adding three new rules to test scoring messages with too many recipients.

[spamassassin_config.git] / common / list_specific

diff --git a/common/list_specific b/common/list_specific
index 9c36009fc0db1307de7189fa5d649a01dafe6f51..636752cdfa13f9c8a72564b50bd32b1c1bc39c15 100644 (file)
--- a/common/list_specific
+++ b/common/list_specific
@@ -3,12 +3,12 @@
 # our MTAs fix up headers for a slew of spams, so mark these as suspicious
 # -- joy, 2003-06-28
 # deactivated as this rule is also part of SA itself.
 # our MTAs fix up headers for a slew of spams, so mark these as suspicious
 # -- joy, 2003-06-28
 # deactivated as this rule is also part of SA itself.

-#header OUR_MTA_MSGID          Message-Id =~ /\@(murphy|master|gluck)\.debian\.org/
+#header OUR_MTA_MSGID          Message-Id =~ /\@(liszt|master|gluck)\.debian\.org/

 #describe OUR_MTA_MSGID                Sounds like a MsgId autogenerated by our MTAs
 #score OUR_MTA_MSGID           1
 
 # -- joy, 2003-08-15
 #describe OUR_MTA_MSGID                Sounds like a MsgId autogenerated by our MTAs
 #score OUR_MTA_MSGID           1
 
 # -- joy, 2003-08-15

-header SENDER_FOR_US   From =~ /\@(murphy|master|gluck|lists)\.debian\.org/
+header SENDER_FOR_US   From =~ /\@(liszt|master|gluck|lists)\.debian\.org/

 describe SENDER_FOR_US Sounds like a mail aimed at tricking our MTAs
 score SENDER_FOR_US    2
 
 describe SENDER_FOR_US Sounds like a mail aimed at tricking our MTAs
 score SENDER_FOR_US    2
 


@@ -46,9 +46,9 @@ score MDOMOSUBS               -2
 #describe OURCRONMAILS Sounds like a legitimate cron job mail
 #score OURCRONMAILS    -3
 
 #describe OURCRONMAILS Sounds like a legitimate cron job mail
 #score OURCRONMAILS    -3
 

-header MURPHY_LOCAL_FORWARDED  Resent-From =~ /murphy\.debian\.org/
-describe MURPHY_LOCAL_FORWARDED        Mail has been locally forwarded.
-score MURPHY_LOCAL_FORWARDED   -5
+header LISZT_LOCAL_FORWARDED   Resent-From =~ /liszt\.debian\.org/
+describe LISZT_LOCAL_FORWARDED Mail has been locally forwarded.
+score LISZT_LOCAL_FORWARDED    -5

 
 # temp work-around for d-l-f
 
 
 # temp work-around for d-l-f
 


@@ -67,7 +67,37 @@ describe MURPHY_MIGUS_REPORT Auto-generated report from migus on translations
 score MURPHY_MIGUS_REPORT      -5
 
 # our own whitelisting of subscribers
 score MURPHY_MIGUS_REPORT      -5
 
 # our own whitelisting of subscribers

-header LDOSUBSCRIBER           X-Subscriber-murphy.debian.org =~ /./
+header LDOSUBSCRIBER           X-Subscriber-lists.debian.org =~ /./

 describe LDOSUBSCRIBER         Sender is a lists.debian.org subscriber
 score LDOSUBSCRIBER            -6
 
 describe LDOSUBSCRIBER         Sender is a lists.debian.org subscriber
 score LDOSUBSCRIBER            -6
 

+# whitelist mails to majordomo
+header MAJORDOMOMAIL   Delivered-To =~ /lists-majordomo@/
+describe MAJORDOMOMAIL mail to major domo
+score MAJORDOMOMAIL    -0.1
+
+meta    MAJORDOMOWHITE (MAJORDOMO && (NOSUBJECT || MISSING_SUBJECT))
+describe MAJORDOMOWHITE        Counteract no subject score for majordomo mails
+score   MAJORDOMOWHITE -3
+
+# count recipients and score those with Too Many. -cord
+describe TO_TOO_MANY To: too many recipients
+header   TO_TOO_MANY To =~ /(?:,[^,]{1,80}){5}/
+score    TO_TOO_MANY 0.1
+
+describe TO_WAY_TOO_MANY To: way too many recipients
+header   TO_WAY_TOO_MANY To =~ /(?:,[^,]{1,80}){10}/
+score    TO_WAY_TOO_MANY 0.1
+
+describe CC_TOO_MANY CC: too many recipients
+header   CC_TOO_MANY CC =~ /(?:,[^,]{1,80}){10}/
+score    CC_TOO_MANY 0.1
+
+score CORRUPT_FROM_LINE_IN_HDRS        0
+score FM_DDDD_TIMES_2           0
+score FM_SEX_HOSTDDDD          0
+score NO_HEADERS_MESSAGE       0
+score SARE_HEAD_SUBJ_RAND      0
+score SARE_SPEC_PROLEO_M2a     0
+score SHACKOUTLOOK             0
+score MSGID_FROM_MTA_ID                0