https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7888

Loren Wilton <lwil...@earthlink.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |lwil...@earthlink.net

--- Comment #14 from Loren Wilton <lwil...@earthlink.net> ---
>The rule is 
>
>ALL =~
>/^X-(?:[a-z]{2}){1,2}-(?:EBS|(?:Tracking|Subscriber|Delivery|Customer|Campaign)->[DSU]?id):/ism
>
>Which matches the names  of these header:
>
>X-Edjv-Customer-Uid, X-Edjv-Campaign-Uid, X-Edjv-EBS, X-Edjv-Tracking-Did,
>X-Edjv-Subscriber-Uid

Note the match part /(?:[a-z]{2}){1,2}/. This will match 2 or 4 letters
surrounded by dashes. If you have control over the header formatting, Change
Edjv to Edgvi or Edg or Ed1v or something like that, to break the 2 or 4
character pattern. Assuming those header formats are defined in a single place
in the software, they should continue to link in all the places used (unless
you need to fix some scanning patterns in the software also), so should
continue to perform their function, while avoiding this hit due to spammers
using the software.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to