You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2019/09/18 02:49:16 UTC
svn commit: r1867088 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Wed Sep 18 02:49:15 2019
New Revision: 1867088
URL: http://svn.apache.org/viewvc?rev=1867088&view=rev
Log:
Rule tuning
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1867088&r1=1867087&r2=1867088&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Wed Sep 18 02:49:15 2019
@@ -2829,7 +2829,7 @@ header __HDR_RCVD_ALIBABA X
uri __URI_IMG_ALICDN m,//(?:[^/.]+\.)*alicdn\.com/.+\.(?:jpe?g|gif|png),i
meta __ALIBABA_IMG_NOT_RCVD_ALI __URI_IMG_ALICDN && !__HDR_RCVD_ALIBABA
-meta ALIBABA_IMG_NOT_RCVD_ALI __ALIBABA_IMG_NOT_RCVD_ALI && !__YOUR_PASSWORD && !__UNSUB_LINK && !__MSGID_BEFORE_RECEIVED
+meta ALIBABA_IMG_NOT_RCVD_ALI __ALIBABA_IMG_NOT_RCVD_ALI && !__YOUR_PASSWORD && !__UNSUB_LINK && !__MSGID_BEFORE_RECEIVED && !__HAS_HREF_ONECASE
score ALIBABA_IMG_NOT_RCVD_ALI 2.500 # limit
describe ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from Alibaba
tflags ALIBABA_IMG_NOT_RCVD_ALI publish
@@ -2939,7 +2939,7 @@ meta __NORDNS_SPOOFED _
# potential bitcoin extortion obfuscation
body __PASSWORD /\bp[-\s_]?a[-\s_]?s[-\s_]?s[-\s_]?w[-\s_]?o[-\s_]?r[-\s_]?d\b/i
-meta __UNAME_PASSWD_PDF __PASSWORD && LOCALPART_IN_SUBJECT && __PDF_ATTACH
+meta __UNAME_PASSWD_PDF ( __PASSWORD || __YOUR_PASSWORD ) && LOCALPART_IN_SUBJECT && __PDF_ATTACH