You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2020/10/23 12:08:45 UTC
[Bug 7864] New: Suggest rule to score messages with obfuscated from
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7864
Bug ID: 7864
Summary: Suggest rule to score messages with obfuscated from
Product: Spamassassin
Version: unspecified
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
Assignee: dev@spamassassin.apache.org
Reporter: ricardo.matos@cgtp.pt
Target Milestone: Undefined
describe __FROM_2_ADDRESSES From: Two addresses in from header
header __FROM_2_ADDRESSES From =~ /"[^@]+\@[^@]+"\s+[^@]+\@[^@]+/i
describe __FROM_SAME From: Same address in brackets
header __FROM_SAME From =~ /"([^@]+\@[^@]+)"\s+<\1>/i
describe FROM_HIDDEN From: obfuscated
meta FROM_HIDDEN __FROM_2_ADDRESSES && ! __FROM_SAME
score FROM_HIDDEN 2.5
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 7864] Suggest rule to score messages with obfuscated from
Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7864
Giovanni Bechis <gi...@paclan.it> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|NEW |RESOLVED
CC| |giovanni@paclan.it
--- Comment #1 from Giovanni Bechis <gi...@paclan.it> ---
Take a look at Mail::SpamAssassin::Plugin::FromNameSpoof, some of those rules
are better written that way (they can match more spamples).
--
You are receiving this mail because:
You are the assignee for the bug.