You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kb...@apache.org on 2009/09/03 22:54:05 UTC
svn commit: r811118 - /spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf
Author: kb
Date: Thu Sep 3 20:54:05 2009
New Revision: 811118
URL: http://svn.apache.org/viewvc?rev=811118&view=rev
Log:
RATWARE_BOUNDARY plus variant, supersedes all previous RATWARE_OUTLOOK stuff.
Modified:
spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf
Modified: spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf?rev=811118&r1=811117&r2=811118&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/kb/70_misc.cf Thu Sep 3 20:54:05 2009
@@ -89,6 +89,16 @@
# header __KB_OUTLOOK_MUA X-Mailer =~ /^Microsoft (?:Office )?Outlook\b/
+# Less minimal chars between headers, and reverse variant of RATWARE_BOUNDARY.
+# Supersedes all RATWARE_OUTLOOK_* devel stuff above.
+
+header __RATWARE_BOUND_A ALL =~ /^Message-Id: <....([0-9a-f]{8})\$[0-9a-f]{8}\$.{10,400}boundary="----=_NextPart_000_...._\1\./msi # "
+
+header __RATWARE_BOUND_B ALL =~ /boundary="----=_NextPart_000_...._([0-9a-f]{8})\..{10,400}^Message-Id: <....\1\$[0-9a-f]{8}\$/msi # "
+
+meta KB_RATWARE_BOUNDARY __RATWARE_BOUND_A || __RATWARE_BOUND_B
+
+
# Explain later. ;)
header THREAD_INDEX_HEX Thread-Index =~ /^[a-z0-9]{30}/