svn commit: rev 6637 - incubator/spamassassin/trunk/rules

[qu...@apache.org]

Author: quinlan
Date: Fri Feb 13 01:51:08 2004
New Revision: 6637

Modified:
   incubator/spamassassin/trunk/rules/70_testing.cf
Log:
more evil message-id stuff


Modified: incubator/spamassassin/trunk/rules/70_testing.cf
==============================================================================
--- incubator/spamassassin/trunk/rules/70_testing.cf	(original)
+++ incubator/spamassassin/trunk/rules/70_testing.cf	Fri Feb 13 01:51:08 2004
@@ -497,8 +497,18 @@
 # letter: 2/3 (pick a-z) | 1/3 (pick 0-9)
 # 3-12 letters: 1/8 (pick .) | 7/12 (pick a-z) | 7/24 (pick 0-9)
 # letter: 2/3 (pick a-z) | 1/3 (pick 0-9)
-header T_MSGID_EVIL_SPAM_1	MESSAGEID =~ /<[a-z\d][a-z\d\$-]+[a-z\d]\@[a-z\d][a-z\d.]+[a-z\d]>/
-header T_MSGID_EVIL_SPAM_2	MESSAGEID =~ /<[a-z\d][a-z\d\$-]{10,29}[a-z\d]\@[a-z\d][a-z\d.]{3,12}[a-z\d]>/
+header T_MSGID_EVIL_SPAM_1	Message-ID =~ /<[a-z\d][a-z\d\$-]+[a-z\d]\@[a-z\d][a-z\d.]+[a-z\d]>/
+header T_MSGID_EVIL_SPAM_2	Message-ID =~ /<[a-z\d][a-z\d\$-]{10,29}[a-z\d]\@[a-z\d][a-z\d.]{3,12}[a-z\d]>/
+header __MSGID_IDIOM_1		Message-ID =~ /\b[a-f\d]{12}\b/
+header __MSGID_IDIOM_2		Message-ID =~ /\b[a-f\d]{8}\b/
+header __MSGID_IDIOM_3		Message-ID =~ /\d{10}/
+meta T_MSGID_EVIL_SPAM_3	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1)
+meta T_MSGID_EVIL_SPAM_4	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_2)
+meta T_MSGID_EVIL_SPAM_5	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_6	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_2)
+meta T_MSGID_EVIL_SPAM_7	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_8	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_2 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_9	(T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_2 && !__MSGID_IDIOM_3)
 
 # some simple subject rules to catch a persistent spammer
 header T_SUBJ_XANAX		Subject =~ /x.{0,2}a.{0,2}n.{0,2}a.{0,2}x/i