/[Apache-SVN]/spamassassin/trunk/rules/70_testing.cf
ViewVC logotype

Diff of /spamassassin/trunk/rules/70_testing.cf

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

--- spamassassin/trunk/rules/70_testing.cf	2005/05/09 18:14:51	169345
+++ spamassassin/trunk/rules/70_testing.cf	2005/05/09 18:30:12	169346
@@ -26,249 +26,6 @@
 #
 ########################################################################
 
-# header T_FORGED_IN_WHITELIST      eval:check_forged_in_whitelist()
-# describe T_FORGED_IN_WHITELIST    Forged From: is in user's white-list
-# tflags T_FORGED_IN_WHITELIST      userconf
-#
-# header T_FORGED_DEF_WHITELIST     eval:check_forged_in_default_whitelist()
-# describe T_FORGED_DEF_WHITELIST   Forged From: is in default white-list
-# tflags T_FORGED_DEF_WHITELIST     userconf
-
-##########################################################################
-
-# this doesn't hit a lot, but it's a definite obfuscation technique
-uri T_HTTP_BAD_HOST_CHAR	m@^https?://[^/]*[\000-\037\200-\377]@i
-
-########################################################################
-
-# TVD: these should just get turned into obfu/int rules ala above
-# quinlan: yep!
-
-# precursor rules - just here for comparison
-header    T_FUZZY_FOREVER_PRE	Subject =~ /\bf[\W_]?(?:\[\]|\(\)|[o0\*\xD2-\xD6\xF2-\xF6])[\W_]?[r\xAE][\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[vu][\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[r\xAE]\b/i
-header    T_FUZZY_PROVEN_PRE	Subject =~ /\bp[\W_]?[r\xAE][\W_]?(?:\[\]|\(\)|[o0\*\xD2-\xD6\xF2-\xF6])[\W_]?[vu][\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[n\xD1\xF1]\b/i
-header    T_FUZZY_DEBT_PRE	Subject =~ /[d\xD0][\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[b8\xDF][\W_]?t/i
-header    T_FUZZY_VPILL_PRE	Subject =~ /[vu][\W_]?[il1:\|\*\xCC-\xCF\xEC-\xEF][\W_]?[a4\*\@\xC0-\xC5\xAA\xE0-\xE5][\W_]?[g6][\W_]?[r\xAE][\W_]?[a4\*\@\xC0-\xC5\xAA\xE0-\xE5]/i
-header    T_FUZZY_MEDS_PRE	Subject =~ /m(e|3)ds/i
-header    T_FUZZY_TION_PRE	Subject =~ /(?!tion)t[\W_]?[il1:\|\*\xCC-\xCF\xEC-\xEF][\W_]?(?:\[\]|\(\)|[o0\*\xD2-\xD6\xF2-\xF6])[\W_]?[n\xD1\xF1]/i
-header    T_FUZZY_CHEAP_PRE	Subject =~ /(?!\bcheap(er)?)\b[c\xC7\xE7\xA2\xA9][\W_]?h[\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[a4\*\@\xC0-\xC5\xAA\xE0-\xE5][\W_]?p([e3\*\xC8-\xCB\xE8-\xEB][\W_]?[r\xAE])?/i
-header    T_FUZZY_PENIS_PRE	Subject =~ /(?!\bpenis\b)\bp[\W_]?[e3\*\xC8-\xCB\xE8-\xEB][\W_]?[n\xD1\xF1][\W_]?[il1:\|\*\xCC-\xCF\xEC-\xEF][\W_]?[s5\$\xA7]\b/i
-header    T_FUZZY_VPILL_PRE	Subject =~ /[vu][\W_]?[il1:\|\*\xCC-\xCF\xEC-\xEF][\W_]?[a4\*\@\xC0-\xC5\xAA\xE0-\xE5][\W_]?[g6][\W_]?[r\xAE][\W_]?[a4\*\@\xC0-\xC5\xAA\xE0-\xE5]/i
-
-# these rules should probably not be promoted if they overlap a lot with
-# an existing fuzzy body rule since body rules also test the Subject:
-
-header    T_FUZZY_FOREVER	Subject =~ /<F><O><R><E><V><E><R>/i
-header    T_FUZZY_FOREVER_SP	Subject =~ /<inter SP>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W1	Subject =~ /<inter W1>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W2	Subject =~ /<inter W2>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_SP_P2	Subject =~ /<inter SP><post P2>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W1_P2	Subject =~ /<inter W1><post P2>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W2_P2	Subject =~ /<inter W2><post P2>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_SP_P3	Subject =~ /<inter SP><post P3>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W1_P3	Subject =~ /<inter W1><post P3>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-header    T_FUZZY_FOREVER_W2_P3	Subject =~ /<inter W2><post P3>\b<SP>?<F><O><R><E><V><E><R><SP>?\b/i
-
-header    T_FUZZY_PROVEN	Subject =~ /<P><R><O><V><E><N>/i
-header    T_FUZZY_PROVEN_SP	Subject =~ /<inter SP>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W1	Subject =~ /<inter W1>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W2	Subject =~ /<inter W2>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_SP_P2	Subject =~ /<inter SP><post P2>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W1_P2	Subject =~ /<inter W1><post P2>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W2_P2	Subject =~ /<inter W2><post P2>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_SP_P3	Subject =~ /<inter SP><post P3>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W1_P3	Subject =~ /<inter W1><post P3>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-header    T_FUZZY_PROVEN_W2_P3	Subject =~ /<inter W2><post P3>\b<SP>?<P><R><O><V><E><N><SP>?\b/i
-
-header    T_FUZZY_DEBT		Subject =~ /<D><E><B><T>/i
-header    T_FUZZY_DEBT_SP	Subject =~ /<inter SP>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W1	Subject =~ /<inter W1>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W2	Subject =~ /<inter W2>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_SP_P2	Subject =~ /<inter SP><post P2>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W1_P2	Subject =~ /<inter W1><post P2>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W2_P2	Subject =~ /<inter W2><post P2>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_SP_P3	Subject =~ /<inter SP><post P3>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W1_P3	Subject =~ /<inter W1><post P3>\b<SP>?<D><E><B><T><SP>?\b/i
-header    T_FUZZY_DEBT_W2_P3	Subject =~ /<inter W2><post P3>\b<SP>?<D><E><B><T><SP>?\b/i
-# note overlap with SUBJECT_DRUG_GAP_VIA, maybe just nuke that rule
-# if we go with this one
-header    T_FUZZY_VPILL		Subject =~ /(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_SP	Subject =~ /<inter SP>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W1	Subject =~ /<inter W1>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W2	Subject =~ /<inter W2>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_SP_P2	Subject =~ /<inter SP><post P2>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W1_P2	Subject =~ /<inter W1><post P2>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W2_P2	Subject =~ /<inter W2><post P2>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_SP_P3	Subject =~ /<inter SP><post P3>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W1_P3	Subject =~ /<inter W1><post P3>(?!viagra)<V><I><A><G><R><A>/i
-header    T_FUZZY_VPILL_W2_P3	Subject =~ /<inter W2><post P3>(?!viagra)<V><I><A><G><R><A>/i
-
-header    T_FUZZY_MEDS		Subject =~ /<M><E><D><S>/i
-header    T_FUZZY_MEDS_SP	Subject =~ /<inter SP>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W1	Subject =~ /<inter W1>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W2	Subject =~ /<inter W2>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_SP_P2	Subject =~ /<inter SP><post P2>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W1_P2	Subject =~ /<inter W1><post P2>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W2_P2	Subject =~ /<inter W2><post P2>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_SP_P3	Subject =~ /<inter SP><post P3>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W1_P3	Subject =~ /<inter W1><post P3>\b<SP>?<M><E><D><S><SP>?\b/i
-header    T_FUZZY_MEDS_W2_P3	Subject =~ /<inter W2><post P3>\b<SP>?<M><E><D><S><SP>?\b/i
-
-header    T_FUZZY_TION		Subject =~ /(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_SP	Subject =~ /<inter SP>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W1	Subject =~ /<inter W1>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W2	Subject =~ /<inter W2>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_P2	Subject =~ /<post P2>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_P3	Subject =~ /<post P3>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_SP_P2	Subject =~ /<inter SP><post P2>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W1_P2	Subject =~ /<inter W1><post P2>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W2_P2	Subject =~ /<inter W2><post P2>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_SP_P3	Subject =~ /<inter SP><post P3>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W1_P3	Subject =~ /<inter W1><post P3>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_W2_P3	Subject =~ /<inter W2><post P3>(?!tion)<T><I><O><N>/i
-header    T_FUZZY_TION_SP_2	Subject =~ /<inter SP>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W1_2	Subject =~ /<inter W1>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W2_2	Subject =~ /<inter W2>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_P2_2	Subject =~ /<post P2>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_P3_2	Subject =~ /<post P3>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_SP_P2_2	Subject =~ /<inter SP><post P2>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W1_P2_2	Subject =~ /<inter W1><post P2>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W2_P2_2	Subject =~ /<inter W2><post P2>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_SP_P3_2	Subject =~ /<inter SP><post P3>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W1_P3_2	Subject =~ /<inter W1><post P3>(?!tion)<T><I><O><N>\b/i
-header    T_FUZZY_TION_W2_P3_2	Subject =~ /<inter W2><post P3>(?!tion)<T><I><O><N>\b/i
-
-header T_FUZZY_CHEAP		Subject =~ /\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_SP		Subject =~ /<inter SP>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_SP_P2	Subject =~ /<inter SP><post P2>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W1_P2	Subject =~ /<inter W1><post P2>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W1_P3	Subject =~ /<inter W1><post P3>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W2_P2	Subject =~ /<inter W2><post P2>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W2_P3	Subject =~ /<inter W2><post P3>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W3_P2	Subject =~ /<inter W3><post P2>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-header T_FUZZY_CHEAP_W3_P3	Subject =~ /<inter W3><post P3>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
-
-header T_FUZZY_PENIS		Subject =~ /\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_SP		Subject =~ /<inter SP>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_SP_P2	Subject =~ /<inter SP><post P2>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W1_P2	Subject =~ /<inter W1><post P2>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W1_P3	Subject =~ /<inter W1><post P3>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W2_P2	Subject =~ /<inter W2><post P2>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W2_P3	Subject =~ /<inter W2><post P3>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W3_P2	Subject =~ /<inter W3><post P2>\b(?!penis)<P><E><N><I><S>/i
-header T_FUZZY_PENIS_W3_P3	Subject =~ /<inter W3><post P3>\b(?!penis)<P><E><N><I><S>/i
-
-header T_FUZZY_PENIS_2		Subject =~ /\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_SP_2	Subject =~ /<inter SP>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_SP_P2_2	Subject =~ /<inter SP><post P2>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W1_P2_2	Subject =~ /<inter W1><post P2>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W1_P3_2	Subject =~ /<inter W1><post P3>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W2_P2_2	Subject =~ /<inter W2><post P2>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W2_P3_2	Subject =~ /<inter W2><post P3>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W3_P2_2	Subject =~ /<inter W3><post P2>\b(?!penis)<P><E><N><I><S>\b/i
-header T_FUZZY_PENIS_W3_P3_2	Subject =~ /<inter W3><post P3>\b(?!penis)<P><E><N><I><S>\b/i
-
-replace_rules T_FUZZY_FOREVER
-replace_rules T_FUZZY_FOREVER_SP
-replace_rules T_FUZZY_FOREVER_W1
-replace_rules T_FUZZY_FOREVER_W2
-replace_rules T_FUZZY_FOREVER_SP_P2
-replace_rules T_FUZZY_FOREVER_W1_P2
-replace_rules T_FUZZY_FOREVER_W2_P2
-replace_rules T_FUZZY_FOREVER_SP_P3
-replace_rules T_FUZZY_FOREVER_W1_P3
-replace_rules T_FUZZY_FOREVER_W2_P3
-replace_rules T_FUZZY_PROVEN
-replace_rules T_FUZZY_PROVEN_SP
-replace_rules T_FUZZY_PROVEN_W1
-replace_rules T_FUZZY_PROVEN_W2
-replace_rules T_FUZZY_PROVEN_SP_P2
-replace_rules T_FUZZY_PROVEN_W1_P2
-replace_rules T_FUZZY_PROVEN_W2_P2
-replace_rules T_FUZZY_PROVEN_SP_P3
-replace_rules T_FUZZY_PROVEN_W1_P3
-replace_rules T_FUZZY_PROVEN_W2_P3
-replace_rules T_FUZZY_DEBT
-replace_rules T_FUZZY_DEBT_SP
-replace_rules T_FUZZY_DEBT_W1
-replace_rules T_FUZZY_DEBT_W2
-replace_rules T_FUZZY_DEBT_SP_P2
-replace_rules T_FUZZY_DEBT_W1_P2
-replace_rules T_FUZZY_DEBT_W2_P2
-replace_rules T_FUZZY_DEBT_SP_P3
-replace_rules T_FUZZY_DEBT_W1_P3
-replace_rules T_FUZZY_DEBT_W2_P3
-replace_rules T_FUZZY_VPILL
-replace_rules T_FUZZY_VPILL_SP
-replace_rules T_FUZZY_VPILL_W1
-replace_rules T_FUZZY_VPILL_W2
-replace_rules T_FUZZY_VPILL_SP_P2
-replace_rules T_FUZZY_VPILL_W1_P2
-replace_rules T_FUZZY_VPILL_W2_P2
-replace_rules T_FUZZY_VPILL_SP_P3
-replace_rules T_FUZZY_VPILL_W1_P3
-replace_rules T_FUZZY_VPILL_W2_P3
-replace_rules T_FUZZY_MEDS
-replace_rules T_FUZZY_MEDS_SP
-replace_rules T_FUZZY_MEDS_W1
-replace_rules T_FUZZY_MEDS_W2
-replace_rules T_FUZZY_MEDS_SP_P2
-replace_rules T_FUZZY_MEDS_W1_P2
-replace_rules T_FUZZY_MEDS_W2_P2
-replace_rules T_FUZZY_MEDS_SP_P3
-replace_rules T_FUZZY_MEDS_W1_P3
-replace_rules T_FUZZY_MEDS_W2_P3
-replace_rules T_FUZZY_TION
-replace_rules T_FUZZY_TION_SP
-replace_rules T_FUZZY_TION_W1
-replace_rules T_FUZZY_TION_W2
-replace_rules T_FUZZY_TION_P2
-replace_rules T_FUZZY_TION_P3
-replace_rules T_FUZZY_TION_SP_P2
-replace_rules T_FUZZY_TION_W1_P2
-replace_rules T_FUZZY_TION_W2_P2
-replace_rules T_FUZZY_TION_SP_P3
-replace_rules T_FUZZY_TION_W1_P3
-replace_rules T_FUZZY_TION_W2_P3
-replace_rules T_FUZZY_TION_SP_2
-replace_rules T_FUZZY_TION_W1_2
-replace_rules T_FUZZY_TION_W2_2
-replace_rules T_FUZZY_TION_P2_2
-replace_rules T_FUZZY_TION_P3_2
-replace_rules T_FUZZY_TION_SP_P2_2
-replace_rules T_FUZZY_TION_W1_P2_2
-replace_rules T_FUZZY_TION_W2_P2_2
-replace_rules T_FUZZY_TION_SP_P3_2
-replace_rules T_FUZZY_TION_W1_P3_2
-replace_rules T_FUZZY_TION_W2_P3_2
-replace_rules T_FUZZY_CHEAP
-replace_rules T_FUZZY_CHEAP_SP
-replace_rules T_FUZZY_CHEAP_SP_P2
-replace_rules T_FUZZY_CHEAP_W1_P2
-replace_rules T_FUZZY_CHEAP_W1_P3
-replace_rules T_FUZZY_CHEAP_W2_P2
-replace_rules T_FUZZY_CHEAP_W2_P3
-replace_rules T_FUZZY_CHEAP_W3_P2
-replace_rules T_FUZZY_CHEAP_W3_P3
-replace_rules T_FUZZY_PENIS
-replace_rules T_FUZZY_PENIS_SP
-replace_rules T_FUZZY_PENIS_SP_P2
-replace_rules T_FUZZY_PENIS_W1_P2
-replace_rules T_FUZZY_PENIS_W1_P3
-replace_rules T_FUZZY_PENIS_W2_P2
-replace_rules T_FUZZY_PENIS_W2_P3
-replace_rules T_FUZZY_PENIS_W3_P2
-replace_rules T_FUZZY_PENIS_W3_P3
-replace_rules T_FUZZY_PENIS_2
-replace_rules T_FUZZY_PENIS_SP_2
-replace_rules T_FUZZY_PENIS_SP_P2_2
-replace_rules T_FUZZY_PENIS_W1_P2_2
-replace_rules T_FUZZY_PENIS_W1_P3_2
-replace_rules T_FUZZY_PENIS_W2_P2_2
-replace_rules T_FUZZY_PENIS_W2_P3_2
-replace_rules T_FUZZY_PENIS_W3_P2_2
-replace_rules T_FUZZY_PENIS_W3_P3_2
-
 # replacement HELO_DYNAMIC rules which fix the "HELO_DYNAMIC rules firing on authenticated handovers" bug
 header T_HELO_DYNAMIC_IPADDR X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=[a-z]\S*\d+[^\d\s]\d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+[^\]]+ auth= /i
 header T_HELO_DYNAMIC_DHCP X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*(?:cm|catv|docsis|cable|dsl|dhcp|cpe|node)\S*\d+[^\d\s]+\d+[^\]]+ auth= /i
@@ -287,8 +44,3 @@ header T_HELO_DYNAMIC_CHELLO_NL  X-Spam-
 header T_HELO_DYNAMIC_VELOX  X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=[a-z]{2}\d+\.user\.veloxzone\.[^\]]+ auth= /i
 header T_HELO_DYNAMIC_NTL  X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S+\d+-\d+-cust\d+\.[a-z]{4,6}\.broadband\.ntl\.com[^\]]+ auth= /i
 header T_HELO_DYNAMIC_HOME_NL  X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=[a-z]{2}\d+-\S\.\S+\d\.[a-z]{2}\.home\.nl[^]]+ auth= /i
-
-########################################################################
-
-uri T_HEX_ENCODED_HTTP_1	/(?!http)(?:\\x68|h)(?:\\x74|t){2}(?:\\x70|p)/i
-rawbody T_HEX_ENCODED_HTTP_2	/(?!http)(?:\\x68|h)(?:\\x74|t){2}(?:\\x70|p)/i

 

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26