You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2009/08/30 05:42:18 UTC
svn commit: r809244 - in /spamassassin/trunk/rulesrc/sandbox/jhardin:
20_lotsa_money.cf 20_tbird_image_spam.cf
Author: jhardin
Date: Sun Aug 30 03:42:17 2009
New Revision: 809244
URL: http://svn.apache.org/viewvc?rev=809244&view=rev
Log:
score metas for people using these files, add some non-tbird-related image spam tests
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf?rev=809244&r1=809243&r2=809244&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf Sun Aug 30 03:42:17 2009
@@ -25,26 +25,31 @@
body LOTTO_WINNINGS /claim your (?:winnings|money|prize)/i
describe LOTTO_WINNINGS Claim your winnings
+ score LOTTO_WINNINGS 0.25
body LOTTO_WIN_01 /\bwinning\s(?:prize|number|notification|draw|check|cheque|details)/i
describe LOTTO_WIN_01 Winning *
+ score LOTTO_WIN_01 0.20
body LOTTO_AGENT /\b(?:claims?|fiduciary)\s?(?:agent|manager|officer)/i
describe LOTTO_AGENT Claims Agent
- score LOTTO_AGENT 0.5
+ score LOTTO_AGENT 0.50
body LOTTO_DEPT /\b(?:claims?|fiduciary)\s?(?:department|unit|group)/i
describe LOTTO_DEPT Claims Department
- score LOTTO_DEPT 0.2
+ score LOTTO_DEPT 0.20
header LOTTO_AGENT_FM From =~ /(?:claims?|fiduciary|dispatch)[\s_]?(?:agent|manager|officer)/i
describe LOTTO_AGENT_FM Claims Agent
+ score LOTTO_AGENT_FM 0.50
header LOTTO_AGENT_RPLY Reply-To =~ /(?:claims?|fiduciary|dispatch)[\s_]?(?:agent|manager|officer)/i
describe LOTTO_AGENT_RPLY Claims Agent
+ score LOTTO_AGENT_RPLY 0.50
body LOTTO_ADMITS /\b(?:online|ballot|(?:inter)?national|internet)\slottery/i
describe LOTTO_ADMITS Admits to being a lottery
+ score LOTTO_ADMITS 0.20
meta MONEY_LOTTERY LOTS_OF_MONEY && (LOTTO_WINNINGS || LOTTO_WIN_01 || LOTTO_AGENT || LOTTO_DEPT || LOTTO_AGENT_FM || LOTTO_AGENT_RPLY || LOTTO_ADMITS)
describe MONEY_LOTTERY Lots of money from a lottery
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf?rev=809244&r1=809243&r2=809244&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf Sun Aug 30 03:42:17 2009
@@ -25,14 +25,19 @@
describe FORGED_TBIRD_IMG_ARROW Likely forged Thunderbird image spam
score FORGED_TBIRD_IMG_ARROW 0.8
-# try it against other stuff, too
+# Try it against other stuff, too,
+# "To without <>" might be useful outside the context of image spam
meta TO_NO_BRKTS_HTML __TO_NO_ARROWS_R && HTML_MESSAGE
+score TO_NO_BRKTS_HTML 0.20
meta TO_NO_BRKTS_HTML_ONLY __TO_NO_ARROWS_R && MIME_HTML_ONLY
+score TO_NO_BRKTS_HTML_ONLY 0.20
meta TO_NO_BRKTS_DYNIP __TO_NO_ARROWS_R && RDNS_DYNAMIC
+score TO_NO_BRKTS_DYNIP 0.20
meta TO_NO_BRKTS_NORDNS __TO_NO_ARROWS_R && RDNS_NONE
+score TO_NO_BRKTS_NORDNS 0.20
@@ -57,3 +62,8 @@
describe FORGED_TBIRD_IMG_SIZE Likely forged Thunderbird image spam
score FORGED_TBIRD_IMG_SIZE 0.8
+
+# Try some combinations not related to tbird forgery
+meta IMG_DIRECT_TO_MX __DOS_DIRECT_TO_MX && __JPEG_ATTACH && __ONE_IMG && __IMG_LE_300K
+score IMG_DIRECT_TO_MX 0.20
+