You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by gb...@apache.org on 2022/05/01 21:40:15 UTC

svn commit: r1900467 - /spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf

Author: gbechis
Date: Sun May  1 21:40:15 2022
New Revision: 1900467

URL: http://svn.apache.org/viewvc?rev=1900467&view=rev
Log:
Check emails with Paypal hosted image but message not from Paypal

Modified:
    spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf

Modified: spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf?rev=1900467&r1=1900466&r2=1900467&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf Sun May  1 21:40:15 2022
@@ -48,6 +48,13 @@ score      GB_GOOG_IMG_NOT_RCVD_GOOG   2
 # score      GB_LINKED_IMG_NOT_RCVD_LINK   2.500    # limit
 # tflags     GB_LINKED_IMG_NOT_RCVD_LINK   publish
 
+# header     __HDR_RCVD_PAYPAL           X-Spam-Relays-External =~ /\srdns=\S+\.paypal\.com\s/
+uri        __URI_IMG_PAYPAL              /^https:\/\/www\.paypalobjects\.com\/(?:en_US|ui\-web)\//
+meta       __PAYPAL_IMG_NOT_RCVD_PAYP    __URI_IMG_PAYPAL && !__HDR_RCVD_PAYPAL
+meta       GB_PAYPAL_IMG_NOT_RCVD_PAYP   __PAYPAL_IMG_NOT_RCVD_PAYP && !__HAS_ERRORS_TO && !__MSGID_LIST && !__MSGID_GUID && !__RCD_RDNS_SMTP
+describe   GB_PAYPAL_IMG_NOT_RCVD_PAYP   Paypal hosted image but message not from Paypal
+score      GB_PAYPAL_IMG_NOT_RCVD_PAYP   2.500    # limit
+
 uri        __SENDINBLUE_REDIR            m~://.{4,5}\.r\.a[a-z]?\.d\.sendibm[0-9]\.com/mk/([a-z]){2}/~
 meta       SENDINBLUE_REDIR              __SENDINBLUE_REDIR && !MIME_HTML_MOSTLY && !__HAS_ERRORS_TO && !__HAS_X_BEEN_THERE && !__HAS_X_MAILMAN_VERSION
 describe   SENDINBLUE_REDIR              Redirect URI via Sendinblue