X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Flist_specific;h=664adb0cbdf6a224de63382bb957b492978ce008;hp=ec511e9a66e2f23ea5e6db537c28ae5ab576cef2;hb=6b14ddadd4d4a4320675bdcd4a81bcfc2529b175;hpb=83d6542d8bc32c6daa1b7f921a538a44c21f2383

diff --git a/common/list_specific b/common/list_specific
index ec511e9..664adb0 100644
--- a/common/list_specific
+++ b/common/list_specific
@@ -3,12 +3,12 @@
 # our MTAs fix up headers for a slew of spams, so mark these as suspicious
 # -- joy, 2003-06-28
 # deactivated as this rule is also part of SA itself.
-#header OUR_MTA_MSGID		Message-Id =~ /\@(liszt|master|gluck)\.debian\.org/
+#header OUR_MTA_MSGID		Message-Id =~ /\@(bendel|master|gluck)\.debian\.org/
 #describe OUR_MTA_MSGID		Sounds like a MsgId autogenerated by our MTAs
 #score OUR_MTA_MSGID		1
 
 # -- joy, 2003-08-15
-header SENDER_FOR_US	From =~ /\@(liszt|master|gluck|lists)\.debian\.org/
+header SENDER_FOR_US	From =~ /\@(bendel|master|gluck|lists)\.debian\.org/
 describe SENDER_FOR_US	Sounds like a mail aimed at tricking our MTAs
 score SENDER_FOR_US	2
 
@@ -46,9 +46,9 @@ score MDOMOSUBS		-2
 #describe OURCRONMAILS	Sounds like a legitimate cron job mail
 #score OURCRONMAILS	-3
 
-header LISZT_LOCAL_FORWARDED	Resent-From =~ /liszt\.debian\.org/
-describe LISZT_LOCAL_FORWARDED	Mail has been locally forwarded.
-score LISZT_LOCAL_FORWARDED	-5
+header BENDEL_LOCAL_FORWARDED	Resent-From =~ /bendel\.debian\.org/
+describe BENDEL_LOCAL_FORWARDED	Mail has been locally forwarded.
+score BENDEL_LOCAL_FORWARDED	-5
 
 # temp work-around for d-l-f
 
@@ -80,6 +80,19 @@ meta  	 MAJORDOMOWHITE	(MAJORDOMO && (NOSUBJECT || MISSING_SUBJECT))
 describe MAJORDOMOWHITE	Counteract no subject score for majordomo mails
 score	 MAJORDOMOWHITE	-3
 
+# count recipients and score those with Too Many. -cord
+describe TO_TOO_MANY To: too many recipients
+header   TO_TOO_MANY To =~ /(?:,[^,]{1,80}){5}/
+score    TO_TOO_MANY 1
+
+describe TO_WAY_TOO_MANY To: way too many recipients
+header   TO_WAY_TOO_MANY To =~ /(?:,[^,]{1,80}){10}/
+score    TO_WAY_TOO_MANY 3
+
+describe CC_TOO_MANY CC: too many recipients
+header   CC_TOO_MANY CC =~ /(?:,[^,]{1,80}){10}/
+score    CC_TOO_MANY 3
+
 score CORRUPT_FROM_LINE_IN_HDRS	0
 score FM_DDDD_TIMES_2           0
 score FM_SEX_HOSTDDDD	        0