On Thu, 16 Nov 2006, Christian Recktenwald wrote:
> On Wed, Nov 15, 2006 at 11:14:12PM -0600, David B Funk wrote:
> >
> > You're trying too hard.
> > Look at that 'Date:' header, they've got a bogus time-zone value.
> > It's syntactically RFC-2822 correct but nonsense.
> > (One of my favorites was "-0480" ;)
> >
> > Simple rule, so far no FPs:
> >
> > # bogus timzones in date (EG: Date: Wed, 15 Nov 2006 21:29:24 -0180 )
> > header L_SPAM_TOOL_13 Date =~ /\s[+-]\d\d[124-9]\d$/
> > describe L_SPAM_TOOL_13 Bogus time-zone
> > score L_SPAM_TOOL_13 3.1
>
> there are valid TZ values besides that:
>
> NEPAL +0545 (postings seen on this list)
> AUSTRALIA +0845 (ACWS)
> NEW ZEALAND +1245 (CHAST)
> NEW ZEALAND +1345 (CHADT)
>
> Also seen -0000
>
> [Sources: http://de.wikipedia.org/wiki/Zeitzone
> http://de.wikipedia.org/wiki/Zeitverschiebung
> http://www.ptb.de/de/org/4/44/441/zeit.htm
> http://en.wikipedia.org/wiki/Time_zone
> http://en.wikipedia.org/wiki/Time_in_Australia
> http://en.wikipedia.org/wiki/Time_in_New_Zealand
Thanks for the info, the only values that I kew had the form ..[03]0
thus the idea behind the rule. So time to augment it. ;)
Try:
header L_SPAM_TOOL_13 Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d$/
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
