You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/10/12 14:12:10 UTC
svn commit: r463225 - /spamassassin/rules/trunk/core/20_head_tests.cf
Author: jm
Date: Thu Oct 12 05:12:10 2006
New Revision: 463225
URL: http://svn.apache.org/viewvc?view=rev&rev=463225
Log:
bug 4021: amend JAPANESE_UCE_SUBJECT, add JAPANESE_UCE_BODY rule to catch obfuscated Japanese UCE tags
Modified:
spamassassin/rules/trunk/core/20_head_tests.cf
Modified: spamassassin/rules/trunk/core/20_head_tests.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/core/20_head_tests.cf?view=diff&rev=463225&r1=463224&r2=463225
==============================================================================
--- spamassassin/rules/trunk/core/20_head_tests.cf (original)
+++ spamassassin/rules/trunk/core/20_head_tests.cf Thu Oct 12 05:12:10 2006
@@ -255,9 +255,13 @@
# ("not yet acceptance" or "email") + "announcement"
# FWIW, according to Peter Evans, this should be sufficient to catch the
# UCE tag and a common attempt at evasion (using the "sue" instead of
-# "mi" Chinese character).
-header JAPANESE_UCE_SUBJECT Subject =~ /\e\$B.*(?:L\$>5Bz|EE;R%a!<%k)9-9p/
+# "mi" Chinese character). 2006-10-12: updated by bug 4021.
+header JAPANESE_UCE_SUBJECT Subject =~ /\e\$B.*(?:L\$>5Bz|EE;R%a!<%k)(?:8x|9-)9p/
describe JAPANESE_UCE_SUBJECT Subject contains a Japanese UCE tag
+
+# check body for "shou nin daku kou koku" UCE tag (bug 4021)
+body JAPANESE_UCE_BODY /\e\$B.*(?:L\$>5Bz|EE;R%a!<%k)(?:8x|9-)9p/
+describe JAPANESE_UCE_BODY Body contains Japanese UCE tag
# quinlan: "advertisement" in Russian KOI8-R
# (no longer common, but worth noting in future)