's theory from "Uppercase E-mail in Latin America" 2009-10-06
+# http://old.nabble.com/Uppercase-E-mail-in-Latin-America-td25748291.html
+# note, masscheck probably doesn't have enough LACNIC ham for this test
+meta LACNIC_ALL_CAPS __RCVD_VIA_LACNIC && UPPERCASE_75_100
+describe LACNIC_ALL_CAPS Latino users sometimes write mail in all uppercase
+tflags LACNIC_ALL_CAPS nice nopublish
+