You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2005/02/08 06:42:37 UTC
svn commit: r152637 - spamassassin/trunk/rules/70_testing.cf
Author: jm
Date: Mon Feb 7 21:42:34 2005
New Revision: 152637
URL: http://svn.apache.org/viewcvs?view=rev&rev=152637
Log:
bug 3013: poss replacements for RATWARE_HASH_2 and _2_V2
Modified:
spamassassin/trunk/rules/70_testing.cf
Modified: spamassassin/trunk/rules/70_testing.cf
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/rules/70_testing.cf?view=diff&r1=152636&r2=152637
==============================================================================
--- spamassassin/trunk/rules/70_testing.cf (original)
+++ spamassassin/trunk/rules/70_testing.cf Mon Feb 7 21:42:34 2005
@@ -308,5 +308,14 @@
body T_BODY_CLOSED_TWICE eval:html_eval('closed_body', '> 1')
# possible IDN spoofing attack: http://www.shmoo.com/idn/homograph.txt
+# not expecting any hits on this (yet)
uri T_HIGH_CODEPAGE_URI /^https?:\/\/[^\/]*\&\#(?:\d{4,}|[3456789]\d\d);/i
+
+# bug 3013: poss replacements for RATWARE_HASH_2 and _2_V2
+header T_RATWARE_HASH_2_A X-Mailer =~ /^(?!com)(?!OpenGroupware)[A-Za-z0-9_\.]{16,}$/
+header T_RATWARE_HASH_2_V2_A X-Mailer =~ /^(?!com)(?!OpenGroupware)[A-Za-z0-9_\.]{14,}$/
+header T_RATWARE_HASH_2_B X-Mailer =~ /^[A-Za-z0-9_]{16,}$/
+header T_RATWARE_HASH_2_V2_B X-Mailer =~ /^[A-Za-z0-9_]{14,}$/
+header T_RATWARE_HASH_2_C X-Mailer =~ /^[A-Za-z0-9]{16,}$/
+header T_RATWARE_HASH_2_V2_C X-Mailer =~ /^[A-Za-z0-9]{14,}$/