You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2021/05/28 01:38:46 UTC

svn commit: r1890258 - /spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Author: jhardin
Date: Fri May 28 01:38:46 2021
New Revision: 1890258

URL: http://svn.apache.org/viewvc?rev=1890258&view=rev
Log:
fix __RCVD_DOTGOV_EXT and __RCVD_DOTEDU_EXT

Modified:
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1890258&r1=1890257&r2=1890258&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Fri May 28 01:38:46 2021
@@ -3322,8 +3322,8 @@ meta       __UNAME_PASSWD_PDF          (
 # .gov and .edu URIs appearing in spams, attempts to leverage whitelisting?
 uri        __URI_DOTGOV                m;^https?://(?:[^./]+\.)+gov/;i
 uri        __URI_DOTEDU                m;^https?://(?:[^./]+\.)+edu/;i
-header     __RCVD_DOTGOV_EXT           X-Spam-Relays-External =~ /\.gov\s/i
-header     __RCVD_DOTEDU_EXT           X-Spam-Relays-External =~ /\.edu\s/i
+header     __RCVD_DOTGOV_EXT           X-Spam-Relays-External =~ /\srdns=\S+\.gov\s/i
+header     __RCVD_DOTEDU_EXT           X-Spam-Relays-External =~ /\srdns=\S+\.edu\s/i
 
 meta       __DOTGOV_FREEMAIL           __URI_DOTGOV && __freemail_hdr_replyto
 #meta       __DOTGOV_MONEY              __URI_DOTGOV && ( __XFER_MONEY || __MONEY_FRAUD || __YOUR_FUND || __BENEFICIARY || __COMPENSATION || __LOTSA_MONEY_01 || __LOTSA_MONEY_04 )