You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2019/09/18 20:35:59 UTC
svn commit: r1867148 - in /spamassassin/trunk/rulesrc/sandbox/jhardin:
20_misc_testing.cf 20_shared_subrules.cf
Author: jhardin
Date: Wed Sep 18 20:35:59 2019
New Revision: 1867148
URL: http://svn.apache.org/viewvc?rev=1867148&view=rev
Log:
Add tflags net to some __NOT_SPOOFED metas, add a score limit
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_shared_subrules.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1867148&r1=1867147&r2=1867148&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Wed Sep 18 20:35:59 2019
@@ -1945,7 +1945,7 @@ meta __BITCOIN_SPAM_05 __BITC
meta BITCOIN_SPAM_05 __BITCOIN_SPAM_05 && !__HAS_IN_REPLY_TO
describe BITCOIN_SPAM_05 BitCoin spam pattern 05
score BITCOIN_SPAM_05 2.500 # limit
-tflags BITCOIN_SPAM_05 publish
+tflags BITCOIN_SPAM_05 net publish
meta BITCOIN_SPAM_06 __BITCOIN_ID && TVD_RCVD_SPACE_BRACKET
describe BITCOIN_SPAM_06 BitCoin spam pattern 06
@@ -2305,23 +2305,24 @@ body __RAW_TOKEN_BODY
header __REPTO_CHN_FREEM Reply-To =~ /\@(?:sina|aliyun)\.com/i
meta __SPOOFED_FREEM_REPTO __SPOOFED_FREEMAIL && FREEMAIL_REPLYTO
+tflags __SPOOFED_FREEM_REPTO net
meta SPOOFED_FREEM_REPTO_CHN (__SPOOFED_FREEM_REPTO || FORGED_YAHOO_RCVD) && __REPTO_CHN_FREEM
describe SPOOFED_FREEM_REPTO_CHN Forged freemail sender with Chinese freemail reply-to
score SPOOFED_FREEM_REPTO_CHN 3.500
-tflags SPOOFED_FREEM_REPTO_CHN publish
+tflags SPOOFED_FREEM_REPTO_CHN net publish
header __REPTO_RUS_FREEM Reply-To =~ /\@mail\.ru/i
meta SPOOFED_FREEM_REPTO_RUS (__SPOOFED_FREEM_REPTO || FORGED_YAHOO_RCVD) && __REPTO_RUS_FREEM
describe SPOOFED_FREEM_REPTO_RUS Forged freemail sender with Russian freemail reply-to
score SPOOFED_FREEM_REPTO_RUS 3.500
-tflags SPOOFED_FREEM_REPTO_RUS publish
+tflags SPOOFED_FREEM_REPTO_RUS net publish
meta SPOOFED_FREEM_REPTO __SPOOFED_FREEM_REPTO && !__THREADED
describe SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
score SPOOFED_FREEM_REPTO 2.500
-tflags SPOOFED_FREEM_REPTO publish
+tflags SPOOFED_FREEM_REPTO net publish
#header __VERY_LONG_REPTO Reply-To =~ /[^<\s\@]{25,}\@/
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_shared_subrules.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_shared_subrules.cf?rev=1867148&r1=1867147&r2=1867148&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_shared_subrules.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_shared_subrules.cf Wed Sep 18 20:35:59 2019
@@ -9,7 +9,9 @@ rawbody __BUGGED_IMG m{<img\b[^>]{0,100
# originally from khopesh/20_s25r.cf
# Sanity check: how much freemail lacks spf or dkim?
# JHardin: convert to subrule and scored meta
-meta __SPOOFED_FREEMAIL !__NOT_SPOOFED && FREEMAIL_FROM
-meta SPOOFED_FREEMAIL __SPOOFED_FREEMAIL && !__FS_SUBJ_RE
+meta __SPOOFED_FREEMAIL !__NOT_SPOOFED && FREEMAIL_FROM
+meta SPOOFED_FREEMAIL __SPOOFED_FREEMAIL && !__FS_SUBJ_RE
+score SPOOFED_FREEMAIL 2.000 # limit
+tflags SPOOFED_FREEMAIL net