You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2020/10/28 21:10:10 UTC
svn commit: r1882951 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Wed Oct 28 21:10:09 2020
New Revision: 1882951
URL: http://svn.apache.org/viewvc?rev=1882951&view=rev
Log:
Add rules to detect recent storage.googleapis method of URIBL avoidance for evaluation
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1882951&r1=1882950&r2=1882951&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Wed Oct 28 21:10:09 2020
@@ -3201,3 +3201,12 @@ tflags URI_DASHGOVEDU p
#meta __NOINR_FRAUD __NO_INR_YES_REF && (__AFRICAN_STATE || __BENEFICIARY || __COMPENSATION || __FILL_THIS_FORM_PARTIAL || __LOTTO_DEPT || __WIRE_XFR || __TRANSFORM_LIFE )
+uri __URI_GOOG_STO_IMG m,^https?://storage\.googleapis\.com/.*\.(?:png|jpe?g)$,i
+tflags __URI_GOOG_STO_IMG multiple maxhits=5
+
+uri __URI_GOOG_STO_HTML m,^https?://storage\.googleapis\.com/.*\.html?$,i
+tflags __URI_GOOG_STO_HTML multiple maxhits=5
+
+meta __GOOG_STO_IMG_HTML __URI_GOOG_STO_IMG && (__URI_GOOG_STO_HTML > 1)
+
+