You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2014/02/19 18:36:05 UTC
svn commit: r1569844 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Wed Feb 19 17:36:04 2014
New Revision: 1569844
URL: http://svn.apache.org/r1569844
Log:
add UC_GIBBERISH_OBFU
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1569844&r1=1569843&r2=1569844&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Wed Feb 19 17:36:04 2014
@@ -1236,3 +1236,11 @@ meta __HEXHASH_3 __HEXHASH
meta __HEXHASH_4 __HEXHASHWORD == 4
meta __HEXHASH_5 __HEXHASHWORD == 5
+# from users list spample provided by Larry Starr
+body __UC_GIBB_OBFU /\b[a-z]{1,20}\so?[A-Z]{16,}r?\s[A-Za-z][a-z]{1,10}/
+tflags __UC_GIBB_OBFU multiple maxhits=8
+meta UC_GIBBERISH_OBFU (__UC_GIBB_OBFU > 7)
+describe UC_GIBBERISH_OBFU Multiple instances of "word LONGGIBBERISH word"
+score UC_GIBBERISH_OBFU 1.000 # Limit
+
+