You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@spamassassin.apache.org by fa...@apache.org on 2007/02/02 17:16:58 UTC

svn commit: r502645 - /spamassassin/rules/trunk/sandbox/fanf/10_headers.cf

Author: fanf
Date: Fri Feb  2 08:16:58 2007
New Revision: 502645

URL: http://svn.apache.org/viewvc?view=rev&rev=502645
Log:
another variant of RCVD_FORGED_WROTE

Modified:
    spamassassin/rules/trunk/sandbox/fanf/10_headers.cf

Modified: spamassassin/rules/trunk/sandbox/fanf/10_headers.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/fanf/10_headers.cf?view=diff&rev=502645&r1=502644&r2=502645
==============================================================================
--- spamassassin/rules/trunk/sandbox/fanf/10_headers.cf (original)
+++ spamassassin/rules/trunk/sandbox/fanf/10_headers.cf Fri Feb  2 08:16:58 2007
@@ -4,4 +4,8 @@
 #
 header RCVD_FORGED_WROTE2 Received =~ /from [0-9.]+ \(HELO \S+[A-Za-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
 
-header RCVD_FORGED_WROTE3    Received =~ /from \[[0-9.]+\] \(port=\d+ helo=\S+[A-Za-z]+\) by (\S+) with asmtp id \S{6}-\S{6}-\S\S for \S+@\1;/s
+header RCVD_FORGED_WROTE3 Received =~ /from \[[0-9.]+\] \(port=\d+ helo=\S+[A-Za-z]+\) by (\S+) with asmtp id \S{6}-\S{6}-\S\S for \S+@\1;/s
+
+# Another variant a bit like Sendmail instead of Exim...
+#
+header RCVD_FORGED_WROTE4 Received =~ /from [0-9.]+ \(HELO \S+[A-Za-z]+\) by (\S+) with \(8[0-9.]+/8[0-9.]+\) ESMTP [0-9a-z]{14} for \S+@\1;/s