X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=a034e4e6d3aedf47fdf6b292548c23c52d1131d3;hp=68b6e76c4ddb53d5d18f035f3bdb94ae24165ee3;hb=0cbe55381c60538746775d273cd2be3b0218152d;hpb=bb54c2f84a356e635678c83114b846cf8ffc262e diff --git a/common/misc_spam b/common/misc_spam index 68b6e76..a034e4e 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -171,7 +171,7 @@ describe FAILNOTE bounced spam score FAILNOTE 2 # blarson 2007-06-28 -rawbody CTINLINE /^Content\-Disposition\: inline\;\b/ +full CTINLINE /^Content\-Disposition\: inline\;\b/ describe CTINLINE Inline attachment score CTINLINE 1 @@ -313,7 +313,7 @@ describe TINYFONT tiny font specified score TINYFONT 3 # blarson 2008-04-03 -rawbody ZIPFILE /\bfilename\=.*\.zip\b/i +full ZIPFILE /\bfilename\=.*\.zip\b/i describe ZIPFILE zipfile attachment score ZIPFILE 0.5 @@ -493,10 +493,30 @@ header CTOCTET_STREAM Content-Type =~ /octet-stream/i describe CTOCTET_STREAM Content type is octet-stream score CTOCTET_STREAM 0.5 -header RTF_ATTACH Content-Type =~ /name=.+\.rtf/i -describe RTF_ATTACH Contains an RTF Attachment -score RTF_ATTACH 0.5 +full RTF_ATTACH /^Content-Disposition:.+name=.+\.(rtf|doc)/i +describe RTF_ATTACH Contains an RTF or DOC Attachment +score RTF_ATTACH 2 meta RTF_SPAM CTOCTET_STREAM && RTF_ATTACH describe RTF_SPAM Content type is octet-stream and has an RTF Attachment score RTF_SPAM 3 + +# blarson 2010-10-11 +header WORDDIGDIG subject =~ /^\w{3,}\s+\d\s\d\s*$/ +describe WORDDIGDIG Word digit digit subject +score WORDDIGDIG 3 + +# don 2011-06-06 +header BRACE_SUBJECT Subject =~ /^\[\ [a-z0-9]{16}]\ / +describe BRACE_SUBJECT 16 length word in braces in the subject +score BRACE_SUBJECT 4 + +# formorer 2011-08-12 +header COMPTESFR subject =~ /concernant Compte SFR/i +describe COMPTESFR concernant Compte SFR +score COMPTESFR 3 + +# formorer 2012-02-02 +header BACKTOME subject =~ /Please get back to me/i +describe BACKTOME Phrase get back to me +score BACKTOME 4