You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by gb...@apache.org on 2020/12/27 11:34:59 UTC
svn commit: r1884839 - /spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
Author: gbechis
Date: Sun Dec 27 11:34:58 2020
New Revision: 1884839
URL: http://svn.apache.org/viewvc?rev=1884839&view=rev
Log:
new rule to match fake replies
Modified:
spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
Modified: spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf?rev=1884839&r1=1884838&r2=1884839&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf Sun Dec 27 11:34:58 2020
@@ -54,3 +54,8 @@ meta SENDINBLUE_REDIR_PHISH
describe SENDINBLUE_REDIR_PHISH Redirect URI via Sendinblue + phishing signs
score SENDINBLUE_REDIR_PHISH 3.500 # limit
# tflags SENDINBLUE_REDIR_PHISH publish
+
+header __GB_FAKE_RF Subject =~ /(Fw|Re)\:[a-z]/i
+meta GB_FAKE_RF_SHORT ( ! __THREADED && __GB_FAKE_RF && __PDS_URISHORTENER )
+describe GB_FAKE_RF_SHORT Fake reply or forward with url shortener
+score GB_FAKE_RF_SHORT 1.500 # limit