You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by he...@apache.org on 2018/10/05 20:53:25 UTC
svn commit: r1842982 - /spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf
Author: hege
Date: Fri Oct 5 20:53:24 2018
New Revision: 1842982
URL: http://svn.apache.org/viewvc?rev=1842982&view=rev
Log:
Some X-Originating-IP rules
Modified:
spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf
Modified: spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf?rev=1842982&r1=1842981&r2=1842982&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/hege/20_hk.cf Fri Oct 5 20:53:24 2018
@@ -3,10 +3,14 @@
#### Basic stuff
####
-ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
-mimeheader HK_CTE_RAW Content-Transfer-Encoding =~ /^raw$/
-score HK_CTE_RAW 1
-endif
+header HK_XOIP_4SINGLES X-Originating-IP =~ /^\d\.\d\.\d\.\d$/
+score HK_XOIP_3SINGLES 1
+
+header HK_XOIP_3SINGLES X-Originating-IP =~ /^(?:\d\d+\.\d\.\d\.\d|\d\.\d\d+\.\d\.\d|\d\.\d\.\d\d+\.\d|\d\.\d\.\d\.\d\d+)$/
+score HK_XOIP_3SINGLES 1
+
+header HK_XOIP_0FRONT X-Originating-IP =~ /(?:^|\.)0[1-9]/
+score HK_XOIP_0FRONT 1
header HK_EMPTY_DKIM_S DKIM-Signature =~ /[\s;]s=\s*;/
score HK_EMPTY_DKIM_S 1
@@ -168,6 +172,9 @@ mimeheader __HK_SPAMMY_CTFN Content-Type
mimeheader __HK_SPAMMY_CDFN Content-Disposition =~ /name=.*?(?:lot(?:eri[ej]|t(?:ery|o))|award|prize|winn(?:er|ing)|microsoft|congrat|urgent)/mi
meta HK_SPAMMY_FILENAME __HK_SPAMMY_CTFN || __HK_SPAMMY_CDFN
+mimeheader HK_CTE_RAW Content-Transfer-Encoding =~ /^raw$/
+score HK_CTE_RAW 1
+
endif
####