Mailing List Archive

Author: billcole
Date: Fri Feb 2 16:37:19 2024
New Revision: 1915549

URL: http://svn.apache.org/viewvc?rev=1915549&view=rev
Log:
FP prevention for DMARC reports. Bug 8214

Modified:
spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf

Modified: spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf?rev=1915549&r1=1915548&r2=1915549&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/billcole/21_bug_7219.cf Fri Feb 2 16:37:19 2024
@@ -2,9 +2,23 @@

body __SCC_BODY_TEXT_LINE_FULL /^\s*\S/
tflags __SCC_BODY_TEXT_LINE_FULL multiple maxhits=3
+
header __SCC_SUBJECT_HAS_NON_SPACE Subject =~ /\S/
+
meta SCC_BODY_TEXT_LINE __SCC_BODY_TEXT_LINE_FULL - __SCC_SUBJECT_HAS_NON_SPACE
tflags SCC_BODY_TEXT_LINE nice
+
+body __SCC_DMARC_REP /(DMARC|aggregate) .{0,12}report/
+
+meta SCC_IS_DMARC_REP __SCC_DMARC_REP && __MIME_ATTACHMENT
+describe SCC_IS_DMARC_REP Message looks like a DMARC report
+tflags SCC_IS_DMARC_REP nice
+
meta SCC_BODY_SINGLE_WORD T_SCC_BODY_TEXT_LINE < 2 && !__EMPTY_BODY && !__SMIME_MESSAGE && ((__SINGLE_WORD_LINE && !__SINGLE_WORD_SUBJ) || __SINGLE_WORD_LINE > 1)
-meta SCC_BODY_URI_ONLY T_SCC_BODY_TEXT_LINE < 2 && __HAS_ANY_URI && !__SMIME_MESSAGE
+describe SCC_BODY_SINGLE_WORD Message body seems like one word
+
+meta SCC_BODY_URI_ONLY T_SCC_BODY_TEXT_LINE < 2 && __HAS_ANY_URI && !__SMIME_MESSAGE && !SCC_IS_DMARC_REP
+describe SCC_BODY_URI_ONLY Very short body with something maybe clickable
+
meta SCC_EMPTY_BODY T_SCC_BODY_TEXT_LINE < 1 && !__SMIME_MESSAGE
+describe SCC_EMPTY_BODY I'm not seeing a message body here...