You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2016/11/12 19:22:12 UTC
svn commit: r1769401 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Author: jhardin
Date: Sat Nov 12 19:22:12 2016
New Revision: 1769401
URL: http://svn.apache.org/viewvc?rev=1769401&view=rev
Log:
disable URI_OBFU_WWW, it's still being published with a large score in the face of a tiny S/O and a score limit
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf?rev=1769401&r1=1769400&r2=1769401&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf Sat Nov 12 19:22:12 2016
@@ -12,10 +12,11 @@ ifplugin Mail::SpamAssassin::Plugin::Rep
# Disabled 10/2016 - abysmal S/O, it's ignoring the score limit, and reported FPs in bug#7365 that I can't repro
# trying minor tuning change before we give up, will disable again if that doesn't help
-body URI_OBFU_WWW /(?<!:\/\/)\b_*w{2,3}(?!(?:\.+|\/)[-\w]+\.+(?:com|net|org|biz|info))[^[:alnum:]]{1,3}(?:<D><O><T>+[^[:alnum:]]{1,3})?[[:alnum:]][-\w]{1,20}[[:alnum:]][^[:alnum:]]{1,3}(?:<D><O><T>+[^[:alnum:]]{1,3})?(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g|b\s?i\s?z|i\s?n\s?f\s?o)_*\b/i
-describe URI_OBFU_WWW Obfuscated URI
-replace_rules URI_OBFU_WWW
-score URI_OBFU_WWW 2.000 # limit
+# Disabled again 11/2016, still ignoring the score limit, abysmal S/O
+#body URI_OBFU_WWW /(?<!:\/\/)\b_*w{2,3}(?!(?:\.+|\/|,)[-\w]+\.+(?:com|net|org|biz|info))[^[:alnum:]]{1,3}(?:<D><O><T>+[^[:alnum:]]{1,3})?[[:alnum:]][-\w]{1,20}[[:alnum:]][^[:alnum:]]{1,3}(?:<D><O><T>+[^[:alnum:]]{1,3})?(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g|b\s?i\s?z|i\s?n\s?f\s?o)_*\b/i
+#describe URI_OBFU_WWW Obfuscated URI
+#replace_rules URI_OBFU_WWW
+#score URI_OBFU_WWW 2.000 # limit
endif