You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by bi...@apache.org on 2018/04/04 18:25:11 UTC
svn commit: r1828371 -
/spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
Author: billcole
Date: Wed Apr 4 18:25:11 2018
New Revision: 1828371
URL: http://svn.apache.org/viewvc?rev=1828371&view=rev
Log:
Majordomo detection
Modified:
spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
Modified: spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf?rev=1828371&r1=1828370&r2=1828371&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/billcole/80_test.cf Wed Apr 4 18:25:11 2018
@@ -27,3 +27,13 @@ meta T_MIXED_TAG_CASE __MIXED_IMG_CASE
describe T_SCC_THREE_WORD_MONTY Are you POTUS or a mass murderer?
header T_SCC_THREE_WORD_MONTY From =~ /(\w{2,}) (\w{2,}) (\w{2,}) <\1.\2.\3/
+
+# Fingerprint Majordomo lists
+header __SCC_MD_UNSUB List-Unsubscribe =~ /: <mailto:majordomo\@/
+header __SCC_MD_SUB List-Subscribe =~ /: <mailto:majordomo\@/
+header __SCC_MD_SENDER Sender =~ /\bowner-/
+header __SCC_MD_RCVD_OUT Received =~ /-outgoing@/
+describe SCC_MAJORDOMO Multiple indications of the majordomo list manager
+meta SCC_MAJORDOMO __SCC_MD_UNSUB + __SCC_MD_SUB + __SCC_MD_SENDER + __SCC_MD_RCVD_OUT > 1
+tflags SCC_MAJORDOMO nice
+