fanf at apache
Feb 9, 2010, 4:35 AM
Post #1 of 1
(192 views)
Permalink
|
|
svn commit: r908013 - /spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf
|
|
Author: fanf
Date: Tue Feb 9 12:35:40 2010
New Revision: 908013
URL: http://svn.apache.org/viewvc?rev=908013&view=rev
Log:
Some distinctive From: lines spotted by an eagle-eyed user.
Modified:
spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf
Modified: spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf?rev=908013&r1=908012&r2=908013&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/fanf/10_headers.cf Tue Feb 9 12:35:40 2010
@@ -9,3 +9,15 @@
# Another variant a bit like Sendmail instead of Exim...
#
header RCVD_FORGED_WROTE4 Received =~ /from [0-9.]+ \(HELO \S+[A-Za-z]+\) by (\S+) with \(8[0-9.]+\/8[0-9.]+\) ESMTP [0-9a-z]{14} for \S+@\1;/s
+
+# Following samples spotted by an eagle-eyed user...
+#
+# From: TravelDeals <fanny walt.423usage smaller,@dirtsgrounds.com>
+# From: FreeCellPhone <param orsina.168Hayyan,@foreguide.com>
+# From: PhotographySchool <cathal penha.073posturing,@showersville.com>
+# From: AirlineTickets7 <cali zakuro.586genetics,@miledown.com>
+# From: HealthHappy <janine jamari.070packing,@redmatte.com>
+# From: KitchenCabinets <nelly ben.188sense,@miledown.com>
+#
+header FROM_SPACE_COMMA From =~ /\w+ <\w+ \w+\.\d+[^,@]+,@[a-z0-9.-]+>/i
+describe FROM_SPACE_COMMA Distinctive syntax error in from address
|
