You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2016/01/06 16:48:52 UTC

svn commit: r1723352 - /spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Author: jhardin
Date: Wed Jan  6 15:48:52 2016
New Revision: 1723352

URL: http://svn.apache.org/viewvc?rev=1723352&view=rev
Log:
add HDR_CASE_REV family for testing

Modified:
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1723352&r1=1723351&r2=1723352&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Wed Jan  6 15:48:52 2016
@@ -2119,3 +2119,13 @@ endif
 rawbody    __IMG_VIA_BITLY             m;<img\s[^>]+\ssrc\s*=\s*"?https?://(?:www\.)?bit\.ly/;i
 
 
+# more random garbage message headers 01/2016
+header     __HDR_CASE_REVERSED         ALL =~ /^[^-:\s]*[a-z][A-Z]/m
+tflags     __HDR_CASE_REVERSED         multiple maxhits=4
+meta       __HDR_CASE_REV_MANY         (__HDR_CASE_REVERSED > 3)
+meta       HDR_CASE_REV_MANY           __HDR_CASE_REV_MANY
+describe   HDR_CASE_REV_MANY           Multiple malformed (possibly random gibberish) message headers
+score      HDR_CASE_REV_MANY           2.000	# limit
+
+
+