Author: jm
Date: Thu Dec 21 05:25:01 2006
New Revision: 489350
URL: http://svn.apache.org/viewvc?view=rev&rev=489350
Log:
consolidate FAKETZ rules down to the top-hitter, L_SPAM_TOOL_13
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?view=diff&rev=489350&r1=489349&r2=489350
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Thu Dec 21 05:25:01 2006
@@ -15,13 +15,11 @@
header TT_MSGID_TRUNC Message-Id =~ /^\s*<?[^<>\s]+\[.\d+$/
describe TT_MSGID_TRUNC Scora: Message-Id ends after left-bracket + digits
-# trying this one out for Alex Broens
-header AXB_FAKETZ Date =~ /[\+-](?!([0-9]{2}00)|0230|0330|0530|0545|0930|1030|1130)[0-9]{4}$/
-score AXB_FAKETZ 2.22
-
-# GrandMasterD's (aka Dallas E.) version (again via Alex)
-header GMD_FAKETZ Date =~ m'[\-\+](200[0-9]|\d\d[2468]0)$'
-score GMD_FAKETZ 1.0
+# testing for Dave Funk (mail of 11/16); compare with AXB_FAKETZ, GMD_FAKETZ.
+# pretty good; less FPs than AXB_FAKETZ, however, same FP level but less 0.01%
+# less hits than GMD_FAKETZ, so that's still better
+header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
+score L_SPAM_TOOL_13 3.0
# broken spamware sending spam with headers in the body
body BROKEN_RATWARE_BOM /^\xEF\xBB\xBFMessage-ID:/
@@ -191,11 +189,6 @@
header CTYPE_001C_A Content-Type =~ /multipart.{0,200}boundary=\"----=_NextPart_000_0001_01C[0-9A-F]{5}\.[0-9A-F]{7}0\"/
header CTYPE_001C_B Content-Type =~ /multipart.{0,200}boundary=\"----=_NextPart_000_0000_01C[0-9A-F]{5}\.[0-9A-F]{7}0\"/
-
-# testing for Dave Funk (mail of 11/16); compare with AXB_FAKETZ, GMD_FAKETZ.
-# pretty good; less FPs than AXB_FAKETZ, however, same FP level but less 0.01%
-# less hits than GMD_FAKETZ, so that's still better
-header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
body JM_ATTACHEMENT /Stocks Quotes in attachement/
Date: Thu Dec 21 05:25:01 2006
New Revision: 489350
URL: http://svn.apache.org/viewvc?view=rev&rev=489350
Log:
consolidate FAKETZ rules down to the top-hitter, L_SPAM_TOOL_13
Modified:
spamassassin/rules/trunk/sandbox/jm/20_basic.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_basic.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic.cf?view=diff&rev=489350&r1=489349&r2=489350
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_basic.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_basic.cf Thu Dec 21 05:25:01 2006
@@ -15,13 +15,11 @@
header TT_MSGID_TRUNC Message-Id =~ /^\s*<?[^<>\s]+\[.\d+$/
describe TT_MSGID_TRUNC Scora: Message-Id ends after left-bracket + digits
-# trying this one out for Alex Broens
-header AXB_FAKETZ Date =~ /[\+-](?!([0-9]{2}00)|0230|0330|0530|0545|0930|1030|1130)[0-9]{4}$/
-score AXB_FAKETZ 2.22
-
-# GrandMasterD's (aka Dallas E.) version (again via Alex)
-header GMD_FAKETZ Date =~ m'[\-\+](200[0-9]|\d\d[2468]0)$'
-score GMD_FAKETZ 1.0
+# testing for Dave Funk (mail of 11/16); compare with AXB_FAKETZ, GMD_FAKETZ.
+# pretty good; less FPs than AXB_FAKETZ, however, same FP level but less 0.01%
+# less hits than GMD_FAKETZ, so that's still better
+header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
+score L_SPAM_TOOL_13 3.0
# broken spamware sending spam with headers in the body
body BROKEN_RATWARE_BOM /^\xEF\xBB\xBFMessage-ID:/
@@ -191,11 +189,6 @@
header CTYPE_001C_A Content-Type =~ /multipart.{0,200}boundary=\"----=_NextPart_000_0001_01C[0-9A-F]{5}\.[0-9A-F]{7}0\"/
header CTYPE_001C_B Content-Type =~ /multipart.{0,200}boundary=\"----=_NextPart_000_0000_01C[0-9A-F]{5}\.[0-9A-F]{7}0\"/
-
-# testing for Dave Funk (mail of 11/16); compare with AXB_FAKETZ, GMD_FAKETZ.
-# pretty good; less FPs than AXB_FAKETZ, however, same FP level but less 0.01%
-# less hits than GMD_FAKETZ, so that's still better
-header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
body JM_ATTACHEMENT /Stocks Quotes in attachement/