You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2019/07/20 20:58:54 UTC
svn commit: r1863509 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sat Jul 20 20:58:54 2019
New Revision: 1863509
URL: http://svn.apache.org/viewvc?rev=1863509&view=rev
Log:
Score and publish some test rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1863509&r1=1863508&r2=1863509&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sat Jul 20 20:58:54 2019
@@ -2774,9 +2774,10 @@ header __HDR_RCVD_ALIBABA X
uri __URI_IMG_ALICDN m;//(?:[^/.]+\.)*alicdn\.com/.*\.(?:jpe?g|gif|png)$;i
meta __ALIBABA_IMG_NOT_RCVD_ALI __URI_IMG_ALICDN && !__HDR_RCVD_ALIBABA
-
-# WordPress "image accelerator" - abused for obfuscating hosted spamvertised product images
-uri __URI_IMG_WP_REDIR m;://i[02]\.wp\.com/.*\.(?:jpe?g|gif|png)$;i
+meta ALIBABA_IMG_NOT_RCVD_ALI __ALIBABA_IMG_NOT_RCVD_ALI && !__YOUR_PASSWORD && !__UNSUB_LINK && !__RCD_RDNS_MAIL_MESSY
+score ALIBABA_IMG_NOT_RCVD_ALI 2.500 # limit
+describe ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from Alibaba
+tflags ALIBABA_IMG_NOT_RCVD_ALI publish
meta __HOSTED_IMG_DQ_UNSUB __URI_DQ_UNSUB && ( __URI_IMG_EBAY || __URI_IMG_AMAZON || __URI_IMG_ALICDN )
meta HOSTED_IMG_DQ_UNSUB __HOSTED_IMG_DQ_UNSUB
@@ -2796,6 +2797,12 @@ score HOSTED_IMG_FREEM 3
describe HOSTED_IMG_FREEM Image hosted at large ecomm site, freemail from or reply-to
tflags HOSTED_IMG_FREEM publish
+# WordPress "image accelerator" - abused for obfuscating hosted spamvertised product images
+uri __URI_IMG_WP_REDIR m;://i[02]\.wp\.com/.*\.(?:jpe?g|gif|png)$;i
+meta URI_IMG_WP_REDIR __URI_IMG_WP_REDIR
+score URI_IMG_WP_REDIR 3.000 # limit
+describe URI_IMG_WP_REDIR Image via WordPress "accelerator" proxy
+tflags URI_IMG_WP_REDIR publish
#header __BOGUS_MIME_VER_01 MIME-Version =~ /^(?!\s*1\.0).+/
header __BOGUS_MIME_VER_02 MIME-Version =~ /^(?!.*\b1\.0\b).+/