svn commit: r504225 - /spamassassin/rules/trunk/sandbox/felicity/70_other.cf

[fe...@apache.org]

Author: felicity
Date: Tue Feb  6 10:00:03 2007
New Revision: 504225

URL: http://svn.apache.org/viewvc?view=rev&rev=504225
Log:
yet another obfu update

Modified:
    spamassassin/rules/trunk/sandbox/felicity/70_other.cf

Modified: spamassassin/rules/trunk/sandbox/felicity/70_other.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/felicity/70_other.cf?view=diff&rev=504225&r1=504224&r2=504225
==============================================================================
--- spamassassin/rules/trunk/sandbox/felicity/70_other.cf (original)
+++ spamassassin/rules/trunk/sandbox/felicity/70_other.cf Tue Feb  6 10:00:03 2007
@@ -28,12 +28,12 @@
 header T_INVALID_DATE2		Date !~ /^\s*(?:(?i:Mon|Tue|Wed|Thu|Fri|Sat|Sun),\s)?\s*(?:[12]\d|3[01]|0?[1-9])\s+(?i:Jan|Feb|Ma[ry]|Apr|Ju[nl]|Aug|Sep|Oct|Nov|Dec)\s+(?:19[7-9]\d|2\d{3})\s+(?:[01]?\d|2[0-3])\:[0-5]\d(?::(?:[0-5]\d|60))?(?:\s+[AP]M)?(?:\s+(?:[+-][0-9]{4}|UT|[A-Z]{2,3}T|0000 GMT|"GMT"))?(?:\s*\(.*\))?\s*$/ [if-unset: Wed, 31 Jul 2002 16:41:57 +0200]
 
 #  4.470   5.2627   0.0000    1.000   1.00    0.00  T_TVD_SILLY_URI_OBFU
-#  3.015   3.5500   0.0000    1.000   0.00    0.00  TVD_SILLY_URI_OBFU
-#http://www.printeryml*com
-#http://www.pri*nteryml.com
-#http://www.printeryml.*com
-body TVD_SILLY_URI_OBFU	m!https?://[a-z0-9-]+\.[a-z0-9-]*[^a-z0-9.:/\s"'\@?\)>-]+[a-z0-9.-]*[a-z]{3}(?:\s|$)!i
-body T_TVD_SILLY_URI_OBFU	m!https?://[a-z0-9-]+\.[a-z0-9-]*\.?[^a-z0-9.:/\s"'\@?\)>-]+[a-z0-9.-]*[a-z]{3}(?:\s|$)!i
+# allow the obfuscation around the tld as well
+body TVD_SILLY_URI_OBFU	m!https?://[a-z0-9-]+\.[a-z0-9-]*\.?[^a-z0-9.:/\s"'\@?\)>-]+[a-z0-9.-]*[a-z]{3}(?:\s|$)!i
+# much more generic -- since the current spammer(s) are using com domains,
+# let's specifically just look for when they do something like "example*com"
+# or "example-com", etc.
+body T_TVD_SILLY_URI_OBFU_COM	m!https?://[^/]+[^.]com(?:[/\s]|$)!i
 
 ifplugin Mail::SpamAssassin::Plugin::ReplaceTags