Author: khopesh
Date: Thu May 13 23:05:43 2010
New Revision: 944051
URL: http://svn.apache.org/viewvc?rev=944051&view=rev
Log:
base64 test, might do well in detecting MS document attachments, which might do well to find
ham and viruses
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf?rev=944051&r1=944050&r2=944051&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_experimental.cf Thu May 13 23:05:43
2010
@@ -228,3 +228,9 @@ ifplugin Mail::SpamAssassin::Plugin::DKI
describe DKIM_INVALID DKIM-Signature header exists but is not valid
# masscheck ignores ifplugins and thus always has DKIM_INVALID==__DKIM_EXISTS
endif
+
+ifplugin Mail::SpamAssassin::Plugin::MIMEHeader # {
+ # probably all over the place, indicating only a MS document is attached,
+ # which might hit only ham and virii
+ full __BASE64_MDAW /^(?:MDAw){19}/
+endif # }
|