http://bugzilla.spamassassin.org/show_bug.cgi?id=3114
Summary: OBFUSCATING_COMMENT does not catch tags in commets
Product: Spamassassin
Version: 2.63
Platform: Other
URL: http://www.exit0.us/index.php/WordCommentTagCommentWord
OS/Version: other
Status: NEW
Severity: normal
Priority: P5
Component: Rules
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
The current rule looks for any character but > inside comments. Recently I'm
getting a lot of spam with tags in comments, which seem to be specifically built
to circumvent these spamassassin tests.
The following replacements works better, btu I'm strill strugling a bit with
perl regex, so it could probably be 'worded' more efficiently.
rawbody __TM2_MISC_OBFUSCATING_COMMENT_A /\w(<!--.*-->)+\w/
rawbody __TM2_MISC_OBFUSCATING_COMMENT_B /[^\s>](<!--.*-->)+[^\s<]/
meta TM2_MISC_OBFUSCATING_COMMENT
((__TM2_MISC_OBFUSCATING_COMMENT_A && HTML_MESSAGE) ||
(__TM2_MISC_OBFUSCATING_COMMENT_B && MIME_HTML_ONLY))
describe TM2_MISC_OBFUSCATING_COMMENT HTML comments which obfuscate
text
score TM2_MISC_OBFUSCATING_COMMENT 2.5
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
