jhardin at apache
Oct 12, 2009, 10:37 AM
Post #1 of 1
(156 views)
Permalink
|
|
svn commit: r824436 - /spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf
|
|
Author: jhardin
Date: Mon Oct 12 17:37:18 2009
New Revision: 824436
URL: http://svn.apache.org/viewvc?rev=824436&view=rev
Log:
re-expose FILL_THIS_FORM_LONG, it's got a good S/O by itself
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf?rev=824436&r1=824435&r2=824436&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf Mon Oct 12 17:37:18 2009
@@ -51,9 +51,11 @@
replace_tag FF_ALL (?:<FF_A1>|<FF_A2>|<FF_N1>|<FF_P1>|<FF_M1>|<FF_L1>|<FF_F1>|<FF_F2>|<FF_F3>|<FF_F4>|<FF_F5>)
# 5+ fields (high reliability)
- #describe __FILL_THIS_FORM_LONG Fill in a form, 5+ questions
- body __FILL_THIS_FORM_LONG /(?:<FF_LNNO>?<FF_YOUR><FF_ALL><FF_SUFFIX>(?:<FF_BLANK2>|<ANDOR>)){5,}/i
- replace_rules __FILL_THIS_FORM_LONG
+ # Leave this exposed, it's a fairly good spam sign by itself
+ body FILL_THIS_FORM_LONG /(?:<FF_LNNO>?<FF_YOUR><FF_ALL><FF_SUFFIX>(?:<FF_BLANK2>|<ANDOR>)){5,}/i
+ replace_rules FILL_THIS_FORM_LONG
+ describe FILL_THIS_FORM_LONG Fill in a form with personal information
+ score FILL_THIS_FORM_LONG 1.00
# 5+ fields that body paragraph processing didn't paste together
body __FILL_THIS_FORM_PARTIAL /^\s*<FF_LNNO>?<FF_YOUR>(?:<FF_ALL><ANDOR>?){1,3}<FF_SUFFIX>(?:<FF_BLANK1>|(?:[-=_.,:;*\s]|=20){1,4}$)/im
@@ -64,7 +66,8 @@
tflags __FILL_THIS_FORM_PARTIAL_RAW multiple
# 5+ fields in either format
- meta FILL_THIS_FORM (__FILL_THIS_FORM_LONG || __FILL_THIS_FORM_PARTIAL > 4 || __FILL_THIS_FORM_PARTIAL_RAW > 4)
+ # For easy use in metas
+ meta FILL_THIS_FORM (FILL_THIS_FORM_LONG || __FILL_THIS_FORM_PARTIAL > 4 || __FILL_THIS_FORM_PARTIAL_RAW > 4)
describe FILL_THIS_FORM Fill in a form with personal information
score FILL_THIS_FORM 1.00
|
