You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2014/07/10 05:59:27 UTC
svn commit: r1609383 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Jul 10 03:59:26 2014
New Revision: 1609383
URL: http://svn.apache.org/r1609383
Log:
FP avoidance, add scored version of SYSADMIN
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1609383&r1=1609382&r2=1609383&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Jul 10 03:59:26 2014
@@ -291,9 +291,9 @@ describe MDN_BOTCHED Mal
# observed in spam 9/2009
header __HDRS_MISSP ALL =~ /\n(?:Subject|From|To):\S/ism
-meta HDRS_MISSP __HDRS_MISSP && !__TAG_EXISTS_HEAD && !__DKIM_EXISTS && !__RP_MATCHES_RCVD && !__NOT_SPOOFED
+meta HDRS_MISSP __HDRS_MISSP && !__TAG_EXISTS_HEAD && !__DKIM_EXISTS && !__RP_MATCHES_RCVD && !__NOT_SPOOFED && !__LCL__ENV_AND_HDR_FROM_MATCH
describe HDRS_MISSP Misspaced headers
-#score HDRS_MISSP 2.0
+score HDRS_MISSP 2.000 # limit
header SPAMMY_MIME_BDRY_01 Content-Type =~ /boundary="\@\@BOUNDARY"/
describe SPAMMY_MIME_BDRY_01 Spammy MIME boundary string
@@ -1166,6 +1166,10 @@ score EMAIL_URI_PHISH 4.00 #
describe EMAIL_URI_PHISH Email account phishing using web form
tflags EMAIL_URI_PHISH publish # Force publication - very good S/O, hits mainly <= 3 points
+meta SYSADMIN __SYSADMIN && !ALL_TRUSTED && !__ANY_TEXT_ATTACH && !__DKIM_EXISTS && !__LCL__ENV_AND_HDR_FROM_MATCH
+describe SYSADMIN Supposedly from your IT department
+score SYSADMIN 3.500 # limit
+
# suggested by MPerkel on the users list 11/10/2012
uri __URI_PROTO_MC /^(?!(?-i:(?:[Hh]ttps?|HTTPS?):))https?:/i
uri __URI_WWW_MC m,://(?!(?-i:www|WWW))www\.,i