From 1131ac64d74e40f9e39052412a2bcdbe3cf5385a Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Mon, 13 Mar 2017 08:22:39 -0700 Subject: [PATCH] increase score of ZIPFILE and change SHIPPING_ID to match --- common/misc_spam | 2 +- common/virus_spam | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/common/misc_spam b/common/misc_spam index 3fc3b17..b406bb7 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -307,7 +307,7 @@ score TINYFONT 3 # blarson 2008-04-03 full ZIPFILE /\bfilename\=.*\.zip\b/i describe ZIPFILE zipfile attachment -score ZIPFILE 0.5 +score ZIPFILE 1 # blarson 2008-04-19 header SPACESUB subject =~ /^\s\w/ diff --git a/common/virus_spam b/common/virus_spam index 3d00424..2feae6f 100644 --- a/common/virus_spam +++ b/common/virus_spam @@ -100,11 +100,11 @@ describe FEDEXPACKAGE Fedex Package Virus spam score FEDEXPACKAGE 4 #don 2016-11-04 -header SHIPPING_ID subject =~ /(ID:?|ID|\#|n\.)\s*\d{7,}\s*($|shipment|delivery)/ +header SHIPPING_ID subject =~ /(ID:?|ID|\#|n\.|UPS)\s*\d{7,}\s*\)?\s*($|shipment|delivery)/ describe SHIPPING_ID Contains a long ID number at the end or folled by shipment score SHIPPING_ID 3 -header SHIP_ID_INT subject =~ /(ID:?|ID|\#|n\.)\s*\d{7,}\s*/ +header SHIP_ID_INT subject =~ /(ID:?|ID|\#|n\.|UPS)\s*\d{7,}\s*/ describe SHIP_ID_INT Contains a long ID number inside score SHIP_ID_INT 1 -- 2.39.2