Mailing List Archive

Author: jhardin
Date: Mon Jul 26 00:38:12 2021
New Revision: 1891797

URL: http://svn.apache.org/viewvc?rev=1891797&view=rev
Log:
Split FORGED_RELAY_MUA_TO_MX to subrule for metas and scored rule; if only scored rule behaves too poorly to publish, the metas break

Modified:
spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
spamassassin/trunk/rulesrc/sandbox/kb/20_header.cf

Modified: spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf?rev=1891797&r1=1891796&r2=1891797&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf Mon Jul 26 00:38:12 2021
@@ -54,7 +54,7 @@ describe SENDINBLUE_REDIR
score SENDINBLUE_REDIR 2.000 # limit
# tflags SENDINBLUE_REDIR publish

-meta __SENDINBLUE_REDIR_PHISH __SENDINBLUE_REDIR && ( __PDS_FROM_NAME_TO_DOMAIN || FORGED_RELAY_MUA_TO_MX || __TO_IN_SUBJ )
+meta __SENDINBLUE_REDIR_PHISH __SENDINBLUE_REDIR && ( __PDS_FROM_NAME_TO_DOMAIN || __FORGED_RELAY_MUA_TO_MX || __TO_IN_SUBJ )
meta SENDINBLUE_REDIR_PHISH __SENDINBLUE_REDIR_PHISH
describe SENDINBLUE_REDIR_PHISH Redirect URI via Sendinblue + phishing signs
score SENDINBLUE_REDIR_PHISH 3.500 # limit

Modified: spamassassin/trunk/rulesrc/sandbox/kb/20_header.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/kb/20_header.cf?rev=1891797&r1=1891796&r2=1891797&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/kb/20_header.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/kb/20_header.cf Mon Jul 26 00:38:12 2021
@@ -10,7 +10,8 @@ meta KB_RATWARE_MSGID (__KB_MSG

# bug 5817 -- Forged Relay, direct MUA to MX

-header FORGED_RELAY_MUA_TO_MX X-Spam-Relays-External =~ /^\[ ip=(?!127)([\d.]+) [^\[]*\[ ip=\1 [^\[]+ helo=(!(?!(?:10|127|169\.254|172\.(?:1[6-9]|2[0-9]|3[01])|192\.168)\.)| )[^\[]+$/
+header __FORGED_RELAY_MUA_TO_MX X-Spam-Relays-External =~ /^\[ ip=(?!127)([\d.]+) [^\[]*\[ ip=\1 [^\[]+ helo=(!(?!(?:10|127|169\.254|172\.(?:1[6-9]|2[0-9]|3[01])|192\.168)\.)| )[^\[]+$/
+meta FORGED_RELAY_MUA_TO_MX __FORGED_RELAY_MUA_TO_MX

# Plus quite a few devel variants and accompanying tests. This mess needs
# cleaning up, probably after re-investigation. See dos/70_bugs.cf for history.