You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by bi...@apache.org on 2022/09/26 19:35:07 UTC
svn commit: r1904286 - /spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
Author: billcole
Date: Mon Sep 26 19:35:06 2022
New Revision: 1904286
URL: http://svn.apache.org/viewvc?rev=1904286&view=rev
Log:
It only looks like a boundary string.
Modified:
spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
Modified: spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf?rev=1904286&r1=1904285&r2=1904286&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf Mon Sep 26 19:35:06 2022
@@ -147,3 +147,13 @@ mimeheader T_SCC_BOGUS_CTE_1 Content-Tra
describe T_SCC_CTMPP Uncommon Content-Type
mimeheader T_SCC_CTMPP Content-Type =~ /multipart\/parallel/
+
+describe __SCC_MIME_BOUNDARY2 Idiosyncratic boundary-like string
+rawbody __SCC_MIME_BOUNDARY2 /^ *(----[[:alnum:]]{8};[[:alnum:]]{6}){2}$/m
+tflags __SCC_MIME_BOUNDARY2 multiple maxhits=7
+
+
+describe SCC_MIME_BOUNDARY2 Fake boundary-like string >5 times
+meta SCC_MIME_BOUNDARY2 __SCC_MIME_BOUNDARY2 > 5
+
+