svn commit: r1825113 - in /spamassassin/trunk/rulesrc/sandbox/gbechis: ./ 20_test.cf

[gb...@apache.org]

Author: gbechis
Date: Fri Feb 23 08:08:42 2018
New Revision: 1825113

URL: http://svn.apache.org/viewvc?rev=1825113&view=rev
Log:
Test for obfuscated uris through Google search engine

Added:
    spamassassin/trunk/rulesrc/sandbox/gbechis/
    spamassassin/trunk/rulesrc/sandbox/gbechis/20_test.cf

Added: spamassassin/trunk/rulesrc/sandbox/gbechis/20_test.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_test.cf?rev=1825113&view=auto
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_test.cf (added)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_test.cf Fri Feb 23 08:08:42 2018
@@ -0,0 +1,27 @@
+# SpamAssassin rules file: gbechis sandbox
+#
+# Please don't modify this file as your changes will be overwritten with
+# the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead.
+# See 'perldoc Mail::SpamAssassin::Conf' for details.
+#
+# <@LICENSE>
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to you under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at:
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# </...@LICENSE>
+#
+###########################################################################
+
+uri T_GOOGLE_OBFU	/^https:\/\/www\.google\.([a-z]{2,3})\/url\?sa=t\&rct=j\&q=\&esrc=s\&source=web\&cd=([0-9]{1})\&cad=rja\&uact=([0-9]{1})\&ved=(.*)\&url=http:\/\/(.*)&usg=(.*)/
+describe T_GOOGLE_OBFU	Obfuscate url through Google redirect