ifplugin Mail::SpamAssassin::Plugin::MIMEEval rawbody __MIME_QPC eval:check_for_mime('mime_qp_count') meta __PDS_QP_64 (__MIME_QPC > 0) && (__MIME_QPC < 64) meta __PDS_QP_128 (__MIME_QPC > 0) && (__MIME_QPC < 128) meta __PDS_QP_512 (__MIME_QPC > 0) && (__MIME_QPC < 512) meta __PDS_QP_1024 (__MIME_QPC > 0) && (__MIME_QPC < 1024) else meta __PDS_QP_64 0 meta __PDS_QP_128 0 meta __PDS_QP_512 0 meta __PDS_QP_1024 0 endif meta __PDS_MSG_512 (__KAM_BODY_LENGTH_LT_512 || __HTML_LENGTH_512) meta __PDS_MSG_1024 (__KAM_BODY_LENGTH_LT_1024 || __PDS_HTML_LENGTH_1024) meta __T_PDS_MSG_512 (__KAM_BODY_LENGTH_LT_512 || __HTML_LENGTH_512 || __PDS_QP_512) meta __T_PDS_MSG_1024 (__KAM_BODY_LENGTH_LT_1024 || __PDS_HTML_LENGTH_1024 || __PDS_QP_1024) ifplugin Mail::SpamAssassin::Plugin::WLBLEval if (version >= 3.004000) # PDS_URISHORTENER list was removed 25.05.2022, common rules/25_url_shortener.cf is now used # __PDS_URISHORTENER left for backwards compatibility meta __PDS_URISHORTENER __URL_SHORTENER meta __PDS_SHORT_URL __SHORT_URL && !__URL_SHORTENER && !ALL_TRUSTED meta DRUGS_ERECTILE_SHORT_SHORTNER __PDS_HTML_LENGTH_1024 && __URL_SHORTENER && DRUGS_ERECTILE describe DRUGS_ERECTILE_SHORT_SHORTNER Short erectile drugs advert with URL_SHORTENER score DRUGS_ERECTILE_SHORT_SHORTNER 1.5 # limit meta XPRIO_URL_SHORTNER __XPRIO_MINFP && __URL_SHORTENER describe XPRIO_URL_SHORTNER X-Priority header and short URL score XPRIO_URL_SHORTNER 1.0 # limit meta SHORT_SHORTNER __PDS_MSG_512 && __URL_SHORTENER && !DRUGS_ERECTILE describe SHORT_SHORTNER Short body with little more than a link to a shortener score SHORT_SHORTNER 2.0 # limit meta PDS_TINYSUBJ_URISHRT __URL_SHORTENER && __SUBJ_SHORT && __PDS_MSG_1024 describe PDS_TINYSUBJ_URISHRT Short subject with URL shortener score PDS_TINYSUBJ_URISHRT 1.5 # limit meta PDS_EMPTYSUBJ_URISHRT __URL_SHORTENER && __SUBJECT_EMPTY && __PDS_MSG_1024 describe PDS_EMPTYSUBJ_URISHRT Empty subject with little more than URI shortener score PDS_EMPTYSUBJ_URISHRT 1.5 # limit meta PDS_SHORTFWD_URISHRT __URL_SHORTENER && (__THREADED || __HAS_IN_REPLY_TO || __HAS_THREAD_INDEX || __URI_MAILTO || __REPTO_QUOTE) && __SUBJ_SHORT && __PDS_HTML_LENGTH_2048 describe PDS_SHORTFWD_URISHRT Threaded email with URI shortener score PDS_SHORTFWD_URISHRT 1.5 # limit reuse PDS_SHORTFWD_URISHRT meta PDS_URISHRT_LOCALPART_SUBJ LOCALPART_IN_SUBJECT && __URL_SHORTENER && __PDS_MSG_1024 describe PDS_URISHRT_LOCALPART_SUBJ Localpart of To in subject score PDS_URISHRT_LOCALPART_SUBJ 1.0 meta __PDS_TO_SUBJ_URISHRT __TO_IN_SUBJ && __URL_SHORTENER && __PDS_MSG_1024 meta PDS_SHORTFWD_URISHRT_FP __URL_SHORTENER && __HS_SUBJ_RE_FW && __PDS_MSG_512 describe PDS_SHORTFWD_URISHRT_FP Apparently a short fwd/re with URI shortener score PDS_SHORTFWD_URISHRT_FP 1.5 # limit meta PDS_SHORTFWD_URISHRT_QP __URL_SHORTENER && __HS_SUBJ_RE_FW && __T_PDS_MSG_512 && !PDS_SHORTFWD_URISHRT_FP describe PDS_SHORTFWD_URISHRT_QP Apparently a short fwd/re with URI shortener score PDS_SHORTFWD_URISHRT_QP 1.5 # limit meta PDS_FREEMAIL_REPLYTO_URISHRT __URL_SHORTENER && __freemail_hdr_replyto && __SUBJ_SHORT && __PDS_HTML_LENGTH_2048 describe PDS_FREEMAIL_REPLYTO_URISHRT Freemail replyto with URI shortener score PDS_FREEMAIL_REPLYTO_URISHRT 1.5 # limit meta PDS_FROM_2_EMAILS_SHRTNER __URL_SHORTENER && (__PDS_FROM_2_EMAILS || __NAME_EMAIL_DIFF) && __BODY_URI_ONLY describe PDS_FROM_2_EMAILS_SHRTNER From 2 emails short email with little more than a URI shortener score PDS_FROM_2_EMAILS_SHRTNER 1.5 # limit meta TONOM_EQ_TOLOC_SHRT_SHRTNER __URL_SHORTENER && __PDS_TONAME_EQ_TOLOCAL && __PDS_MSG_1024 describe TONOM_EQ_TOLOC_SHRT_SHRTNER Short email with shortener and To:name eq To:local score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.5 # limit meta TONOM_EQ_TOLOC_SHRT_PSHRTNER __PDS_SHORT_URL && __PDS_TONAME_EQ_TOLOCAL && __SUBJ_SHORT describe TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener and To:name eq To:local score TONOM_EQ_TOLOC_SHRT_PSHRTNER 1.5 # limit meta PDS_SHORT_SPOOFED_URL __PDS_MSG_1024 && __SPOOFED_URL && !(__VIA_ML || __SENDER_BOT || __YAHOO_BULK || __UNSUB_LINK || __THREADED || __URL_SHORTENER) describe PDS_SHORT_SPOOFED_URL HTML message short and SPOOFED_URL (S_U_FP) score PDS_SHORT_SPOOFED_URL 2.0 meta PDS_NO_FULL_NAME_SPOOFED_URL __PDS_MSG_1024 && __KHOP_NO_FULL_NAME && __SPOOFED_URL && !(__VIA_ML || __SENDER_BOT || __YAHOO_BULK || __UNSUB_LINK || __THREADED || __URL_SHORTENER) describe PDS_NO_FULL_NAME_SPOOFED_URL HTML message short, SPOOFED_URL and KHOP_NO_FULL_NAME score PDS_NO_FULL_NAME_SPOOFED_URL 0.75 # limit endif endif