You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2010/02/15 03:32:06 UTC
svn commit: r910157 - in /spamassassin/trunk/rulesrc/sandbox/jhardin:
20_lotsa_money.cf 20_misc_testing.cf
Author: jhardin
Date: Mon Feb 15 02:32:06 2010
New Revision: 910157
URL: http://svn.apache.org/viewvc?rev=910157&view=rev
Log:
Tweak lotsa_money, stock symbol DISCUSS rules suck, tweak gibberish STYLE rule
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf?rev=910157&r1=910156&r2=910157&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf Mon Feb 15 02:32:06 2010
@@ -149,7 +149,7 @@
body __DECEASED /\b(?:the|my|der)\s(?:deceased|late|verstorbenen)\b/i
body __SURVIVORS /\b(?:widow|son|daughter|husband|wife|brother|sister|attorney)\s(?:of|to)\s(?:the\s)?late\s\w+\b/i
body __DEAD_PARENT /\bmy\s(?:deceased|dead)\s(?:father|mother)/i
-body __DORMANT_ACCT /\b(?:dormant|abandoned)\s(?:account|fund|transaction|sum)/i
+body __DORMANT_ACCT /\b(?:dormant|abandoned|left\s?over)\s(?:account|fund|transaction|sum)/i
body __WILL_LEGAL /\b(?:codicil|last\stestament|probate|executor|intestate)\b/i
body __EARLY_DEMISE /\buntimely\sdeath\b/i
body __WIDOW /\bwidow(?:e[rd])'?s?\b/i
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=910157&r1=910156&r2=910157&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon Feb 15 02:32:06 2010
@@ -98,7 +98,7 @@
describe MDN_BOTCHED Malformed return receipt header
# observed in spam 9/2009
-header HDRS_MISSP ALL =~ /\n(?:Subject|From):\S/ism
+header HDRS_MISSP ALL =~ /\n(?:Subject|From|To):\S/ism
describe HDRS_MISSP Misspaced headers
score HDRS_MISSP 2.0
@@ -280,16 +280,13 @@
# describe GAPPY_EXPENSES Possible obfuscated stock disclaimer
# describe GAPPY_DOLLARS Possible obfuscated stock disclaimer
-# talking about a stock symbol
-body __DISCUSS_STOCK /(?:[a-z]{2,}\s|^)[A-Z]{4}(?:\s[a-z]{2,}|[,.!])/
-tflags __DISCUSS_STOCK multiple
-meta MANY_DISCUSS_STOCK __DISCUSS_STOCK > 5
-describe MANY_DISCUSS_STOCK Talks about apparent stock symbols a lot
-
-rawbody STYLE_GIBBERISH /<style[^>]{0,30}>[^:;<]{80}/im
+rawbody STYLE_GIBBERISH /<style[^>]{0,30}>(?:\s{1,20}|[^\s:;<]){175}/im
tflags STYLE_GIBBERISH nopublish
+rawbody SCRIPT_GIBBERISH /<script>[^;<]{50}/im
+tflags SCRIPT_GIBBERISH nopublish
+
rawbody MANY_DIV /(?:<div[^>]{0,30}>\s{0,20}){30}/im
tflags MANY_DIV nopublish