You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2010/09/20 15:38:38 UTC
svn commit: r998922 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Mon Sep 20 13:38:38 2010
New Revision: 998922
URL: http://svn.apache.org/viewvc?rev=998922&view=rev
Log:
Add rules for .JPG and .GIF attachments obfuscated by MIME type application/octet-stream
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=998922&r1=998921&r2=998922&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon Sep 20 13:38:38 2010
@@ -35,7 +35,15 @@ ifplugin Mail::SpamAssassin::Plugin::MIM
describe OBFU_PDF_ATTACH PDF attachment with generic MIME type
score OBFU_PDF_ATTACH 0.25
- meta OBFU_ATTACH_MISSP __FROM_RUNON && (OBFU_HTML_ATTACH || OBFU_TEXT_ATTACH || OBFU_DOC_ATTACH || OBFU_PDF_ATTACH)
+ mimeheader OBFU_JPG_ATTACH Content-Type =~ m,application/octet-stream;.+\.jpe?g\b,i
+ describe OBFU_JPG_ATTACH JPG attachment with generic MIME type
+ score OBFU_JPG_ATTACH 1.50
+
+ mimeheader OBFU_GIF_ATTACH Content-Type =~ m,application/octet-stream;.+\.gif\b,i
+ describe OBFU_GIF_ATTACH GIF attachment with generic MIME type
+ score OBFU_GIF_ATTACH 1.50
+
+ meta OBFU_ATTACH_MISSP __FROM_RUNON && (OBFU_HTML_ATTACH || OBFU_TEXT_ATTACH || OBFU_DOC_ATTACH || OBFU_PDF_ATTACH || OBFU_JPG_ATTACH || OBFU_GIF_ATTACH)
describe OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
endif