-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
btw, would a name prefix sound like a good idea for a convention to indicate "rules that exist to catch never-seen-in-the-wild spammer exploits"? Something like "EVIL" or similar? it'd provide a great way to (a) visually see that those rules not firing is not a problem in hit-frequencies output, and (b) grep them out for the same purpose. - --j. [EMAIL PROTECTED] writes: > Author: quinlan > Date: Sun Nov 21 14:49:14 2004 > New Revision: 106135 > > Modified: > spamassassin/trunk/rules/20_head_tests.cf > spamassassin/trunk/rules/50_scores.cf > Log: > promote T_FRAGMENTED_MESSAGE to FRAGMENTED_MESSAGE > > Modified: spamassassin/trunk/rules/20_head_tests.cf > Url: > http://svn.apache.org/viewcvs/spamassassin/trunk/rules/20_head_tests.cf?view=diff&rev=106135&p1=spamassassin/trunk/rules/20_head_tests.cf&r1=106134&p2=spamassassin/trunk/rules/20_head_tests.cf&r2=106135 > ============================================================================== > --- spamassassin/trunk/rules/20_head_tests.cf (original) > +++ spamassassin/trunk/rules/20_head_tests.cf Sun Nov 21 14:49:14 2004 > @@ -27,6 +27,12 @@ > header HEAD_LONG eval:check_for_long_header() > describe HEAD_LONG Message headers are very long > > +# partial messages; currently-theoretical attack > +# unsurprisingly this hits 0/0 right now. But should we promote it anyway > +# to protect against the possibility? > +header FRAGMENTED_MESSAGE Content-Type =~ /\bmessage\/partial/i > +describe FRAGMENTED_MESSAGE Partial message > + > header MISSING_HB_SEP eval:check_for_missing_hb_separator() > describe MISSING_HB_SEP Missing blank line between message > header and body > > > Modified: spamassassin/trunk/rules/50_scores.cf > Url: > http://svn.apache.org/viewcvs/spamassassin/trunk/rules/50_scores.cf?view=diff&rev=106135&p1=spamassassin/trunk/rules/50_scores.cf&r1=106134&p2=spamassassin/trunk/rules/50_scores.cf&r2=106135 > ============================================================================== > --- spamassassin/trunk/rules/50_scores.cf (original) > +++ spamassassin/trunk/rules/50_scores.cf Sun Nov 21 14:49:14 2004 > @@ -619,10 +619,9 @@ > # GTUBE - Generic Test for Unsolicited Bulk Email > score GTUBE 1000.000 > > -# long header test > +# we dare you > score HEAD_LONG 2.5 > - > -# missing blank line between header and body > +score FRAGMENTED_MESSAGE 2.5 > score MISSING_HB_SEP 2.5 > > # HTML control test -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Exmh CVS iD8DBQFBoWTCMJF5cimLx9ARAh+3AJ9ecYONAcMjCwbioiqQM70kxBV4KwCgh4+A TG2qxiUfpF1l0YAMunQ07xY= =1OZx -----END PGP SIGNATURE-----
