FM / updates_spamassassin

/var/lib/spamassassin/3.004006/updates_spamassassin_org/

/var/lib/spamassassin/3.004006/updates_spamassassin_org

Name	Size	Mode	Actions
10_default_prefs.cf	8785	0644	edit dl rm
10_hasbase.cf	2452	0644	edit dl rm
20_advance_fee.cf	7612	0644	edit dl rm
20_aux_tlds.cf	46620	0644	edit dl rm
20_body_tests.cf	7180	0644	edit dl rm
20_compensate.cf	1935	0644	edit dl rm
20_dnsbl_tests.cf	10544	0644	edit dl rm
20_drugs.cf	15525	0644	edit dl rm
20_dynrdns.cf	11415	0644	edit dl rm
20_fake_helo_tests.cf	9644	0644	edit dl rm
20_freemail.cf	3060	0644	edit dl rm
20_freemail_domains.cf	41504	0644	edit dl rm
20_freemail_mailcom_domains.cf	4420	0644	edit dl rm
20_head_tests.cf	27583	0644	edit dl rm
20_html_tests.cf	11051	0644	edit dl rm
20_imageinfo.cf	5302	0644	edit dl rm
20_mailspike.cf	2931	0644	edit dl rm
20_meta_tests.cf	3504	0644	edit dl rm
20_net_tests.cf	1880	0644	edit dl rm
20_pdfinfo.cf	15899	0644	edit dl rm
20_phrases.cf	8155	0644	edit dl rm
20_porn.cf	2062	0644	edit dl rm
20_ratware.cf	16871	0644	edit dl rm
20_uri_tests.cf	6039	0644	edit dl rm
20_vbounce.cf	20766	0644	edit dl rm
23_bayes.cf	3009	0644	edit dl rm
25_accessdb.cf	1547	0644	edit dl rm
25_antivirus.cf	1539	0644	edit dl rm
25_arc.cf	1804	0644	edit dl rm
25_asn.cf	1975	0644	edit dl rm
25_dcc.cf	2957	0644	edit dl rm
25_dkim.cf	5241	0644	edit dl rm
25_dmarc.cf	2520	0644	edit dl rm
25_dnswl.cf	3063	0644	edit dl rm
25_pyzor.cf	1522	0644	edit dl rm
25_razor2.cf	3164	0644	edit dl rm
25_replace.cf	26280	0644	edit dl rm
25_spf.cf	4400	0644	edit dl rm
25_textcat.cf	1771	0644	edit dl rm
25_uribl.cf	20003	0644	edit dl rm
25_url_redirectors.cf	11247	0644	edit dl rm
25_url_shortener.cf	11418	0644	edit dl rm
30_text_de.cf	26305	0644	edit dl rm
30_text_fr.cf	19803	0644	edit dl rm
30_text_it.cf	1861	0644	edit dl rm
30_text_nl.cf	20631	0644	edit dl rm
30_text_pl.cf	17255	0644	edit dl rm
30_text_pt_br.cf	42934	0644	edit dl rm
50_scores.cf	38045	0644	edit dl rm
60_adsp_override_dkim.cf	9340	0644	edit dl rm
60_awl.cf	1514	0644	edit dl rm
60_bayes_stopwords.cf	15085	0644	edit dl rm
60_shortcircuit.cf	2417	0644	edit dl rm
60_txrep.cf	1342	0644	edit dl rm
60_welcomelist.cf	11614	0644	edit dl rm
60_welcomelist_auth.cf	76467	0644	edit dl rm
60_welcomelist_dkim.cf	11095	0644	edit dl rm
60_welcomelist_spf.cf	6251	0644	edit dl rm
60_welcomelist_subject.cf	3913	0644	edit dl rm
72_active.cf	564264	0644	edit dl rm
72_scores.cf	30622	0644	edit dl rm
73_sandbox_manual_scores.cf	4365	0644	edit dl rm
languages	133600	0644	edit dl rm
local.cf	3218	0644	edit dl rm
MIRRORED.BY	1125	0644	edit dl rm
regression_tests.cf	2771	0644	edit dl rm
sa-update-pubkey.txt	4777	0644	edit dl rm
STATISTICS-set0-72_scores.cf.txt	1499	0644	edit dl rm
STATISTICS-set1-72_scores.cf.txt	1495	0644	edit dl rm
STATISTICS-set2-72_scores.cf.txt	0	0644	edit dl rm
STATISTICS-set3-72_scores.cf.txt	0	0644	edit dl rm
user_prefs.template	1912	0644	edit dl rm

Edit: /var/lib/spamassassin/3.004006/updates_spamassassin_org/20_freemail.cf (3060B)

# SpamAssassin - FreeMail rules
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at:
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
#
###########################################################################

ifplugin Mail::SpamAssassin::Plugin::FreeMail

body     __freemail_safe_fwd  /---\s?(?:(?:Forwarded|Original) message|Alkuper(?:\xe4|\xc3\xa4)inen viesti)/i
header   __freemail_safe_rls  X-Spam-Relays-External =~ /^[^\]]+ rdns=\S+\.(?:tfbnw\.net|ebay\.com|tieto\.com) /
meta     __freemail_safe      __freemail_safe_fwd || __ML2 || __ML4 || __HAS_X_MAILING_LIST || __HAS_X_MAILMAN_VERSION || __freemail_safe_rls

header   __freemail_replyto  eval:check_freemail_replyto('replyto')
meta     FREEMAIL_REPLYTO  __freemail_replyto && !__freemail_safe
describe FREEMAIL_REPLYTO  Reply-To/From or Reply-To/body contain different freemails
score    FREEMAIL_REPLYTO  2

header   __freemail_reply  eval:check_freemail_replyto('reply')
meta     FREEMAIL_REPLY  __freemail_reply && !__freemail_replyto && !__freemail_safe
describe FREEMAIL_REPLY  From and body contain different freemails
score    FREEMAIL_REPLY  0.5

header   FREEMAIL_FROM  eval:check_freemail_from()
describe FREEMAIL_FROM  Sender email is commonly abused enduser mail provider
score    FREEMAIL_FROM  0.001

header   FREEMAIL_ENVFROM_END_DIGIT  eval:check_freemail_header('EnvelopeFrom', '\d@')
describe FREEMAIL_ENVFROM_END_DIGIT  Envelope-from freemail username ends in digit
score    FREEMAIL_ENVFROM_END_DIGIT  0.1

header   FREEMAIL_REPLYTO_END_DIGIT  eval:check_freemail_header('Reply-To', '\d@')
describe FREEMAIL_REPLYTO_END_DIGIT  Reply-To freemail username ends in digit
score    FREEMAIL_REPLYTO_END_DIGIT  0.1

#header   FREEMAIL_SUBJECT  eval:check_freemail_header('Subject')
#describe FREEMAIL_SUBJECT  Subject contains freemail
#score    FREEMAIL_SUBJECT  0.001

# Idea from John Hardin
header   __freemail_hdr_replyto  eval:check_freemail_header('Reply-To')
meta     FREEMAIL_FORGED_REPLYTO  __freemail_hdr_replyto && !FREEMAIL_FROM && !__freemail_safe
describe FREEMAIL_FORGED_REPLYTO  Freemail in Reply-To, but not From
score    FREEMAIL_FORGED_REPLYTO  0.1

endif

cmd: