You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2009/03/29 21:26:35 UTC

svn commit: r759755 - /spamassassin/trunk/rules/20_ratware.cf

Author: jm
Date: Sun Mar 29 19:26:34 2009
New Revision: 759755

URL: http://svn.apache.org/viewvc?rev=759755&view=rev
Log:
update FORGED_MUA_THEBAT_BOUN according to advice from The Bat developer Maxim Masiutin

Modified:
    spamassassin/trunk/rules/20_ratware.cf

Modified: spamassassin/trunk/rules/20_ratware.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_ratware.cf?rev=759755&r1=759754&r2=759755&view=diff
==============================================================================
--- spamassassin/trunk/rules/20_ratware.cf (original)
+++ spamassassin/trunk/rules/20_ratware.cf Sun Mar 29 19:26:34 2009
@@ -120,10 +120,10 @@
 #header __THEBAT_MUA_V3		X-Mailer =~ /^The Bat! \(v3\./
 header __CTYPE_CHARSET_QUOTED	Content-Type =~ /charset=\"/i
 header __CTYPE_HAS_BOUNDARY	Content-Type =~ /boundary/i
-header __BAT_BOUNDARY		Content-Type =~ /boundary=\"?-{10}/
+header __BAT_BOUNDARY		Content-Type =~ /boundary=\"-{10}[A-F0-9]{4,}\"/
 header __MAILMAN_21             X-Mailman-Version =~ /\d/
 meta FORGED_MUA_THEBAT_CS	(__THEBAT_MUA && __CTYPE_CHARSET_QUOTED && !__MAILMAN_21)
-meta FORGED_MUA_THEBAT_BOUN     (__THEBAT_MUA_V1 && __CTYPE_HAS_BOUNDARY && !__BAT_BOUNDARY && !__MAILMAN_21)
+meta FORGED_MUA_THEBAT_BOUN     (__THEBAT_MUA && __CTYPE_HAS_BOUNDARY && !__BAT_BOUNDARY && !__MAILMAN_21)
 describe FORGED_MUA_THEBAT_CS	Mail pretending to be from The Bat! (charset)
 describe FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat! (boundary)