Re: Rule for a link with an numeric IP in body?

2018-10-30 Thread Martin Gregorie
On Tue, 2018-10-30 at 13:56 +, RW wrote: > > I was using 3.4.2 > > > simply appending /alphastring to the > > bare IP caused it to be recognised by a URI rule. I was a little > > surprised as I'd been expecting the httpd:// or https:// prefix > > would > > be required. > A thought: I wonder

Re: Rule for a link with an numeric IP in body?

2018-10-30 Thread RW
On Mon, 29 Oct 2018 20:19:15 + Martin Gregorie wrote: > On Mon, 2018-10-29 at 18:18 +, RW wrote: > > On Mon, 29 Oct 2018 17:26:29 + > > Martin Gregorie wrote: > > > > > > > describe MG_BARE_IP Bare IP in a URI > > > body __MG_BAI0 /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/ > > > uri

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread Martin Gregorie
On Mon, 2018-10-29 at 18:18 +, RW wrote: > On Mon, 29 Oct 2018 17:26:29 + > Martin Gregorie wrote: > > > > describe MG_BARE_IP Bare IP in a URI > > body __MG_BAI0 /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/ > > uri __MG_BAI1 /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\/\w*/ > > meta

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread RW
On Mon, 29 Oct 2018 14:53:51 -0500 (CDT) David B Funk wrote: > On Mon, 29 Oct 2018, Martin Gregorie wrote: > > > Note that technical computing discussions may validly contain bare > > IPs, e.g. 127.0.0.1 is never a spam indication since it is the IP of > > 'localhost' and so its appearance is

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread David B Funk
On Mon, 29 Oct 2018, Martin Gregorie wrote: On Mon, 2018-10-29 at 15:55 +0200, Anders Gustafsson wrote: Is there such a rule already in 3.3.x? I would ideally want a version of that that adds to the spam score if it sees a x.x.x.x/unsubscribe link, possibly translated. [snip..] describe

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread RW
On Mon, 29 Oct 2018 17:26:29 + Martin Gregorie wrote: > describe MG_BARE_IP Bare IP in a URI > body __MG_BAI0 /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/ > uri __MG_BAI1 /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\/\w*/ > meta MG_BARE_IP (__MG_BAI0 || __MG_BAI1) > scoreMG_BARE_IP 0.01 > >

Sv: Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread Anders Gustafsson
Thanks. I hd some issues installing 3.4, libc conflict IIRC so I Installed 3.3, but I have been planning to upgrade. I guess I will jut download the source tarball and build it on the system. FWIW this system is not facing the internet. The MTA deposits incoming main into a folder where sa

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread Martin Gregorie
On Mon, 2018-10-29 at 15:55 +0200, Anders Gustafsson wrote: > Is there such a rule already in 3.3.x? I would ideally want a version > of that that adds to the spam score if it sees a x.x.x.x/unsubscribe > link, possibly translated. > > Asking here as regexps are not really my strong side. >

Re: Rule for a link with an numeric IP in body?

2018-10-29 Thread Bill Cole
On 29 Oct 2018, at 9:55, Anders Gustafsson wrote: Is there such a rule already in 3.3.x? Do not run SpamAssassin 3.3.x. It is not safe. There have been multiple serious security bugs fixed in the 3.4.x series. However, the rules for 3.3.x and 3.4.x are identical. And yes, the rule

Rule for a link with an numeric IP in body?

2018-10-29 Thread Anders Gustafsson
Is there such a rule already in 3.3.x? I would ideally want a version of that that adds to the spam score if it sees a x.x.x.x/unsubscribe link, possibly translated. Asking here as regexps are not really my strong side. -- Anders Gustafsson Engineer, CNI, CNE6, ASE Pedago, The Aaland Islands