You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by pd...@apache.org on 2019/04/25 16:42:41 UTC
svn commit: r1858147 - in /spamassassin/trunk/rulesrc/sandbox/pds:
20_banks.cf 20_fns.cf
Author: pds
Date: Thu Apr 25 16:42:41 2019
New Revision: 1858147
URL: http://svn.apache.org/viewvc?rev=1858147&view=rev
Log:
__META rules don't seem to fire with evals?
Modified:
spamassassin/trunk/rulesrc/sandbox/pds/20_banks.cf
spamassassin/trunk/rulesrc/sandbox/pds/20_fns.cf
Modified: spamassassin/trunk/rulesrc/sandbox/pds/20_banks.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/20_banks.cf?rev=1858147&r1=1858146&r2=1858147&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/20_banks.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/20_banks.cf Thu Apr 25 16:42:41 2019
@@ -5,16 +5,19 @@ enlist_addrlist (PAYPAL) *@paypal.com *@
enlist_addrlist (PAYPAL) *@paypal.es *@paypal.fr *@paypal.de *@paypal.com.hk
enlist_addrlist (PAYPAL) *@*.paypal.com *@*.paypal.co.uk
-header __FROM_ADDRLIST_PAYPAL eval:check_from_in_list('PAYPAL')
-reuse __FROM_ADDRLIST_PAYPAL
+header FROM_ADDRLIST_PAYPAL eval:check_from_in_list('PAYPAL')
+tflags FROM_ADDRLIST_PAYPAL publish
+describe FROM_ADDRLIST_PAYPAL Email is from PayPal
+score FROM_ADDRLIST_PAYPAL 0.01 # limit
+reuse FROM_ADDRLIST_PAYPAL
-meta FROM_PAYPAL_SPOOF !__NOT_SPOOFED && __FROM_ADDRLIST_PAYPAL && (! NO_RELAYS && ! ALL_TRUSTED)
+meta FROM_PAYPAL_SPOOF !__NOT_SPOOFED && FROM_ADDRLIST_PAYPAL && (! NO_RELAYS && ! ALL_TRUSTED)
tflags FROM_PAYPAL_SPOOF publish
describe FROM_PAYPAL_SPOOF From PayPal domain but matches SPOOFED
score FROM_PAYPAL_SPOOF 1.6 # limit
reuse FROM_PAYPAL_SPOOF
-meta FROM_PAYPAL_REPLYTO_FREEMAIL FREEMAIL_FORGED_REPLYTO && __FROM_ADDRLIST_PAYPAL
+meta FROM_PAYPAL_REPLYTO_FREEMAIL FREEMAIL_FORGED_REPLYTO && FROM_ADDRLIST_PAYPAL
tflags FROM_PAYPAL_REPLYTO_FREEMAIL publish
describe FROM_PAYPAL_REPLYTO_FREEMAIL From PayPal domain but ReplyTo is FREEMAIL
score FROM_PAYPAL_REPLYTO_FREEMAIL 2.0
Modified: spamassassin/trunk/rulesrc/sandbox/pds/20_fns.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/20_fns.cf?rev=1858147&r1=1858146&r2=1858147&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/20_fns.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/20_fns.cf Thu Apr 25 16:42:41 2019
@@ -10,16 +10,16 @@ reuse __PLUGIN_FROMNAME_SPOOF
header __PLUGIN_FROMNAME_EQUALS_TO eval:check_fromname_equals_to()
reuse __PLUGIN_FROMNAME_EQUALS_TO
-meta T_FROMNAME_SPOOFED_EMAIL (__PLUGIN_FROMNAME_SPOOF && !__VIA_ML && !__VIA_RESIGNER && !__RP_MATCHES_RCVD)
-describe T_FROMNAME_SPOOFED_EMAIL From:name looks like a spoofed email
-score T_FROMNAME_SPOOFED_EMAIL 0.3
-tflags T_FROMNAME_SPOOFED_EMAIL nopublish
-reuse T_FROMNAME_SPOOFED_EMAIL
+meta FROMNAME_SPOOFED_EMAIL (__PLUGIN_FROMNAME_SPOOF && !__VIA_ML && !__VIA_RESIGNER && !__RP_MATCHES_RCVD)
+describe FROMNAME_SPOOFED_EMAIL From:name looks like a spoofed email
+score FROMNAME_SPOOFED_EMAIL 0.3
+tflags FROMNAME_SPOOFED_EMAIL publish
+reuse FROMNAME_SPOOFED_EMAIL
-meta T_FROMNAME_EQUALS_TO __PLUGIN_FROMNAME_EQUALS_TO
-describe T_FROMNAME_EQUALS_TO From:name matches To:
-score T_FROMNAME_EQUALS_TO 1.0
-tflags T_FROMNAME_EQUALS_TO nopublish
-reuse T_FROMNAME_EQUALS_TO
+meta FROMNAME_EQUALS_TO __PLUGIN_FROMNAME_EQUALS_TO
+describe FROMNAME_EQUALS_TO From:name matches To:
+score FROMNAME_EQUALS_TO 1.0
+tflags FROMNAME_EQUALS_TO publish
+reuse FROMNAME_EQUALS_TO
endif