You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by pd...@apache.org on 2019/11/25 18:46:52 UTC
svn commit: r1870414 - /spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf
Author: pds
Date: Mon Nov 25 18:46:52 2019
New Revision: 1870414
URL: http://svn.apache.org/viewvc?rev=1870414&view=rev
Log:
Litecoin rules
Modified:
spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf
Modified: spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf?rev=1870414&r1=1870413&r2=1870414&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/pds/20_btc.cf Mon Nov 25 18:46:52 2019
@@ -2,11 +2,30 @@ rawbody __HAS_IMG_SRC_DATA /^[^>].*?<i
meta __PDS_BTC_ID ( __BITCOIN_ID && !__URL_BTC_ID && !__HAS_IMG_SRC_DATA && !__BUGGED_IMG)
+uri __URL_LTC_ID m;[/.][LM3][a-km-zA-HJ-NP-Z1-9]{26,33}(?:/|$);
+body __LITECOIN_ID /\b(?<!=)[LM3][a-km-zA-HJ-NP-Z1-9]{26,33}\b/
+
+meta __PDS_LITECOIN_ID (__BITCOIN_ID && !__URL_LTC_ID && !__HAS_IMG_SRC_DATA && !__BUGGED_IMG)
+
+meta PDS_LITECOIN_ID __PDS_LITECOIN_ID
+describe PDS_LITECOIN_ID FP reduced Litecoin ID
+score PDS_LITECOIN_ID 0.5
+reuse PDS_LITECOIN_ID
+
+meta LITECOIN_EXTORT_01 __LITECOIN_ID && __EXTORT_MANY
+describe LITECOIN_EXTORT_01 Extortion spam, pay via BitCoin
+score LITECOIN_EXTORT_01 5.000 # limit
+
meta PDS_BTC_ID __PDS_BTC_ID
describe PDS_BTC_ID FP reduced Bitcoin ID
score PDS_BTC_ID 0.5
reuse PDS_BTC_ID
+meta PDS_BTC_MSGID __PDS_BTC_ID && __MSGID_NOFQDN2
+describe PDS_BTC_MSGID Bitcoin ID with MSGID_NOFQDN2
+score PDS_BTC_MSGID 1.0
+reuse PDS_BTC_MSGID
+
ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
replace_rules __PDS_BTC_HACKER __PDS_BTC_PIRATE