You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/06/28 23:22:39 UTC
svn commit: r1834642 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Jun 28 23:22:38 2018
New Revision: 1834642
URL: http://svn.apache.org/viewvc?rev=1834642&view=rev
Log:
Add some bitcoin-related rules for testing per discussion on users list
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1834642&r1=1834641&r2=1834642&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Jun 28 23:22:38 2018
@@ -1828,8 +1828,20 @@ ifplugin Mail::SpamAssassin::Plugin::Rep
describe FUZZY_CLICK_HERE Obfuscated "click here"
tflags FUZZY_CLICK_HERE publish
+ body FUZZY_BITCOIN /<B>(?!itcoin)<I><T><C><O><I><N>/i
+ replace_rules FUZZY_BITCOIN
+ describe FUZZY_BITCOIN Obfuscated "Bitcoin"
+ tflags FUZZY_BITCOIN publish
+
+ body FUZZY_WALLET /<W>(?!allet)<A><L><L><E><T>/i
+ replace_rules FUZZY_WALLET
+ describe FUZZY_WALLET Obfuscated "Wallet"
+ tflags FUZZY_WALLET publish
+
endif
+body __BITCOIN_ID /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/
+
#body NUM_FREE /\b\d+free/i
#describe NUM_FREE Number + free