Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (nike.apache.org: domain of rwmaillists@googlemail.com
 designates 74.125.78.27 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=date:from:to:subject:message-id:in-reply-to:references:x-mailer
         :mime-version:content-type:content-transfer-encoding;
        b=daU2SU2i/5b8FDRKPzkOiWBKh7apqFSadaHb80FKBLE+9EsC/CldVU6VF68V7YjYHD
         pLn0uaLJpJGWYPjeHDU+Y2e5PTRV+SrVZnL6KVJ3qF0vmW8JsiedSyPkvtf9R5eeml2r
         xiEK1WT3PJ2uPNP8vdNbAZrwby2zWZdMI48sI=
Date: Wed, 26 May 2010 18:39:53 +0100
From: RW <rwmaillists@googlemail.com>
To: users@spamassassin.apache.org
Subject: Re: protocol is caSE sensitive, but should not be
Message-ID: <20100526183953.221b141b@gumby.homeunix.com>
In-Reply-To: <20100525220112.98926nrnr6e1b2x4@mail.junc.org>
References: <20100525142033.18544pkkkgo5qnwx@mail.junc.org>
	<1274812709.4908.38.camel@monkey>
	<20100525220112.98926nrnr6e1b2x4@mail.junc.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, 25 May 2010 22:01:12 +0200
Benny Pedersen <me@junc.org> wrote:

> On Tue 25 May 2010 08:38:29 PM CEST, Karsten Br=E4ckelmann wrote
>=20
> > On Tue, 2010-05-25 at 14:20 +0200, Benny Pedersen wrote:
> >> i see spam mails that using Http://example.com
> >
> > Yes, it is a known issue. Fixed in SVN already, and will be shipped
> > with the next release 3.3.2.
>=20
> super
>=20
> # save rule as 99_local_bugs_331.cf
> # SA =3D 3.3.1
> if (version =3D=3D 3.003001)
>      uri __PROTOCOL_OK m{^https?://\w+}
>      meta PROTOCOL_FIX (!__PROTOCOL_OK)
>      describe PROTOCOL_FIX protocol in uri is not lowercase
>      score PROTOCOL_FIX 5.0
> endif # sa 3.3.1 only i hope
>=20
> above rule is a imidate fix until 3.3.2, works for me

IMO something like this should be added via sa-update and left there as
long as spammers are doing this - not just until 3.3.2 is released.