You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2007/11/15 12:54:49 UTC
svn commit: r595278 - /spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Author: jm
Date: Thu Nov 15 03:54:48 2007
New Revision: 595278
URL: http://svn.apache.org/viewvc?rev=595278&view=rev
Log:
remove BUG5704_PUMP_N_DUMP_RATWARE, it overlaps too highly with RCVD_FORGED_WROTE2
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?rev=595278&r1=595277&r2=595278&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Thu Nov 15 03:54:48 2007
@@ -257,11 +257,6 @@
# http://dvlabs.tippingpoint.com/blog/2007/10/26/stopgap-detection-for-the-gozi-pdf-dropper
full DVLABS_GOZI_PDF /bWFpbHRvOiUvLi4vLi4vLi4vLi4vLi4vLi4v/
-# http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5704
-header __EXIM_MTA Received =~ /with esmtp \((?:Exim \S+|Debian Exim \S\.\S+ \S+)\)\s+id \S{6}\-\S{6}\-\S{2}/i
-header __BOGUS_EXIM_PUMP_N_DUMP Received =~ /with esmtp \(\S+ \S+\)\s+id \S{6}\-\S{6}\-\S{2}/
-meta BUG5704_PUMP_N_DUMP_RATWARE (!__EXIM_MTA && __BOGUS_EXIM_PUMP_N_DUMP)
-
# noted by Karsten Brackelmann on the users@ list
header KB_DATE_CONTAINS_TAB Date:raw =~ /^ \t/
meta KB_FAKED_THE_BAT (__THEBAT_MUA && KB_DATE_CONTAINS_TAB)