spamassassin-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From felic...@apache.org
Subject svn commit: r155107 - in spamassassin/trunk/rules: 20_phrases.cf 20_ratware.cf 70_testing.cf
Date Thu, 24 Feb 2005 00:02:29 GMT
Author: felicity
Date: Wed Feb 23 16:02:28 2005
New Revision: 155107

URL: http://svn.apache.org/viewcvs?view=rev&rev=155107
Log:
more test rule cleanup

Modified:
    spamassassin/trunk/rules/20_phrases.cf
    spamassassin/trunk/rules/20_ratware.cf
    spamassassin/trunk/rules/70_testing.cf

Modified: spamassassin/trunk/rules/20_phrases.cf
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/rules/20_phrases.cf?view=diff&r1=155106&r2=155107
==============================================================================
--- spamassassin/trunk/rules/20_phrases.cf (original)
+++ spamassassin/trunk/rules/20_phrases.cf Wed Feb 23 16:02:28 2005
@@ -350,3 +350,9 @@
 
 body MALE_ENHANCE	/male enhancement/i
 describe MALE_ENHANCE	Message talks about enhancing men
+
+body PRICES_ARE_AFFORDABLE	/\baffordable .{0,10}prices\b/i
+describe PRICES_ARE_AFFORDABLE	Message says that prices aren't too expensive
+
+body REPLICA_ROLEX /\breplica.{1,20}rolex/i
+describe REPLICA_ROLEX	Message talks about a replica watch

Modified: spamassassin/trunk/rules/20_ratware.cf
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/rules/20_ratware.cf?view=diff&r1=155106&r2=155107
==============================================================================
--- spamassassin/trunk/rules/20_ratware.cf (original)
+++ spamassassin/trunk/rules/20_ratware.cf Wed Feb 23 16:02:28 2005
@@ -295,3 +295,7 @@
 
 header RATWARE_BOUND_PIECE	Content-Type =~ /boundary=\"?--Piece/
 describe RATWARE_BOUND_PIECE	Bulk email fingerprint (piece boundary) found
+
+header __RATWARE_NAME_ID	eval:check_ratware_name_id()
+meta RATWARE_NAME_ID		__RATWARE_0_TZ_DATE && __RATWARE_NAME_ID
+describe RATWARE_NAME_ID	Bulk email fingerprint (msgid from) found

Modified: spamassassin/trunk/rules/70_testing.cf
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/rules/70_testing.cf?view=diff&r1=155106&r2=155107
==============================================================================
--- spamassassin/trunk/rules/70_testing.cf (original)
+++ spamassassin/trunk/rules/70_testing.cf Wed Feb 23 16:02:28 2005
@@ -354,25 +354,23 @@
 # ala "... see Dave Price's results for ..."
 body T_INT_PRICES	eval:check_obfu_word('prices')
 
-body T_AFFORD		/\baffordable .{0,10}prices\b/i
-
-header __RATWARE_NAME_ID	eval:check_ratware_name_id()
-meta T_RATWARE_NAME_ID	__RATWARE_0_TZ_DATE && __RATWARE_NAME_ID
-
 # these don't hit a lot, but it's a definite obfuscation technique
-uri T_HTTP_BAD_HOST_CHAR	m@^https?://[^/]*[\000-\040\200-\377]@i
-uri T_HTTP_BAD_HOST_CTRL	m@^https?://[^/]*[\000-\037]@i
+uri T_HTTP_BAD_HOST_CHAR	m@^https?://[^/]*[\000-\037\200-\377]@i
 
 #  0.129   0.1461   0.0000    1.000   0.50    0.01  T_DOLLARS_US
 body T_DOLLARS_US /\d+,\d+US/i
 #  0.157   0.1780   0.0000    1.000   1.00    0.01  T_DOLLARS_US_2
 body T_DOLLARS_US_2 /\s\d[\d.,]+US/
 
-# These don't overlap at all, but happen to catch the same number
-#  0.099   0.1118   0.0000    1.000   0.20    0.01  T_REPLICA_ROLEX
-#  0.099   0.1118   0.0000    1.000   0.20    0.01  T_CHAR_ROLEX
-body T_REPLICA_ROLEX /\breplica.{1,20}rolex/i
+# rule trying to find people punctuating the name "rolex", ala:
+# *Rolex*, !!Rolex!!, etc.
+# 2005/02/23
+#  0.415   0.5278   0.0009    0.998   0.74    0.01  T_CHAR_ROLEX
+# results from last night's run.  FP is "www.rolex.tm" as text in a message.
+# added in a few extra rules to see if we can't reduce the FP to 0.
 body T_CHAR_ROLEX /[^\s\w]rolex/i
+body T_CHAR_ROLEX2 /[^\s\w.]rolex/i
+body T_CHAR_ROLEX3 /[^\s\w."]rolex/i
 
 #  0.091   0.1027   0.0000    1.000   0.10    0.01  T_RATWARE_HASH_3
 header T_RATWARE_HASH_3 Message-ID =~ /^<\d{8}[a-zA-Z0-9]{14}@/
@@ -384,9 +382,6 @@
 header __MIMEOLE_MS X-MIMEOLE =~ /^Produced By Microsoft MimeOLE/
 meta T_RATWARE_MS_HASH_1 __MSGID_MS_HASH && !__MIMEOLE_MS
 meta T_RATWARE_MS_HASH_2 __MSGID_MS_HASH_HOST && !__MIMEOLE_MS
-
-#  0.058   0.0662   0.0000    1.000   0.40    0.01  T_AUTO_MARKET
-body T_AUTO_MARKET /\bAutomated Marketing\b/i
 
 # use ReplaceTags
 ifplugin Mail::SpamAssassin::Plugin::ReplaceTags



Mime
View raw message