You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/11/22 17:54:12 UTC
svn commit: r1847193 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Nov 22 17:54:12 2018
New Revision: 1847193
URL: http://svn.apache.org/viewvc?rev=1847193&view=rev
Log:
Add some scored __UNICODE_OBFU_ZW combination rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1847193&r1=1847192&r2=1847193&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Nov 22 17:54:12 2018
@@ -2598,6 +2598,18 @@ if can(Mail::SpamAssassin::Conf::feature
describe UNICODE_OBFU_ZW Obfuscating text with hidden characters
score UNICODE_OBFU_ZW 3.500 # limit
tflags UNICODE_OBFU_ZW publish
+
+ meta ZW_OBFU_BITCOIN __UNICODE_OBFU_ZW && __BITCOIN_ID
+ describe ZW_OBFU_BITCOIN Obfuscated text + bitcoin ID - possible extortion
+ score ZW_OBFU_BITCOIN 2.500 # limit
+
+ meta ZW_OBFU_FROMTOSUBJ __UNICODE_OBFU_ZW && FROM_IN_TO_AND_SUBJ
+ describe ZW_OBFU_FROMTOSUBJ Obfuscated text + from in to and subject
+ score ZW_OBFU_FROMTOSUBJ 2.000 # limit
+
+ meta ZW_OBFU_FREEM __UNICODE_OBFU_ZW && __freemail_hdr_replyto
+ describe ZW_OBFU_FREEM Obfuscated text + freemail
+ score ZW_OBFU_FREEM 2.000 # limit
endif