You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by da...@apache.org on 2018/02/13 17:46:12 UTC
svn commit: r1824165 - /spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf
Author: davej
Date: Tue Feb 13 17:46:12 2018
New Revision: 1824165
URL: http://svn.apache.org/viewvc?rev=1824165&view=rev
Log:
Sandbox testing Office 365 proxy in meta rules for compromised account detection.
Modified:
spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf
Modified: spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf?rev=1824165&r1=1824164&r2=1824165&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/davej/20_ena.cf Tue Feb 13 17:46:12 2018
@@ -5,3 +5,10 @@ body __ENA_BAD_OPTOUT4 /(please|reply).
meta T_ENA_BAD_OPTOUT __ENA_BAD_OPTOUT1 || __ENA_BAD_OPTOUT2 || __ENA_BAD_OPTOUT3 || __ENA_BAD_OPTOUT4
describe T_ENA_BAD_OPTOUT Bad unsubscribe by replying to an email address with a specific subject
score T_ENA_BAD_OPTOUT 0.1
+
+header __RCVD_OFFICE365 Received =~ /\.outbound\.protection\.outlook\.com/
+header __RCVD_OFFICE365_PROXY X-ClientProxiedBy =~ /\.outlook\.com \(/
+meta ENA_RCVD_O365_PROXY __RCVD_OFFICE365_PROXY && __RCVD_OFFICE365
+describe ENA_RCVD_O365_PROXY Email sent through Office 365 proxy via a mail client using authenticated SMTP.
+score ENA_RCVD_O365_PROXY 0.1
+