You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/12/05 14:27:21 UTC

svn commit: r482641 - /spamassassin/rules/trunk/sandbox/jm/20_basic.cf

Author: jm
Date: Tue Dec  5 05:27:20 2006
New Revision: 482641

URL: http://svn.apache.org/viewvc?view=rev&rev=482641
Log:
replace RCVD_FORGED_WROTE with RCVD_CORRUPT_ESMTP test rule; it hits more spam and completely subsumes the existing hits

Modified:
    spamassassin/rules/trunk/sandbox/jm/20_basic.cf

Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?view=diff&rev=482641&r1=482640&r2=482641
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Tue Dec  5 05:27:20 2006
@@ -77,7 +77,8 @@
 
 endif # Mail::SpamAssassin::Plugin::MIMEHeader
 
-header RCVD_FORGED_WROTE    Received =~ /from [0-9.]+ \(HELO \S+[a-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
+# catches "by jmason.org with esmtp (;4OZ*/H/)>7. 4.2-+*)" gibberish
+header RCVD_FORGED_WROTE    Received =~ / by \S+ with esmtp \([^a-z ]{6,} [^a-z ]{3,}\) id/
 describe RCVD_FORGED_WROTE  Forged 'Received' header found ('wrote:' spam)
 score RCVD_FORGED_WROTE     2.8
 
@@ -161,9 +162,6 @@
 header __MOLE_2962  X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/
 header __NAKED_TO   To =~ /^[^\s<>]+\@[^\s<>]+$/
 meta JM_TORA_XM     (__MAILER_OL_6626 && __MOLE_2962 && __NAKED_TO)
-
-# catches "by jmason.org with esmtp (;4OZ*/H/)>7. 4.2-+*)" gibberish
-header RCVD_CORRUPT_ESMTP   Received =~ / by \S+ with esmtp \([^a-z ]{6,} [^a-z ]{3,}\) id/
 
 # ---------------------------------------------------------------------------
 # Testing bit