You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by gb...@apache.org on 2019/06/30 10:01:27 UTC
svn commit: r1862340 - in /spamassassin/trunk/rulesrc/sandbox/gbechis:
20_freemail.cf 20_misc.cf
Author: gbechis
Date: Sun Jun 30 10:01:27 2019
New Revision: 1862340
URL: http://svn.apache.org/viewvc?rev=1862340&view=rev
Log:
publish working rules
comment a non working rule
Modified:
spamassassin/trunk/rulesrc/sandbox/gbechis/20_freemail.cf
spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
Modified: spamassassin/trunk/rulesrc/sandbox/gbechis/20_freemail.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_freemail.cf?rev=1862340&r1=1862339&r2=1862340&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_freemail.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_freemail.cf Sun Jun 30 10:01:27 2019
@@ -3,6 +3,7 @@ ifplugin Mail::SpamAssassin::Plugin::Fre
meta GB_FREEMAIL_DISPTO ( __FREEMAIL_DISPTO && !__freemail_safe )
describe GB_FREEMAIL_DISPTO Disposition-Notification-To/From or Disposition-Notification-To/body contain different freemails
score GB_FREEMAIL_DISPTO 0.50 # limit
+ tflags GB_FREEMAIL_DISPTO publish
endif
ifplugin Mail::SpamAssassin::Plugin::FreeMail
Modified: spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf?rev=1862340&r1=1862339&r2=1862340&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf Sun Jun 30 10:01:27 2019
@@ -1,10 +1,11 @@
-uri __MALWARE_DROPBOX_JAR_URI m;^https?://[^.]+\.dropbox\.com/(\w+)/(\w+)/(\w+)\.jar\?dl\=1;i
-meta GB_MALWARE_DROPBOX_JAR_URI ( __MALWARE_DROPBOX_JAR_URI && (HTML_SHORT_LINK_IMG_1 || HTML_SHORT_LINK_IMG_2 || HTML_SHORT_LINK_IMG_3) )
-describe GB_MALWARE_DROPBOX_JAR_URI Dropbox that forces user to download jar file
+# uri __MALWARE_DROPBOX_JAR_URI m;^https?://[^.]+\.dropbox\.com/(\w+)/(\w+)/(\w+)\.jar\?dl\=1;i
+# meta GB_MALWARE_DROPBOX_JAR_URI ( __MALWARE_DROPBOX_JAR_URI && (HTML_SHORT_LINK_IMG_1 || HTML_SHORT_LINK_IMG_2 || HTML_SHORT_LINK_IMG_3) )
+# describe GB_MALWARE_DROPBOX_JAR_URI Dropbox that forces user to download jar file
uri GB_GOOGLE_OBFU /^https:\/\/www\.google\.([a-z]{2,3})\/url\?sa=t\&rct=j\&q=\&esrc=s\&source=web\&cd=([0-9])+\&cad=rja\&uact=([0-9]+)\&ved=(.*)\&url=https?:\/\/(.*)&usg=(.*)/
describe GB_GOOGLE_OBFU Obfuscate url through Google redirect
-score GB_GOOGLE_OBFU 0.50 # limit
+score GB_GOOGLE_OBFU 0.75 # limit
+tflags GB_GOOGLE_OBFU publish
header __COPY_OF Subject =~ /Copy of:|offers for you/
meta GB_COPY_OF_SHORT ( __URL_SHORTENER && __COPY_OF && __KAM_BODY_LENGTH_LT_1024 )