You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2011/12/03 18:25:09 UTC
svn commit: r1209957 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sat Dec 3 17:25:08 2011
New Revision: 1209957
URL: http://svn.apache.org/viewvc?rev=1209957&view=rev
Log:
tune ACH_CANCELLED
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1209957&r1=1209956&r2=1209957&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sat Dec 3 17:25:08 2011
@@ -790,12 +790,15 @@ endif
body __ACH_CANCELLED_01 /\b(?-i:ACH) (?:payment|transfer|transaction) (?:rejected|cancel+ed|declined)/i
body __ACH_CANCELLED_02 /(?:rejected|cancel+ed|declined|your) (?-i:ACH) (?:payment|transfer|transaction)/i
body __ACH_CANCELLED_03 /(?:rejected|cancel+ed|declined) direct[-_ ]deposit[-_ ](?:payment|transfer|transaction)/i
-describe ACH_CANCELLED "ACH cancelled" probable malware
ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
- mimeheader __EXE_ATTACH Content-Type =~ /\.exe\b/i
- meta ACH_CANCELLED (__ACH_CANCELLED_01 || __ACH_CANCELLED_02 || __ACH_CANCELLED_03) && (__HAS_ANY_URI || __EXE_ATTACH)
+ mimeheader __EXE_ATTACH Content-Type =~ /\.exe\b/i
+ meta __ACH_CANCELLED (__ACH_CANCELLED_01 || __ACH_CANCELLED_02 || __ACH_CANCELLED_03) && (__HAS_ANY_URI || __EXE_ATTACH)
else
- meta ACH_CANCELLED (__ACH_CANCELLED_01 || __ACH_CANCELLED_02 || __ACH_CANCELLED_03) && __HAS_ANY_URI
+ meta __ACH_CANCELLED (__ACH_CANCELLED_01 || __ACH_CANCELLED_02 || __ACH_CANCELLED_03) && __HAS_ANY_URI
endif
+meta ACH_CANCELLED __ACH_CANCELLED && !__DOS_HAS_LIST_UNSUB
+describe ACH_CANCELLED "ACH cancelled" probable malware
+
+