You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2009/09/03 01:17:27 UTC
svn commit: r810730 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Author: jhardin
Date: Wed Sep 2 23:17:26 2009
New Revision: 810730
URL: http://svn.apache.org/viewvc?rev=810730&view=rev
Log:
Fix FP in obfuscated URI rule
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf?rev=810730&r1=810729&r2=810730&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf Wed Sep 2 23:17:26 2009
@@ -10,7 +10,7 @@
ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
-body URI_OBFU_WWW /(?<!http:\/\/)\b_*w{2,3}[^[:alnum:]]{1,3}(?:<D><O><T>[^[:alnum:]]{1,3})?[[:alnum:]][-\w]{1,20}[[:alnum:]](?!\.[[:alnum:]])[^[:alnum:]]{1,3}(?:<D><O><T>[^[:alnum:]]{1,3})?(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g|b\s?i\s?z|i\s?n\s?f\s?o)_*\b/i
+body URI_OBFU_WWW /(?<!http:\/\/)\b_*w{2,3}(?!\.[\w-]+\.(?:com|net|org|biz|info))[^[:alnum:]]{1,3}(?:<D><O><T>[^[:alnum:]]{1,3})?[[:alnum:]][-\w]{1,20}[[:alnum:]](?!\.[[:alnum:]])[^[:alnum:]]{1,3}(?:<D><O><T>[^[:alnum:]]{1,3})?(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g|b\s?i\s?z|i\s?n\s?f\s?o)_*\b/i
describe URI_OBFU_WWW Obfuscated URI
replace_rules URI_OBFU_WWW