You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/08/02 17:49:08 UTC
svn commit: r428036 - /spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Author: jm
Date: Wed Aug 2 08:49:06 2006
New Revision: 428036
URL: http://svn.apache.org/viewvc?rev=428036&view=rev
Log:
add informational rule to detect a From line in the middle of the headers
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?rev=428036&r1=428035&r2=428036&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Wed Aug 2 08:49:06 2006
@@ -34,8 +34,17 @@
header GMD_FAKETZ Date =~ m'[\-\+](200[0-9]|\d\d[2468]0)$'
score GMD_FAKETZ 1.0
-# surprisingly good here, let's see elsewhere
-header MIME_BOUND_ALLHEX_5 Content-Type =~ /boundary="[A-F0-9]{5,}"/
-header MIME_BOUND_ALLHEX_7 Content-Type =~ /boundary="[A-F0-9]{7,}"/
header MIME_BOUND_ALLHEX_17 Content-Type =~ /boundary="[A-F0-9]{17,}"/
+
+
+# define an informational rule, which detects when a message has become
+# corrupt with a header prepended before the From line:
+#
+# Header: blah
+# From address@example.com Mon Jun 19 14:15:23 2006
+# Header2: blah
+
+body __BODY_STARTS_WITH_FROM_LINE /^From \S+ \S\S\S \S\S\S .. ..:..:.. \S+\s+\S+\: /s
+meta CORRUPT_FROM_LINE_IN_HDRS (MISSING_HEADERS && __BODY_STARTS_WITH_FROM_LINE && MISSING_DATE && NO_RELAYS)
+describe CORRUPT_FROM_LINE_IN_HDRS Informational: message is corrupt, with a From line in its headers