You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/12/14 20:46:15 UTC
svn commit: r1848968 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Fri Dec 14 20:46:15 2018
New Revision: 1848968
URL: http://svn.apache.org/viewvc?rev=1848968&view=rev
Log:
Add some splodey rules for testing
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1848968&r1=1848967&r2=1848968&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Fri Dec 14 20:46:15 2018
@@ -1992,10 +1992,20 @@ score BITCOIN_MALWARE 3.
tflags BITCOIN_MALWARE publish
meta BITCOIN_BOMB __BITCOIN_ID && __EXPLOSIVE_DEVICE && !BITCOIN_EXTORT_01
-describe BITCOIN_BOMB BitCoin + bomb threat
+describe BITCOIN_BOMB BitCoin + bomb
score BITCOIN_BOMB 3.000 # limit
tflags BITCOIN_BOMB publish
+meta BOMB_FREEM __EXPLOSIVE_DEVICE && __freemail_hdr_replyto
+describe BOMB_FREEM Bomb + freemail
+score BOMB_FREEM 2.000 # limit
+tflags BOMB_FREEM publish
+
+meta BOMB_MONEY __EXPLOSIVE_DEVICE && ( __ADVANCE_FEE_3_NEW || __ADVANCE_FEE_4_NEW || __ADVANCE_FEE_5_NEW )
+describe BOMB_MONEY Bomb + money: bomb threat?
+score BOMB_MONEY 2.500 # limit
+tflags BOMB_MONEY publish
+
#body NUM_FREE /\b\d+free/i
#describe NUM_FREE Number + free