You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@spamassassin.apache.org by pd...@apache.org on 2019/06/12 17:38:34 UTC

svn commit: r1861173 - /spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf

Author: pds
Date: Wed Jun 12 17:38:34 2019
New Revision: 1861173

URL: http://svn.apache.org/viewvc?rev=1861173&view=rev
Log:
Expiration extortion with ntld

Modified:
    spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf

Modified: spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf?rev=1861173&r1=1861172&r2=1861173&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/20_ntld.cf Wed Jun 12 17:38:34 2019
@@ -110,5 +110,12 @@ describe SENT_TO_EMAIL_ADDR Email was se
 score    SENT_TO_EMAIL_ADDR 2.0 # limit
 reuse    SENT_TO_EMAIL_ADDR
 
+body     __PDS_EXPIRATION_NOTICE /\bexpiration (notice|alert|date)\b/i
+
+meta     SUSPNTLD_EXPIRATION_EXTORT LOTS_OF_MONEY && __PDS_EXPIRATION_NOTICE && __FROM_ADDRLIST_SUSPNTLD
+describe SUSPNTLD_EXPIRATION_EXTORT Susp NTLD with an expiration notice and lotsa money
+score    SUSPNTLD_EXPIRATION_EXTORT 2.0 # limit
+reuse    SUSPNTLD_EXPIRATION_EXTORT
+
 endif
 endif