You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/11/22 00:56:10 UTC
svn commit: r477971 - /spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Author: jm
Date: Tue Nov 21 15:56:09 2006
New Revision: 477971
URL: http://svn.apache.org/viewvc?view=rev&rev=477971
Log:
change RCVD_FORGED_WROTE to use RCVD_FORGED_WROTE2 code instead; catches 4.95% of spam instead of just 4.2%
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?view=diff&rev=477971&r1=477970&r2=477971
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Tue Nov 21 15:56:09 2006
@@ -77,7 +77,7 @@
endif # Mail::SpamAssassin::Plugin::MIMEHeader
-header RCVD_FORGED_WROTE Received =~ /from \d\S+\d \(HELO [a-z]\S+\) by \S+ with esmtp \([A-Z0-9]/s
+header RCVD_FORGED_WROTE Received =~ /from [0-9.]+ \(HELO \S+[a-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
describe RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:' spam)
score RCVD_FORGED_WROTE 2.8
@@ -202,8 +202,6 @@
# pretty good; less FPs than AXB_FAKETZ, however, same FP level but less 0.01%
# less hits than GMD_FAKETZ, so that's still better
header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
-
-header RCVD_FORGED_WROTE2 Received =~ /from [0-9.]+ \(HELO \S+[a-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
body JM_ATTACHEMENT /Stocks Quotes in attachement/