You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by fa...@apache.org on 2006/11/24 18:39:11 UTC
svn commit: r478930 - in /spamassassin/rules/trunk/sandbox/fanf: ./
10_headers.cf
Author: fanf
Date: Fri Nov 24 09:39:06 2006
New Revision: 478930
URL: http://svn.apache.org/viewvc?view=rev&rev=478930
Log:
A couple of test rules from bug 5198.
Added:
spamassassin/rules/trunk/sandbox/fanf/
spamassassin/rules/trunk/sandbox/fanf/10_headers.cf
Added: spamassassin/rules/trunk/sandbox/fanf/10_headers.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/fanf/10_headers.cf?view=auto&rev=478930
==============================================================================
--- spamassassin/rules/trunk/sandbox/fanf/10_headers.cf (added)
+++ spamassassin/rules/trunk/sandbox/fanf/10_headers.cf Fri Nov 24 09:39:06 2006
@@ -0,0 +1,8 @@
+# more Received: forgery variants
+
+# same as RCVD_FORGED_WROTE but allowing capitalized host names
+#
+header RCVD_FORGED_WROTE2 Received =~ /from [0-9.]+ \(HELO \S+[A-Za-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
+
+header RCVD_FORGED_WROTE3 Received =~ /from \[[0-9.]+\] \(port=\d+ helo=\S+[A-Za-z]+\) by (\S+) with asmtp id \S{6}-\S{6}-\S\S for \S+@\1;/s
+