Mailing List Archive

Author: quinlan
Date: Fri Feb 13 01:51:08 2004
New Revision: 6637

Modified:
incubator/spamassassin/trunk/rules/70_testing.cf
Log:
more evil message-id stuff


Modified: incubator/spamassassin/trunk/rules/70_testing.cf
==============================================================================
--- incubator/spamassassin/trunk/rules/70_testing.cf (original)
+++ incubator/spamassassin/trunk/rules/70_testing.cf Fri Feb 13 01:51:08 2004
@@ -497,8 +497,18 @@
# letter: 2/3 (pick a-z) | 1/3 (pick 0-9)
# 3-12 letters: 1/8 (pick .) | 7/12 (pick a-z) | 7/24 (pick 0-9)
# letter: 2/3 (pick a-z) | 1/3 (pick 0-9)
-header T_MSGID_EVIL_SPAM_1 MESSAGEID =~ /<[a-z\d][a-z\d\$-]+[a-z\d]\@[a-z\d][a-z\d.]+[a-z\d]>/
-header T_MSGID_EVIL_SPAM_2 MESSAGEID =~ /<[a-z\d][a-z\d\$-]{10,29}[a-z\d]\@[a-z\d][a-z\d.]{3,12}[a-z\d]>/
+header T_MSGID_EVIL_SPAM_1 Message-ID =~ /<[a-z\d][a-z\d\$-]+[a-z\d]\@[a-z\d][a-z\d.]+[a-z\d]>/
+header T_MSGID_EVIL_SPAM_2 Message-ID =~ /<[a-z\d][a-z\d\$-]{10,29}[a-z\d]\@[a-z\d][a-z\d.]{3,12}[a-z\d]>/
+header __MSGID_IDIOM_1 Message-ID =~ /\b[a-f\d]{12}\b/
+header __MSGID_IDIOM_2 Message-ID =~ /\b[a-f\d]{8}\b/
+header __MSGID_IDIOM_3 Message-ID =~ /\d{10}/
+meta T_MSGID_EVIL_SPAM_3 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1)
+meta T_MSGID_EVIL_SPAM_4 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_2)
+meta T_MSGID_EVIL_SPAM_5 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_6 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_2)
+meta T_MSGID_EVIL_SPAM_7 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_8 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_2 && !__MSGID_IDIOM_3)
+meta T_MSGID_EVIL_SPAM_9 (T_MSGID_EVIL_SPAM_2 && !__MSGID_IDIOM_1 && !__MSGID_IDIOM_2 && !__MSGID_IDIOM_3)

# some simple subject rules to catch a persistent spammer
header T_SUBJ_XANAX Subject =~ /x.{0,2}a.{0,2}n.{0,2}a.{0,2}x/i