------------------------------------------------------------------------ r1928011 | jhardin | 2025-08-26 00:57:24 +0000 (Tue, 26 Aug 2025) | 1 line Add some more CN-phishing-JP rules ------------------------------------------------------------------------ r1927963 | gbechis | 2025-08-22 13:45:52 +0000 (Fri, 22 Aug 2025) | 2 lines update url redirector domains ------------------------------------------------------------------------ r1927962 | gbechis | 2025-08-22 13:44:54 +0000 (Fri, 22 Aug 2025) | 2 lines update 2tlds ------------------------------------------------------------------------ r1927961 | gbechis | 2025-08-22 13:41:54 +0000 (Fri, 22 Aug 2025) | 3 lines silence a warning with some Mail::DMARC versions bz #8345 ------------------------------------------------------------------------ r1927844 | jhardin | 2025-08-17 21:13:29 +0000 (Sun, 17 Aug 2025) | 1 line Promote .cn URI spoof to scored, add another .cn phishing rule. ------------------------------------------------------------------------ r1927819 | jhardin | 2025-08-16 19:17:32 +0000 (Sat, 16 Aug 2025) | 1 line Add another chinese phishing rule for eval ------------------------------------------------------------------------ r1927782 | gbechis | 2025-08-13 10:10:59 +0000 (Wed, 13 Aug 2025) | 2 lines Net::LibIDN or Net::LibIDN2 module is needed to parse utf8 domains bz #8344 ------------------------------------------------------------------------ r1927757 | gbechis | 2025-08-11 15:55:18 +0000 (Mon, 11 Aug 2025) | 2 lines SpamAssassin 4.0.2-rc2 has been released ------------------------------------------------------------------------ r1927755 | gbechis | 2025-08-11 15:25:15 +0000 (Mon, 11 Aug 2025) | 1 line preparing to release 4.0.2-rc2 ------------------------------------------------------------------------ r1927754 | gbechis | 2025-08-11 15:24:42 +0000 (Mon, 11 Aug 2025) | 2 lines mention more fixes ------------------------------------------------------------------------ r1927753 | gbechis | 2025-08-11 15:07:41 +0000 (Mon, 11 Aug 2025) | 2 lines add redirectors ------------------------------------------------------------------------ r1927752 | gbechis | 2025-08-11 15:06:45 +0000 (Mon, 11 Aug 2025) | 2 lines add 2tlds ------------------------------------------------------------------------ r1927723 | fkento | 2025-08-10 03:20:15 +0000 (Sun, 10 Aug 2025) | 1 line Bug 8342: Detect invalid address headers ------------------------------------------------------------------------ r1927710 | gbechis | 2025-08-09 08:28:50 +0000 (Sat, 09 Aug 2025) | 2 lines add missing file ------------------------------------------------------------------------ r1927709 | gbechis | 2025-08-09 07:47:18 +0000 (Sat, 09 Aug 2025) | 3 lines do not run dns code if dns is not available bz #8343 ------------------------------------------------------------------------ r1927705 | fkento | 2025-08-08 20:01:04 +0000 (Fri, 08 Aug 2025) | 1 line Bug 8340: DMARC Avoidance ------------------------------------------------------------------------ r1927674 | jhardin | 2025-08-08 01:28:53 +0000 (Fri, 08 Aug 2025) | 1 line Promote well-performing subrule to scored ------------------------------------------------------------------------ r1927615 | gbechis | 2025-08-05 07:17:41 +0000 (Tue, 05 Aug 2025) | 2 lines Metamask rule update ------------------------------------------------------------------------ r1927597 | jhardin | 2025-08-03 19:26:05 +0000 (Sun, 03 Aug 2025) | 1 line Add a couple of subrules for evaluation ------------------------------------------------------------------------ r1927592 | jhardin | 2025-08-03 02:57:07 +0000 (Sun, 03 Aug 2025) | 1 line Rename test rule to subrule for use in metas. FP avoidance tuning. ------------------------------------------------------------------------ r1927567 | jhardin | 2025-08-01 20:36:03 +0000 (Fri, 01 Aug 2025) | 1 line FP avoidance tuning ------------------------------------------------------------------------ r1927559 | jhardin | 2025-08-01 01:53:54 +0000 (Fri, 01 Aug 2025) | 1 line phishing exfil rule for evaluation ------------------------------------------------------------------------ r1927551 | gbechis | 2025-07-31 12:44:11 +0000 (Thu, 31 Jul 2025) | 2 lines add more 2tlds ------------------------------------------------------------------------ r1927550 | gbechis | 2025-07-31 12:43:28 +0000 (Thu, 31 Jul 2025) | 2 lines add a url shortener ------------------------------------------------------------------------ r1927507 | gbechis | 2025-07-28 09:00:54 +0000 (Mon, 28 Jul 2025) | 2 lines add a url shortener ------------------------------------------------------------------------ r1927506 | gbechis | 2025-07-28 08:59:43 +0000 (Mon, 28 Jul 2025) | 2 lines add a couple of 2tlds ------------------------------------------------------------------------ r1927502 | gbechis | 2025-07-28 06:18:42 +0000 (Mon, 28 Jul 2025) | 3 lines fix if ReplaceTags is not loaded spotted by jhardin@ ------------------------------------------------------------------------ r1927486 | jhardin | 2025-07-26 20:26:45 +0000 (Sat, 26 Jul 2025) | 1 line Tune .CN phishing rules ------------------------------------------------------------------------ r1927479 | gbechis | 2025-07-26 09:43:09 +0000 (Sat, 26 Jul 2025) | 3 lines ReplaceTags is needed spotted by jhardin@ ------------------------------------------------------------------------ r1927474 | jhardin | 2025-07-26 02:06:19 +0000 (Sat, 26 Jul 2025) | 1 line Add detection of some recent observed CN-phishing-JP messages ------------------------------------------------------------------------ r1927402 | gbechis | 2025-07-22 16:11:23 +0000 (Tue, 22 Jul 2025) | 2 lines SpamAssassin 4.0.2-rc1 released ------------------------------------------------------------------------ r1927399 | gbechis | 2025-07-22 15:33:21 +0000 (Tue, 22 Jul 2025) | 2 lines preparing to release 4.0.2-rc1 ------------------------------------------------------------------------ r1927355 | gbechis | 2025-07-21 07:16:28 +0000 (Mon, 21 Jul 2025) | 2 lines METAMASK rule update ------------------------------------------------------------------------ r1927316 | gbechis | 2025-07-18 16:12:05 +0000 (Fri, 18 Jul 2025) | 2 lines Clarify a line, remove info about the now unsupported CentOS7 ------------------------------------------------------------------------ r1927315 | gbechis | 2025-07-18 15:45:27 +0000 (Fri, 18 Jul 2025) | 2 lines publish GB_METAMASK rule ------------------------------------------------------------------------ r1927310 | fkento | 2025-07-18 14:30:04 +0000 (Fri, 18 Jul 2025) | 1 line Bug 8338: Round to 4 decimal places to avoid floating point precision issues ------------------------------------------------------------------------ r1927261 | gbechis | 2025-07-16 06:54:18 +0000 (Wed, 16 Jul 2025) | 3 lines html tags attributes should not be parsed as uris, add a regression test for bz #8206 ------------------------------------------------------------------------ r1927237 | gbechis | 2025-07-15 07:16:24 +0000 (Tue, 15 Jul 2025) | 3 lines do not add invalid html attribute to domains list bz #8206 ------------------------------------------------------------------------ r1927091 | gbechis | 2025-07-09 14:05:52 +0000 (Wed, 09 Jul 2025) | 2 lines people.apache.org has been deprecated months ago ------------------------------------------------------------------------ r1927085 | gbechis | 2025-07-09 08:10:58 +0000 (Wed, 09 Jul 2025) | 2 lines man page fixes ------------------------------------------------------------------------ r1927083 | gbechis | 2025-07-09 06:42:40 +0000 (Wed, 09 Jul 2025) | 2 lines improve rule to match more spammy icons in Subject ------------------------------------------------------------------------ r1927076 | gbechis | 2025-07-08 14:27:51 +0000 (Tue, 08 Jul 2025) | 2 lines add a 2tld ------------------------------------------------------------------------ r1927071 | gbechis | 2025-07-08 07:18:06 +0000 (Tue, 08 Jul 2025) | 2 lines match spammy icons on email subjects ------------------------------------------------------------------------ r1927070 | gbechis | 2025-07-08 07:05:39 +0000 (Tue, 08 Jul 2025) | 2 lines improve regexp matches ------------------------------------------------------------------------ r1927064 | gbechis | 2025-07-07 21:25:50 +0000 (Mon, 07 Jul 2025) | 2 lines better regexp to match more http-equiv tags ------------------------------------------------------------------------ r1927063 | gbechis | 2025-07-07 21:21:01 +0000 (Mon, 07 Jul 2025) | 2 lines handle redirectors that are using "http-equiv" html meta tag ------------------------------------------------------------------------ r1927060 | gbechis | 2025-07-07 16:15:18 +0000 (Mon, 07 Jul 2025) | 2 lines add an url shortener ------------------------------------------------------------------------ r1927059 | gbechis | 2025-07-07 16:05:08 +0000 (Mon, 07 Jul 2025) | 2 lines explain why we run at priority -10 in this case ------------------------------------------------------------------------ r1927053 | gbechis | 2025-07-07 14:27:54 +0000 (Mon, 07 Jul 2025) | 2 lines mention latest changes ------------------------------------------------------------------------ r1927052 | gbechis | 2025-07-07 14:22:39 +0000 (Mon, 07 Jul 2025) | 5 lines correctly increase TxRep msgcount for email addresses records add txrep_min_score and txrep_max_score configurations in order to limit TxRep scores. fix #8236 ------------------------------------------------------------------------ r1927051 | gbechis | 2025-07-07 13:36:04 +0000 (Mon, 07 Jul 2025) | 2 lines add more 2tlds ------------------------------------------------------------------------ r1926777 | billcole | 2025-06-27 21:00:37 +0000 (Fri, 27 Jun 2025) | 1 line typo fix ------------------------------------------------------------------------ r1926754 | gbechis | 2025-06-27 14:37:35 +0000 (Fri, 27 Jun 2025) | 2 lines mention 4.0.1 revision number ------------------------------------------------------------------------ r1926753 | billcole | 2025-06-27 14:02:39 +0000 (Fri, 27 Jun 2025) | 1 line syntax error fix ------------------------------------------------------------------------ r1926749 | gbechis | 2025-06-27 07:57:15 +0000 (Fri, 27 Jun 2025) | 3 lines Explicitly handle one-sided SSL shutdown bz #8336 ------------------------------------------------------------------------ r1926708 | billcole | 2025-06-24 23:03:33 +0000 (Tue, 24 Jun 2025) | 1 line add rule descriptions ------------------------------------------------------------------------ r1926698 | gbechis | 2025-06-24 13:16:29 +0000 (Tue, 24 Jun 2025) | 3 lines document WLBLEval methods ------------------------------------------------------------------------ r1926688 | billcole | 2025-06-24 12:49:47 +0000 (Tue, 24 Jun 2025) | 1 line fix ODDDIV8 and add fingerprint ------------------------------------------------------------------------ r1926666 | gbechis | 2025-06-23 16:33:16 +0000 (Mon, 23 Jun 2025) | 2 lines Metamask test rule ------------------------------------------------------------------------ r1926664 | gbechis | 2025-06-23 13:51:52 +0000 (Mon, 23 Jun 2025) | 1 line silence a warning ------------------------------------------------------------------------ r1926658 | gbechis | 2025-06-23 08:34:34 +0000 (Mon, 23 Jun 2025) | 2 lines add another abused redirector ------------------------------------------------------------------------ r1926656 | gbechis | 2025-06-23 08:26:47 +0000 (Mon, 23 Jun 2025) | 2 lines add a redirector ------------------------------------------------------------------------ r1926655 | gbechis | 2025-06-23 08:02:46 +0000 (Mon, 23 Jun 2025) | 2 lines more clear debug message ------------------------------------------------------------------------ r1926586 | gbechis | 2025-06-19 16:16:49 +0000 (Thu, 19 Jun 2025) | 2 lines add more 2tlds ------------------------------------------------------------------------ r1926581 | gbechis | 2025-06-19 10:43:40 +0000 (Thu, 19 Jun 2025) | 5 lines add support for Redis replication, Redis connection parameters are splitted between read_only and read_write. Old syntax is still supported. From Jan Smutný with tweaks by me. bz #8331 ------------------------------------------------------------------------ r1926580 | gbechis | 2025-06-19 10:35:31 +0000 (Thu, 19 Jun 2025) | 3 lines disable Github Actions on Windows with Perl < 5.22 since cpanm(1) cannot download Perl modules because of unsupported TLS certificate chain ------------------------------------------------------------------------ r1926579 | gbechis | 2025-06-19 09:13:20 +0000 (Thu, 19 Jun 2025) | 2 lines MySQL 5.7 is no more supported by Github Actions ------------------------------------------------------------------------ r1926574 | gbechis | 2025-06-19 08:00:35 +0000 (Thu, 19 Jun 2025) | 2 lines partial revert of r1926353, HashBL queries might contain non fqdn strings ------------------------------------------------------------------------ r1926573 | gbechis | 2025-06-19 07:49:45 +0000 (Thu, 19 Jun 2025) | 2 lines partial revert of r1926383, fixes uri.t, URI cleanup done in Redirectors.pm is enough ------------------------------------------------------------------------ r1926522 | gbechis | 2025-06-17 23:19:26 +0000 (Tue, 17 Jun 2025) | 1 line Do not try to build CPAN modules not compatible with Windows, reorder modules in order to have more chances to build them ------------------------------------------------------------------------ r1926521 | gbechis | 2025-06-17 22:54:44 +0000 (Tue, 17 Jun 2025) | 1 line Improve Windows tests ------------------------------------------------------------------------ r1926505 | gbechis | 2025-06-17 15:20:44 +0000 (Tue, 17 Jun 2025) | 6 lines remove Windows 2019 runners, add Windows 2025 Submitted by: Giovanni Github: closes #17 ------------------------------------------------------------------------ r1926500 | gbechis | 2025-06-17 09:02:14 +0000 (Tue, 17 Jun 2025) | 2 lines add regression tests for Redis BayesStore ------------------------------------------------------------------------ r1926393 | gbechis | 2025-06-13 16:21:06 +0000 (Fri, 13 Jun 2025) | 2 lines better query string match ------------------------------------------------------------------------ r1926383 | gbechis | 2025-06-13 08:33:21 +0000 (Fri, 13 Jun 2025) | 4 lines clenaup URLs parameters before running idn_to_ascii, silence some "idn_to_ascii: conversion to ACE failed" warnings spotted by Ruud van den Hout ------------------------------------------------------------------------ r1926361 | gbechis | 2025-06-11 15:42:23 +0000 (Wed, 11 Jun 2025) | 2 lines match on more Google translate abused uris ------------------------------------------------------------------------ r1926359 | gbechis | 2025-06-11 14:52:09 +0000 (Wed, 11 Jun 2025) | 2 lines skip domain if it has two or more consecutive dots, the uri is not linked on MUAs ------------------------------------------------------------------------ r1926358 | gbechis | 2025-06-11 14:09:01 +0000 (Wed, 11 Jun 2025) | 2 lines skip invalid rbl uris ------------------------------------------------------------------------ r1926357 | gbechis | 2025-06-11 14:03:36 +0000 (Wed, 11 Jun 2025) | 2 lines fix rule when replace is enabled, spotted by Ruud van den Hout ------------------------------------------------------------------------ r1926341 | gbechis | 2025-06-10 14:49:23 +0000 (Tue, 10 Jun 2025) | 3 lines document more Mail::SpamAssassin::Util functions ------------------------------------------------------------------------ r1926310 | gbechis | 2025-06-10 08:04:01 +0000 (Tue, 10 Jun 2025) | 2 lines use replace_rules in check_hashbl_bodyre if available ------------------------------------------------------------------------ r1926309 | gbechis | 2025-06-10 08:02:44 +0000 (Tue, 10 Jun 2025) | 2 lines try to replace tags only when needed ------------------------------------------------------------------------ r1926307 | gbechis | 2025-06-10 07:35:09 +0000 (Tue, 10 Jun 2025) | 3 lines use replacetags from HashBL plugin, by enabling the new "replace" option in "check_hashbl_bodyre", tags in the regexp will be replaced with the original char ------------------------------------------------------------------------ r1926183 | billcole | 2025-06-06 15:20:47 +0000 (Fri, 06 Jun 2025) | 1 line typos ------------------------------------------------------------------------ r1926179 | billcole | 2025-06-06 14:03:36 +0000 (Fri, 06 Jun 2025) | 1 line testing a locally useful rule that I actually hate. ------------------------------------------------------------------------ r1926177 | gbechis | 2025-06-06 13:46:31 +0000 (Fri, 06 Jun 2025) | 2 lines generate an index file and use new css ------------------------------------------------------------------------ r1926024 | jhardin | 2025-05-31 22:44:50 +0000 (Sat, 31 May 2025) | 1 line Aviod URI_TRY_3LD FP on Slack invites ------------------------------------------------------------------------ r1925994 | gbechis | 2025-05-30 18:10:33 +0000 (Fri, 30 May 2025) | 2 lines ignore URI* tags if empty ------------------------------------------------------------------------ r1925856 | gbechis | 2025-05-27 07:28:16 +0000 (Tue, 27 May 2025) | 2 lines spam PR, close #16 ------------------------------------------------------------------------ r1925826 | gbechis | 2025-05-26 14:36:20 +0000 (Mon, 26 May 2025) | 2 lines invalid PR, fix #15 ------------------------------------------------------------------------ r1925809 | sidney | 2025-05-26 08:31:56 +0000 (Mon, 26 May 2025) | 1 line Close spam PR. This closes #14 ------------------------------------------------------------------------ r1925754 | gbechis | 2025-05-22 19:39:42 +0000 (Thu, 22 May 2025) | 2 lines set a title to the resulting html page ------------------------------------------------------------------------ r1925753 | gbechis | 2025-05-22 19:25:59 +0000 (Thu, 22 May 2025) | 2 lines use a common css file for docs. ------------------------------------------------------------------------ r1925746 | gbechis | 2025-05-22 16:36:51 +0000 (Thu, 22 May 2025) | 2 lines more debian files ------------------------------------------------------------------------ r1925745 | gbechis | 2025-05-22 16:22:44 +0000 (Thu, 22 May 2025) | 2 lines sync debian deb packaging with latest version ------------------------------------------------------------------------ r1925720 | gbechis | 2025-05-20 14:02:48 +0000 (Tue, 20 May 2025) | 2 lines add an url shortener ------------------------------------------------------------------------ r1925719 | gbechis | 2025-05-20 13:59:47 +0000 (Tue, 20 May 2025) | 2 lines match more URIs ------------------------------------------------------------------------ r1925716 | gbechis | 2025-05-20 10:08:05 +0000 (Tue, 20 May 2025) | 3 lines check that feed is correctly formatted and an uri is available fix from Kirill A. Korinsky, bz #8333 ------------------------------------------------------------------------ r1925708 | fkento | 2025-05-19 22:25:56 +0000 (Mon, 19 May 2025) | 1 line Add common image MIME types ------------------------------------------------------------------------ r1925697 | gbechis | 2025-05-19 15:47:09 +0000 (Mon, 19 May 2025) | 2 lines add a tag for CNAMEs extracted from uris ------------------------------------------------------------------------ r1925696 | gbechis | 2025-05-19 14:26:52 +0000 (Mon, 19 May 2025) | 8 lines Import a slightly modified version of https://svn.apache.org/viewvc/httpd/dev-tools/trunk/github/apply_trunk_pr. sh?view=log to easily close Github PRs display where the commit message file is located Submitted by: Giovanni Github: closes #13 ------------------------------------------------------------------------ r1925562 | gbechis | 2025-05-15 10:37:37 +0000 (Thu, 15 May 2025) | 2 lines add remove-addr-from-blocklist option ------------------------------------------------------------------------ r1925560 | gbechis | 2025-05-15 07:34:42 +0000 (Thu, 15 May 2025) | 2 lines Limit show_mclog to 50 matches to limit resource usage ------------------------------------------------------------------------ r1925549 | gbechis | 2025-05-14 08:40:27 +0000 (Wed, 14 May 2025) | 2 lines improve dbg logging ------------------------------------------------------------------------ r1925547 | gbechis | 2025-05-14 07:55:41 +0000 (Wed, 14 May 2025) | 2 lines improve Bayes 10-fold CV documentation ------------------------------------------------------------------------ r1925541 | gbechis | 2025-05-13 20:57:04 +0000 (Tue, 13 May 2025) | 2 lines add URL redirector rules to default location ------------------------------------------------------------------------ r1925540 | gbechis | 2025-05-13 20:45:16 +0000 (Tue, 13 May 2025) | 2 lines unbreak ------------------------------------------------------------------------ r1925517 | billcole | 2025-05-12 17:57:20 +0000 (Mon, 12 May 2025) | 1 line disable Validity by default, leave rules ------------------------------------------------------------------------ r1925475 | gbechis | 2025-05-09 10:23:14 +0000 (Fri, 09 May 2025) | 2 lines add url redirector rules ------------------------------------------------------------------------ r1925474 | gbechis | 2025-05-09 08:59:08 +0000 (Fri, 09 May 2025) | 2 lines mention Mail::SpamAssassin::GeoDB improvements ------------------------------------------------------------------------ r1925418 | gbechis | 2025-05-05 16:03:20 +0000 (Mon, 05 May 2025) | 2 lines exclude awstrack.me from URI_NOVOWEL due to FPs ------------------------------------------------------------------------ r1925416 | gbechis | 2025-05-05 14:36:44 +0000 (Mon, 05 May 2025) | 2 lines disable GB_FREEM_FROM_NOT_REPLY rule, it's not doing what it should ------------------------------------------------------------------------ r1925415 | gbechis | 2025-05-05 13:11:15 +0000 (Mon, 05 May 2025) | 2 lines ignore 10-fold CV directories ------------------------------------------------------------------------ r1925414 | gbechis | 2025-05-05 13:08:06 +0000 (Mon, 05 May 2025) | 2 lines add sprl.in and regen __URL_SHORTENER rule ------------------------------------------------------------------------ r1925361 | gbechis | 2025-05-02 10:17:58 +0000 (Fri, 02 May 2025) | 2 lines add more 2TLDs ------------------------------------------------------------------------ r1925360 | gbechis | 2025-05-02 10:12:27 +0000 (Fri, 02 May 2025) | 2 lines do not remove anchors on redirectors, they might be needed (at least for bing[.]com redirector) ------------------------------------------------------------------------ r1925337 | gbechis | 2025-04-30 13:15:24 +0000 (Wed, 30 Apr 2025) | 2 lines run at priority -15 so that redirected short uris can also be checked ------------------------------------------------------------------------ r1925332 | gbechis | 2025-04-30 10:29:16 +0000 (Wed, 30 Apr 2025) | 2 lines ignore x-forefront-antispam-report header, few improvements from 10FCV tests ------------------------------------------------------------------------ r1925318 | gbechis | 2025-04-29 06:39:15 +0000 (Tue, 29 Apr 2025) | 2 lines add an url shortener ------------------------------------------------------------------------ r1925125 | gbechis | 2025-04-17 07:16:52 +0000 (Thu, 17 Apr 2025) | 3 lines CommuniGate Pro has been rebranded into CommuniGate SPEC bz #8329 ------------------------------------------------------------------------ r1925100 | gbechis | 2025-04-15 21:47:06 +0000 (Tue, 15 Apr 2025) | 2 lines push to "add_uri_detail_list" CNAME records as well ------------------------------------------------------------------------ r1925097 | gbechis | 2025-04-15 16:25:35 +0000 (Tue, 15 Apr 2025) | 2 lines tweak __GB_FAKE_RF rule ------------------------------------------------------------------------ r1925081 | gbechis | 2025-04-14 13:09:17 +0000 (Mon, 14 Apr 2025) | 2 lines do not run URIDetail checks on uris that are not linkified by MUAs ------------------------------------------------------------------------ r1925020 | billcole | 2025-04-11 14:18:50 +0000 (Fri, 11 Apr 2025) | 1 line really fix rule ------------------------------------------------------------------------ r1925019 | billcole | 2025-04-11 14:12:00 +0000 (Fri, 11 Apr 2025) | 1 line fix rule ------------------------------------------------------------------------ r1925018 | billcole | 2025-04-11 13:57:05 +0000 (Fri, 11 Apr 2025) | 1 line Sniping the e-bike spammers ------------------------------------------------------------------------ r1924977 | fkento | 2025-04-09 21:22:15 +0000 (Wed, 09 Apr 2025) | 8 lines * Remove obsolete tag * Add support for CSS font-size property * Maintain support for deprecated HTML "size" attribute ------------------------------------------------------------------------ r1924963 | gbechis | 2025-04-09 15:37:29 +0000 (Wed, 09 Apr 2025) | 2 lines change issues.apache.org links to bz.apache.org ------------------------------------------------------------------------ r1924894 | gbechis | 2025-04-07 09:37:26 +0000 (Mon, 07 Apr 2025) | 2 lines Wordpress[.]com sends signed spam ------------------------------------------------------------------------ r1924817 | jhardin | 2025-04-05 17:46:26 +0000 (Sat, 05 Apr 2025) | 1 line Add 3TLD cloud.z.com, hosting provider seen in phishing. ------------------------------------------------------------------------ r1924777 | gbechis | 2025-04-04 16:34:11 +0000 (Fri, 04 Apr 2025) | 2 lines Update to use rfc-editor.org URLs ------------------------------------------------------------------------ r1924732 | fkento | 2025-04-01 19:51:38 +0000 (Tue, 01 Apr 2025) | 1 line Handle CSS currentcolor keyword ------------------------------------------------------------------------ r1924718 | billcole | 2025-03-31 21:21:12 +0000 (Mon, 31 Mar 2025) | 1 line Fixed typo BZ#8327 ------------------------------------------------------------------------ r1924703 | fkento | 2025-03-31 02:54:55 +0000 (Mon, 31 Mar 2025) | 1 line Add to elements that change text style ------------------------------------------------------------------------ r1924687 | gbechis | 2025-03-29 08:17:38 +0000 (Sat, 29 Mar 2025) | 2 lines remove debug leftovers ------------------------------------------------------------------------ r1924682 | gbechis | 2025-03-28 14:32:13 +0000 (Fri, 28 Mar 2025) | 2 lines revert r1924602 ------------------------------------------------------------------------ r1924651 | gbechis | 2025-03-27 08:20:35 +0000 (Thu, 27 Mar 2025) | 2 lines fix tests on Windows ------------------------------------------------------------------------ r1924638 | gbechis | 2025-03-26 16:18:09 +0000 (Wed, 26 Mar 2025) | 2 lines add a commonly used redirector parameter ------------------------------------------------------------------------ r1924602 | gbechis | 2025-03-25 21:28:53 +0000 (Tue, 25 Mar 2025) | 3 lines increase msgcount for email entries bz #8236 ------------------------------------------------------------------------ r1924600 | gbechis | 2025-03-25 20:59:14 +0000 (Tue, 25 Mar 2025) | 3 lines honor exemptions to all acls bz #8322 ------------------------------------------------------------------------ r1924527 | gbechis | 2025-03-22 16:32:21 +0000 (Sat, 22 Mar 2025) | 3 lines log message when --virtual-config-dir is set only if the file exists bz #8326 ------------------------------------------------------------------------ r1924526 | gbechis | 2025-03-22 16:14:04 +0000 (Sat, 22 Mar 2025) | 3 lines add support to IP::Geolocation::MMDB to GeoDB module from Andreas Vögele ------------------------------------------------------------------------ r1924503 | gbechis | 2025-03-20 16:42:53 +0000 (Thu, 20 Mar 2025) | 2 lines detect if the PDF file has a form or Javascript code ------------------------------------------------------------------------ r1924502 | gbechis | 2025-03-20 15:45:05 +0000 (Thu, 20 Mar 2025) | 2 lines extract more uris from pdf files ------------------------------------------------------------------------ r1924462 | axb | 2025-03-19 08:06:55 +0000 (Wed, 19 Mar 2025) | 1 line undo test commit ------------------------------------------------------------------------ r1924461 | axb | 2025-03-19 08:06:23 +0000 (Wed, 19 Mar 2025) | 1 line test commit ------------------------------------------------------------------------ r1924429 | gbechis | 2025-03-17 08:31:34 +0000 (Mon, 17 Mar 2025) | 2 lines add more 2TLDs and 3TLDs ------------------------------------------------------------------------ r1924427 | gbechis | 2025-03-17 08:05:05 +0000 (Mon, 17 Mar 2025) | 2 lines sort TLDs ------------------------------------------------------------------------ r1924426 | gbechis | 2025-03-17 07:46:37 +0000 (Mon, 17 Mar 2025) | 3 lines fix GitHub actions on MacOSX from Andreas Vögele, bz #8321 ------------------------------------------------------------------------ r1924425 | gbechis | 2025-03-17 07:33:38 +0000 (Mon, 17 Mar 2025) | 2 lines enable tests on new Perl versions ------------------------------------------------------------------------ r1924406 | gbechis | 2025-03-15 15:22:17 +0000 (Sat, 15 Mar 2025) | 2 lines sort ------------------------------------------------------------------------ r1924389 | sidney | 2025-03-14 09:40:20 +0000 (Fri, 14 Mar 2025) | 1 line Henrik K to PMC emeritus ------------------------------------------------------------------------ r1924326 | jhardin | 2025-03-12 01:12:30 +0000 (Wed, 12 Mar 2025) | 1 line Add 2tld staticrun.app observed in phishing ------------------------------------------------------------------------ r1924320 | gbechis | 2025-03-11 23:12:50 +0000 (Tue, 11 Mar 2025) | 2 lines remove wrong closing tag ------------------------------------------------------------------------ r1924300 | gbechis | 2025-03-11 15:56:23 +0000 (Tue, 11 Mar 2025) | 2 lines add zoom.us 2tld, recently abused in spam campaigns ------------------------------------------------------------------------ r1924284 | gbechis | 2025-03-11 07:48:02 +0000 (Tue, 11 Mar 2025) | 2 lines list supported Perl modules ------------------------------------------------------------------------ r1924218 | gbechis | 2025-03-07 21:45:28 +0000 (Fri, 07 Mar 2025) | 3 lines fix Linux Perl modules install bz #8321 ------------------------------------------------------------------------ r1924187 | billcole | 2025-03-05 18:36:24 +0000 (Wed, 05 Mar 2025) | 1 line testing a new rule ------------------------------------------------------------------------ r1924178 | gbechis | 2025-03-05 07:54:45 +0000 (Wed, 05 Mar 2025) | 2 lines prevent a warning during regression tests ------------------------------------------------------------------------ r1924155 | gbechis | 2025-03-03 21:00:11 +0000 (Mon, 03 Mar 2025) | 2 lines revert r1924152 ------------------------------------------------------------------------ r1924153 | gbechis | 2025-03-03 18:09:30 +0000 (Mon, 03 Mar 2025) | 3 lines use HEAD requests for bit.ly, otherwise url chained are not detected because the shortener service is considering chaining redirectors as harmful ------------------------------------------------------------------------ r1924152 | gbechis | 2025-03-03 18:01:01 +0000 (Mon, 03 Mar 2025) | 2 lines make sure $result->published is defined before using it ------------------------------------------------------------------------ r1924150 | gbechis | 2025-03-03 14:49:11 +0000 (Mon, 03 Mar 2025) | 3 lines search for dbip-asn-lite.mmdb as well from Andreas Vögele, bz #8320 ------------------------------------------------------------------------ r1924149 | gbechis | 2025-03-03 14:44:36 +0000 (Mon, 03 Mar 2025) | 3 lines do not try to access published policies if there is no DMARC policy bz #8319 ------------------------------------------------------------------------ r1924135 | billcole | 2025-03-02 15:24:32 +0000 (Sun, 02 Mar 2025) | 1 line Updating .github files, closing BZ#8316 and BZ#8317, thanks to Andreas Vögele ------------------------------------------------------------------------ r1924131 | sidney | 2025-03-02 06:41:05 +0000 (Sun, 02 Mar 2025) | 1 line Change status Michael Parker to emeritus PMC; Add Kent Oyer to PMC list as should have done earlier ------------------------------------------------------------------------ r1923843 | jhardin | 2025-02-15 17:36:34 +0000 (Sat, 15 Feb 2025) | 1 line Remove actual legit paypal phone number from phish list ------------------------------------------------------------------------ r1923842 | jhardin | 2025-02-15 17:29:47 +0000 (Sat, 15 Feb 2025) | 1 line Add another phone number observed in Paypal phish ------------------------------------------------------------------------ r1923823 | jhardin | 2025-02-15 02:13:47 +0000 (Sat, 15 Feb 2025) | 1 line Add and tune Paypal phishing rules ------------------------------------------------------------------------ r1923814 | billcole | 2025-02-14 16:13:49 +0000 (Fri, 14 Feb 2025) | 1 line Fix bug 8312 ------------------------------------------------------------------------ r1923756 | gbechis | 2025-02-12 11:24:49 +0000 (Wed, 12 Feb 2025) | 2 lines log the DMARC policy if available ------------------------------------------------------------------------ r1923716 | jhardin | 2025-02-11 04:10:55 +0000 (Tue, 11 Feb 2025) | 1 line The paypal phishers are now hitting zellepay too. ------------------------------------------------------------------------ r1923673 | jhardin | 2025-02-08 20:06:52 +0000 (Sat, 08 Feb 2025) | 1 line Paypal phishing rule tuning ------------------------------------------------------------------------ r1923613 | billcole | 2025-02-06 15:36:35 +0000 (Thu, 06 Feb 2025) | 1 line remove Paypal ccTLD domains from welcomelist ------------------------------------------------------------------------ r1923612 | gbechis | 2025-02-06 14:17:47 +0000 (Thu, 06 Feb 2025) | 3 lines add alldomains option to Mail::SpamAssassin::Plugin::HashBL to ignore uridnsbl_skip_domains global option with some rbl ------------------------------------------------------------------------ r1923606 | fkento | 2025-02-06 08:00:51 +0000 (Thu, 06 Feb 2025) | 1 line Test rule for Thread-Index ------------------------------------------------------------------------ r1923599 | fkento | 2025-02-06 04:53:38 +0000 (Thu, 06 Feb 2025) | 1 line Update sandbox rules ------------------------------------------------------------------------ r1923581 | jhardin | 2025-02-05 02:16:52 +0000 (Wed, 05 Feb 2025) | 1 line Add high-confidence paypal scam rule ------------------------------------------------------------------------ r1923576 | gbechis | 2025-02-04 21:59:28 +0000 (Tue, 04 Feb 2025) | 2 lines sync MANIFEST ------------------------------------------------------------------------ r1923575 | gbechis | 2025-02-04 21:55:18 +0000 (Tue, 04 Feb 2025) | 2 lines detect CVE-2025-21298 ------------------------------------------------------------------------ r1923528 | fkento | 2025-02-03 16:59:55 +0000 (Mon, 03 Feb 2025) | 1 line Bug 8310: Added test case ------------------------------------------------------------------------ r1923527 | fkento | 2025-02-03 16:27:59 +0000 (Mon, 03 Feb 2025) | 1 line Bug 8310: UTF-8 encode anchor_text ------------------------------------------------------------------------ r1923431 | gbechis | 2025-01-28 23:11:10 +0000 (Tue, 28 Jan 2025) | 2 lines fix test after Google Amp behavior change ------------------------------------------------------------------------ r1923424 | fkento | 2025-01-28 16:15:27 +0000 (Tue, 28 Jan 2025) | 1 line Bug 8307: Add missing files ------------------------------------------------------------------------ r1923406 | fkento | 2025-01-27 18:24:14 +0000 (Mon, 27 Jan 2025) | 1 line Bug 8307: Add dedicated class for parsing headers ------------------------------------------------------------------------ r1923404 | gbechis | 2025-01-27 17:24:17 +0000 (Mon, 27 Jan 2025) | 2 lines add to freemail and 2tld another abused Google service ------------------------------------------------------------------------ r1923314 | gbechis | 2025-01-22 10:25:58 +0000 (Wed, 22 Jan 2025) | 3 lines add a parameter to regexp sync man page with code ------------------------------------------------------------------------ r1923305 | gbechis | 2025-01-21 21:46:21 +0000 (Tue, 21 Jan 2025) | 1 line typo ------------------------------------------------------------------------ r1923241 | jhardin | 2025-01-19 21:34:12 +0000 (Sun, 19 Jan 2025) | 1 line Set explicit score for RCVD_IN_MSPIKE_H2 ------------------------------------------------------------------------ r1923191 | fkento | 2025-01-17 21:31:54 +0000 (Fri, 17 Jan 2025) | 1 line Treat text/x-amp-html parts as text/html ------------------------------------------------------------------------ r1923179 | fkento | 2025-01-17 00:25:40 +0000 (Fri, 17 Jan 2025) | 1 line Treat .eml files as message/rfc822 ------------------------------------------------------------------------ r1923176 | fkento | 2025-01-16 21:56:50 +0000 (Thu, 16 Jan 2025) | 1 line Use custom resolver, which supports TCP fallback since 4.0.1 ------------------------------------------------------------------------ r1923161 | jhardin | 2025-01-16 04:01:54 +0000 (Thu, 16 Jan 2025) | 1 line FP Avoidance tuning for LONG_IMG_URI, reduce score limit a bit - hits on legit paypal messages? ------------------------------------------------------------------------ r1923158 | fkento | 2025-01-15 22:25:42 +0000 (Wed, 15 Jan 2025) | 1 line Bug 8262: Process ARC independently from DKIM ------------------------------------------------------------------------ r1923136 | fkento | 2025-01-15 00:11:01 +0000 (Wed, 15 Jan 2025) | 1 line Eliminate arc_author_domains because it's the same as dkim_author_domains ------------------------------------------------------------------------ r1923131 | fkento | 2025-01-14 14:26:52 +0000 (Tue, 14 Jan 2025) | 1 line Use underscore in uri_detail ------------------------------------------------------------------------ r1923130 | fkento | 2025-01-14 12:59:50 +0000 (Tue, 14 Jan 2025) | 1 line Allow uri-detail rules in sandbox ------------------------------------------------------------------------ r1923129 | fkento | 2025-01-14 12:57:22 +0000 (Tue, 14 Jan 2025) | 1 line Simplify code ------------------------------------------------------------------------ r1923114 | fkento | 2025-01-14 01:20:38 +0000 (Tue, 14 Jan 2025) | 1 line Fix bug with phishing_uri_noparam ------------------------------------------------------------------------ r1923085 | jhardin | 2025-01-12 01:09:50 +0000 (Sun, 12 Jan 2025) | 1 line Tune "new product" spam rules ------------------------------------------------------------------------ r1923084 | jhardin | 2025-01-12 00:40:47 +0000 (Sun, 12 Jan 2025) | 1 line Reduce score limit of MONEY_FREEMAIL_REPTO due to FP report ------------------------------------------------------------------------ r1923010 | axb | 2025-01-09 07:58:11 +0000 (Thu, 09 Jan 2025) | 1 line removed vodafone.* which is causiing FPs ------------------------------------------------------------------------ r1922893 | jhardin | 2025-01-04 23:48:07 +0000 (Sat, 04 Jan 2025) | 1 line Add 3tld host.secureserver.net, observed in phishing. ------------------------------------------------------------------------ r1922865 | gbechis | 2025-01-03 16:30:32 +0000 (Fri, 03 Jan 2025) | 2 lines set the correct type in set_rendered and skip only text attachments ------------------------------------------------------------------------ r1922850 | hege | 2025-01-03 07:19:48 +0000 (Fri, 03 Jan 2025) | 2 lines Update util_rb_tld lists ------------------------------------------------------------------------ r1922843 | jhardin | 2025-01-03 02:33:32 +0000 (Fri, 03 Jan 2025) | 1 line Add 2tld myshopify.com, used for Shopify merchant websites. Observed in phishing. ------------------------------------------------------------------------ r1922841 | gbechis | 2025-01-02 15:20:49 +0000 (Thu, 02 Jan 2025) | 3 lines skip http checks if domains are not valid bz #8302 ------------------------------------------------------------------------ r1922785 | jhardin | 2024-12-30 21:24:45 +0000 (Mon, 30 Dec 2024) | 1 line Google redirects - new scored meta rules for eval and FP Avoidance tuning ------------------------------------------------------------------------ r1922765 | gbechis | 2024-12-30 10:34:27 +0000 (Mon, 30 Dec 2024) | 2 lines check if uri has parameters only once ------------------------------------------------------------------------ r1922757 | jhardin | 2024-12-29 23:11:17 +0000 (Sun, 29 Dec 2024) | 1 line Improve __GOOG_REDIR and related: subdomain is optional, accept other TLDs (e.g. google.es and google.co.uk) ------------------------------------------------------------------------ r1922749 | gbechis | 2024-12-29 16:33:28 +0000 (Sun, 29 Dec 2024) | 3 lines run idn_to_ascii only on hosts bz #8302 ------------------------------------------------------------------------ r1922748 | gbechis | 2024-12-29 16:32:07 +0000 (Sun, 29 Dec 2024) | 2 lines fix tests ------------------------------------------------------------------------ r1922744 | gbechis | 2024-12-29 15:52:04 +0000 (Sun, 29 Dec 2024) | 3 lines compile_regexp is used in the code bz #8301 ------------------------------------------------------------------------ r1922739 | fkento | 2024-12-29 13:32:54 +0000 (Sun, 29 Dec 2024) | 1 line Bug 8300: Can't call method 'reason' on an undefined value ------------------------------------------------------------------------ r1922722 | jhardin | 2024-12-28 22:38:16 +0000 (Sat, 28 Dec 2024) | 1 line Add domain observed in phishing ------------------------------------------------------------------------ r1922611 | gbechis | 2024-12-20 13:42:27 +0000 (Fri, 20 Dec 2024) | 3 lines add support for Phishing Database feed bz #8299 ------------------------------------------------------------------------ r1922594 | gbechis | 2024-12-19 07:52:16 +0000 (Thu, 19 Dec 2024) | 2 lines comment rules that breaks the build ------------------------------------------------------------------------ r1922593 | fkento | 2024-12-19 04:23:11 +0000 (Thu, 19 Dec 2024) | 1 line Fix broken regex ------------------------------------------------------------------------ r1922589 | jhardin | 2024-12-19 02:31:29 +0000 (Thu, 19 Dec 2024) | 1 line Add some glitch.me phishing rules ------------------------------------------------------------------------ r1922570 | jhardin | 2024-12-18 01:29:06 +0000 (Wed, 18 Dec 2024) | 1 line Set score limit ------------------------------------------------------------------------ r1922544 | fkento | 2024-12-16 23:03:42 +0000 (Mon, 16 Dec 2024) | 1 line Add some rules for testing ------------------------------------------------------------------------ r1922482 | jhardin | 2024-12-14 01:25:35 +0000 (Sat, 14 Dec 2024) | 1 line Freshen "Please purchase our new product!" rules ------------------------------------------------------------------------ r1922480 | jhardin | 2024-12-14 00:40:02 +0000 (Sat, 14 Dec 2024) | 1 line Add .xyz to suspicious TLDs. Broaden SEO match text a bit. Thanks to Kirill A. Korinsky ------------------------------------------------------------------------ r1922479 | jhardin | 2024-12-14 00:33:09 +0000 (Sat, 14 Dec 2024) | 1 line Another LOTSA_MONEY tweak ------------------------------------------------------------------------ r1922478 | jhardin | 2024-12-14 00:25:35 +0000 (Sat, 14 Dec 2024) | 1 line LOTSA_MONEY recognize Unicode Euro symbol ------------------------------------------------------------------------ r1922455 | gbechis | 2024-12-12 14:13:15 +0000 (Thu, 12 Dec 2024) | 3 lines add kakao[.]com to freemail providers bz #8291 ------------------------------------------------------------------------ r1922428 | gbechis | 2024-12-11 10:11:06 +0000 (Wed, 11 Dec 2024) | 2 lines check for Google Amp uris ------------------------------------------------------------------------ r1922394 | gbechis | 2024-12-09 09:22:46 +0000 (Mon, 09 Dec 2024) | 2 lines add version features ------------------------------------------------------------------------ r1922393 | gbechis | 2024-12-09 09:19:29 +0000 (Mon, 09 Dec 2024) | 2 lines add pdf_uri_count sub ------------------------------------------------------------------------ r1922392 | gbechis | 2024-12-09 08:54:50 +0000 (Mon, 09 Dec 2024) | 1 line typo ------------------------------------------------------------------------ r1922353 | jhardin | 2024-12-06 20:37:12 +0000 (Fri, 06 Dec 2024) | 1 line Try to detect recent PayPal fraud spams. The fraudsters are using the legit PP infra so FP risk is fairly high. ------------------------------------------------------------------------ r1922325 | gbechis | 2024-12-05 16:57:40 +0000 (Thu, 05 Dec 2024) | 2 lines add a "connection timeout" debug line ------------------------------------------------------------------------ r1922324 | gbechis | 2024-12-05 16:05:07 +0000 (Thu, 05 Dec 2024) | 2 lines fix regression tests ------------------------------------------------------------------------ r1922314 | gbechis | 2024-12-05 09:11:16 +0000 (Thu, 05 Dec 2024) | 2 lines match on hostname to prevent FPs on "www" redirections ------------------------------------------------------------------------ r1922301 | fkento | 2024-12-04 16:02:20 +0000 (Wed, 04 Dec 2024) | 1 line Allow negative match to hit when no data ------------------------------------------------------------------------ r1922291 | gbechis | 2024-12-04 08:50:18 +0000 (Wed, 04 Dec 2024) | 2 lines add version features ------------------------------------------------------------------------ r1922290 | gbechis | 2024-12-04 08:41:46 +0000 (Wed, 04 Dec 2024) | 2 lines Check for chained redirectors that uses the same domain ------------------------------------------------------------------------ r1922277 | gbechis | 2024-12-03 09:32:11 +0000 (Tue, 03 Dec 2024) | 2 lines match 3tld domains as well ------------------------------------------------------------------------ r1922259 | gbechis | 2024-12-02 11:44:49 +0000 (Mon, 02 Dec 2024) | 3 lines fix phishing_uri_noparam option bz #8292 ------------------------------------------------------------------------ r1922258 | gbechis | 2024-12-02 10:39:40 +0000 (Mon, 02 Dec 2024) | 3 lines always honor uridnsbl_skip_domains bz #8282 ------------------------------------------------------------------------ r1922194 | axb | 2024-11-28 14:16:41 +0000 (Thu, 28 Nov 2024) | 1 line test - ignore ------------------------------------------------------------------------ r1922190 | gbechis | 2024-11-28 10:54:25 +0000 (Thu, 28 Nov 2024) | 2 lines add extracted uris to uri_detail_list ------------------------------------------------------------------------ r1922189 | gbechis | 2024-11-28 10:18:19 +0000 (Thu, 28 Nov 2024) | 2 lines avoid a warning ------------------------------------------------------------------------ r1922104 | gbechis | 2024-11-26 07:23:56 +0000 (Tue, 26 Nov 2024) | 2 lines add a rule for evaluation to catch fake Microsoft signed emails ------------------------------------------------------------------------ r1922029 | gbechis | 2024-11-22 17:23:09 +0000 (Fri, 22 Nov 2024) | 3 lines remove a check no more useful spotted by fkento@, thanks ------------------------------------------------------------------------ r1922028 | gbechis | 2024-11-22 16:36:13 +0000 (Fri, 22 Nov 2024) | 2 lines always convert domains to ASCII ------------------------------------------------------------------------ r1922027 | gbechis | 2024-11-22 15:59:18 +0000 (Fri, 22 Nov 2024) | 3 lines always use the correct http method prefer configured redirectors when searching for urls ------------------------------------------------------------------------ r1922021 | gbechis | 2024-11-22 14:07:25 +0000 (Fri, 22 Nov 2024) | 2 lines simplify code, spotted by hege@, thanks ------------------------------------------------------------------------ r1922016 | gbechis | 2024-11-22 11:45:36 +0000 (Fri, 22 Nov 2024) | 2 lines Skip text attachments that are not considered part of the email body ------------------------------------------------------------------------ r1921873 | gbechis | 2024-11-13 08:29:45 +0000 (Wed, 13 Nov 2024) | 2 lines catch more Google redirectors ------------------------------------------------------------------------ r1921821 | jhardin | 2024-11-08 17:14:45 +0000 (Fri, 08 Nov 2024) | 1 line Add new redirector observed in IPFS phishing; tweak IPFS rules to better match similar redirector patterns. ------------------------------------------------------------------------ r1921809 | gbechis | 2024-11-07 13:55:24 +0000 (Thu, 07 Nov 2024) | 2 lines Paypal[.]com is sending fake invoices spam ------------------------------------------------------------------------ r1921799 | fkento | 2024-11-06 17:44:42 +0000 (Wed, 06 Nov 2024) | 1 line Bug 8288: canonicalize URIs with more than two slashes after scheme ------------------------------------------------------------------------ r1921798 | jhardin | 2024-11-06 15:44:55 +0000 (Wed, 06 Nov 2024) | 1 line Bug 8288 exploit rule appears to perform well; FP tune, score and publish. ------------------------------------------------------------------------ r1921797 | jhardin | 2024-11-06 15:36:57 +0000 (Wed, 06 Nov 2024) | 1 line Add 2TLD glitch.me, free hosting observed in phishing ------------------------------------------------------------------------ r1921791 | jhardin | 2024-11-06 01:59:41 +0000 (Wed, 06 Nov 2024) | 1 line Add rule to detect attempt to exploit Bug 8288 ------------------------------------------------------------------------ r1921782 | fkento | 2024-11-05 16:13:46 +0000 (Tue, 05 Nov 2024) | 1 line Bug 8286: TextCat: Ignore invisible text ------------------------------------------------------------------------ r1921763 | billcole | 2024-11-03 22:16:34 +0000 (Sun, 03 Nov 2024) | 1 line fixing a production warning about how CGI::param is called ------------------------------------------------------------------------ r1921759 | jhardin | 2024-11-03 18:20:53 +0000 (Sun, 03 Nov 2024) | 1 line Add 3tld hosted.phplist.com ------------------------------------------------------------------------ r1921745 | fkento | 2024-11-02 01:16:47 +0000 (Sat, 02 Nov 2024) | 1 line Bug 8285: Improve CSS Color Handling ------------------------------------------------------------------------ r1921709 | gbechis | 2024-10-31 08:25:07 +0000 (Thu, 31 Oct 2024) | 2 lines Docusign generates signed spam ------------------------------------------------------------------------ r1921622 | gbechis | 2024-10-28 16:39:35 +0000 (Mon, 28 Oct 2024) | 2 lines remove trailing slash from the shortened uri ------------------------------------------------------------------------ r1921621 | gbechis | 2024-10-28 16:12:55 +0000 (Mon, 28 Oct 2024) | 2 lines match more uris ------------------------------------------------------------------------ r1921615 | gbechis | 2024-10-28 08:16:13 +0000 (Mon, 28 Oct 2024) | 2 lines sync ------------------------------------------------------------------------ r1921614 | gbechis | 2024-10-28 08:07:19 +0000 (Mon, 28 Oct 2024) | 2 lines include what we use ------------------------------------------------------------------------ r1921527 | gbechis | 2024-10-24 07:21:10 +0000 (Thu, 24 Oct 2024) | 4 lines make it possible to set a per-shortener user-agent in order to catch more shortened uris. bz #8110 ------------------------------------------------------------------------ r1921516 | jhardin | 2024-10-24 01:05:51 +0000 (Thu, 24 Oct 2024) | 1 line Add another Interplanetary Filesystem domain observed in phishing. Add a meta for scoring on any such domain. ------------------------------------------------------------------------ r1921502 | gbechis | 2024-10-23 06:43:05 +0000 (Wed, 23 Oct 2024) | 2 lines remove non existent file ------------------------------------------------------------------------ r1921469 | fkento | 2024-10-21 20:43:18 +0000 (Mon, 21 Oct 2024) | 1 line Bug 8283: Negating matches in URIDetail.pm ------------------------------------------------------------------------ r1921386 | gbechis | 2024-10-17 15:22:10 +0000 (Thu, 17 Oct 2024) | 2 lines improve redirectors detection, exit early on invalid uris ------------------------------------------------------------------------ r1921385 | gbechis | 2024-10-17 14:47:10 +0000 (Thu, 17 Oct 2024) | 2 lines another Blogspot domain ------------------------------------------------------------------------ r1921384 | jhardin | 2024-10-17 14:34:08 +0000 (Thu, 17 Oct 2024) | 1 line Add an Interplanetary File System 3TLD, seen in phishing. ------------------------------------------------------------------------ r1921377 | gbechis | 2024-10-17 08:39:39 +0000 (Thu, 17 Oct 2024) | 2 lines more Blogspot domains ------------------------------------------------------------------------ r1921376 | gbechis | 2024-10-17 08:36:16 +0000 (Thu, 17 Oct 2024) | 2 lines add missing Blogspot tlds ------------------------------------------------------------------------ r1921362 | jhardin | 2024-10-16 15:03:03 +0000 (Wed, 16 Oct 2024) | 1 line Add 3tld for spammed URIs like https://1319021590-hk.callback.cloudses.com/api/... ------------------------------------------------------------------------ r1921292 | axb | 2024-10-13 14:17:49 +0000 (Sun, 13 Oct 2024) | 1 line removed test string ------------------------------------------------------------------------ r1921233 | gbechis | 2024-10-10 09:26:49 +0000 (Thu, 10 Oct 2024) | 2 lines add missing file to MANIFEST ------------------------------------------------------------------------ r1921232 | gbechis | 2024-10-10 09:13:51 +0000 (Thu, 10 Oct 2024) | 2 lines sync MANIFEST and install v402.pre file ------------------------------------------------------------------------ r1921215 | gbechis | 2024-10-09 17:48:21 +0000 (Wed, 09 Oct 2024) | 2 lines cache all uris ------------------------------------------------------------------------ r1921213 | gbechis | 2024-10-09 17:17:03 +0000 (Wed, 09 Oct 2024) | 2 lines match redirectors on all subdomains, skip wrong uris ------------------------------------------------------------------------ r1921173 | gbechis | 2024-10-08 06:50:37 +0000 (Tue, 08 Oct 2024) | 2 lines add mail.uk domains ------------------------------------------------------------------------ r1921137 | jhardin | 2024-10-05 17:00:53 +0000 (Sat, 05 Oct 2024) | 1 line Revert revision#1920889 for bug#8193 - DSWL rules restored, at least temporarily. ------------------------------------------------------------------------ r1921136 | jhardin | 2024-10-05 16:53:42 +0000 (Sat, 05 Oct 2024) | 1 line Expose UNICODE_RTL_OBFU for scoring. Add a rule for a form-hosting website observed in phishing. ------------------------------------------------------------------------ r1921124 | fkento | 2024-10-05 02:57:17 +0000 (Sat, 05 Oct 2024) | 1 line Bug 8268 - Trim whitespace from anchor text ------------------------------------------------------------------------ r1921091 | jhardin | 2024-10-03 03:14:12 +0000 (Thu, 03 Oct 2024) | 1 line Add .webp file extension to some image rules that were missing it. ------------------------------------------------------------------------ r1921088 | jhardin | 2024-10-03 02:16:24 +0000 (Thu, 03 Oct 2024) | 1 line LONG_HEX_URI FP avoidance ------------------------------------------------------------------------ r1921084 | gbechis | 2024-10-02 13:59:13 +0000 (Wed, 02 Oct 2024) | 3 lines do not welcomelist by default support@, sales@, info@, helpdesk@, contact@ and kontakt@ Freemail addresses ------------------------------------------------------------------------ r1921083 | gbechis | 2024-10-02 13:49:29 +0000 (Wed, 02 Oct 2024) | 1 line typo ------------------------------------------------------------------------ r1921072 | gbechis | 2024-10-01 14:40:44 +0000 (Tue, 01 Oct 2024) | 2 lines mention new plugin ------------------------------------------------------------------------ r1921071 | gbechis | 2024-10-01 14:36:25 +0000 (Tue, 01 Oct 2024) | 7 lines add Mail::SpamAssassin::Plugin::Redirectors plugin This plugin looks for URLs redirected by a list of URL redirector services. Upon finding a matching URL, plugin will send a HTTP request to the redirector service and retrieve the Location-header which points to the actual redirected URL. It then adds this URL to the list of URIs extracted by SpamAssassin which can then be accessed by uri rules and plugins such as URIDNSBL. ------------------------------------------------------------------------ r1921070 | gbechis | 2024-10-01 14:26:15 +0000 (Tue, 01 Oct 2024) | 2 lines mention latest changes ------------------------------------------------------------------------ r1921069 | gbechis | 2024-10-01 14:24:51 +0000 (Tue, 01 Oct 2024) | 4 lines do not ignore support@, sales@, info@, helpdesk@, contact@ and kontakt@ email addresses by default bz #8209 ------------------------------------------------------------------------ r1921008 | sidney | 2024-09-28 15:46:16 +0000 (Sat, 28 Sep 2024) | 1 line Bug 8193 - Re-enable DNSWL rules in rules update ------------------------------------------------------------------------ r1920994 | gbechis | 2024-09-27 15:34:51 +0000 (Fri, 27 Sep 2024) | 2 lines Hubspotstarter generates signed spam ------------------------------------------------------------------------ r1920991 | jhardin | 2024-09-27 14:57:31 +0000 (Fri, 27 Sep 2024) | 1 line Tune phishing OBFU rules. Add another IPFS provider I missed before. ------------------------------------------------------------------------ r1920966 | jhardin | 2024-09-27 01:04:36 +0000 (Fri, 27 Sep 2024) | 1 line Tune IPFS rules and add new rule for eval based on observed phish. ------------------------------------------------------------------------ r1920889 | jhardin | 2024-09-25 01:03:11 +0000 (Wed, 25 Sep 2024) | 1 line bug 8193 - fix fallout from removing default DNSWL rules ------------------------------------------------------------------------ r1920888 | jhardin | 2024-09-25 00:56:52 +0000 (Wed, 25 Sep 2024) | 1 line Clean up fallout from DNSWL rules no longer being installed by default - BUG#8193 ------------------------------------------------------------------------ r1920886 | sidney | 2024-09-24 21:20:56 +0000 (Tue, 24 Sep 2024) | 1 line bug 8193 - Delete dnswl.org rules for sending wrong results for overuse ------------------------------------------------------------------------ r1920882 | billcole | 2024-09-24 15:42:00 +0000 (Tue, 24 Sep 2024) | 1 line corrected error in comment ------------------------------------------------------------------------ r1920862 | billcole | 2024-09-23 16:35:50 +0000 (Mon, 23 Sep 2024) | 1 line Disable DNSWL rules as they had been doumented to have been ------------------------------------------------------------------------ r1920734 | gbechis | 2024-09-17 08:38:24 +0000 (Tue, 17 Sep 2024) | 2 lines publish correct IADB rules ------------------------------------------------------------------------ r1920709 | gbechis | 2024-09-16 09:28:40 +0000 (Mon, 16 Sep 2024) | 2 lines remove inactive endpoints, deprecate some rules and add new ones ------------------------------------------------------------------------ r1920708 | gbechis | 2024-09-16 08:50:18 +0000 (Mon, 16 Sep 2024) | 2 lines add more info to man page about hashbl_email_welcomelist defaults ------------------------------------------------------------------------ r1920620 | hege | 2024-09-14 09:47:38 +0000 (Sat, 14 Sep 2024) | 2 lines Fix URIBL_RHS test, broken since Revision 1917016 ------------------------------------------------------------------------ r1920539 | gbechis | 2024-09-10 09:15:27 +0000 (Tue, 10 Sep 2024) | 2 lines decode %25 into % before doing the actual decoding ------------------------------------------------------------------------ r1920446 | jhardin | 2024-09-04 00:05:34 +0000 (Wed, 04 Sep 2024) | 1 line Observed IPFS phishing via dweb.link, add rule. Add scored long-from-domain rules. ------------------------------------------------------------------------ r1920434 | gbechis | 2024-09-03 14:10:07 +0000 (Tue, 03 Sep 2024) | 2 lines prevent a "Use of each() on hash after insertion without resetting hash iterator" warning ------------------------------------------------------------------------ r1920374 | jhardin | 2024-09-01 22:22:54 +0000 (Sun, 01 Sep 2024) | 1 line Some FROM-length subrules for evaluation ------------------------------------------------------------------------ r1920260 | jhardin | 2024-08-29 01:59:19 +0000 (Thu, 29 Aug 2024) | 1 line Add v.gd shortener, observed ------------------------------------------------------------------------ r1920258 | jhardin | 2024-08-28 22:39:09 +0000 (Wed, 28 Aug 2024) | 1 line FP avoidance tuning ------------------------------------------------------------------------ r1920235 | jhardin | 2024-08-27 19:10:34 +0000 (Tue, 27 Aug 2024) | 1 line Add another Interplanetary Filesystem provider being used to host phishing content ------------------------------------------------------------------------ r1920234 | jhardin | 2024-08-27 19:10:05 +0000 (Tue, 27 Aug 2024) | 1 line Recognize space-obfuscated "USD" and "GBP" ------------------------------------------------------------------------ r1920143 | jhardin | 2024-08-23 01:10:15 +0000 (Fri, 23 Aug 2024) | 1 line FP avoidance ------------------------------------------------------------------------ r1920010 | jhardin | 2024-08-19 03:39:13 +0000 (Mon, 19 Aug 2024) | 1 line Add fuzzy rules for current high-profile political names ------------------------------------------------------------------------ r1919931 | billcole | 2024-08-16 15:39:01 +0000 (Fri, 16 Aug 2024) | 1 line Test rule for common false plea ------------------------------------------------------------------------ r1919859 | gbechis | 2024-08-13 13:50:28 +0000 (Tue, 13 Aug 2024) | 2 lines sync MANIFEST ------------------------------------------------------------------------ r1919846 | sidney | 2024-08-13 07:29:31 +0000 (Tue, 13 Aug 2024) | 1 line bug 8251 - make Perl::Critic an optional module for testing ------------------------------------------------------------------------ r1919839 | jhardin | 2024-08-13 01:37:07 +0000 (Tue, 13 Aug 2024) | 1 line Add a couple of image hosting sites observed in spam. ------------------------------------------------------------------------ r1919812 | sidney | 2024-08-11 13:53:46 +0000 (Sun, 11 Aug 2024) | 1 line bug 8272 - handle url-encoded utf-8 chars in URIs in HTML ------------------------------------------------------------------------ r1919710 | sidney | 2024-08-07 05:28:56 +0000 (Wed, 07 Aug 2024) | 1 line bug 8272 - sometimes allow decoding as utf-8 with errors, strip user:pass@ in IDN decoding of URL ------------------------------------------------------------------------ r1919708 | sidney | 2024-08-07 03:25:01 +0000 (Wed, 07 Aug 2024) | 1 line bug 8274 in utf-16 header base64 being returned when encoded chars expected ------------------------------------------------------------------------ r1919612 | gbechis | 2024-08-01 07:13:59 +0000 (Thu, 01 Aug 2024) | 2 lines add *.rr.com to Freemail providers ------------------------------------------------------------------------ r1919603 | gbechis | 2024-07-31 13:00:38 +0000 (Wed, 31 Jul 2024) | 3 lines update Bayes Russian stopwords bz #8271 ------------------------------------------------------------------------ r1919588 | jhardin | 2024-07-30 01:30:36 +0000 (Tue, 30 Jul 2024) | 1 line Tune generic google storage rule overlap exclusions ------------------------------------------------------------------------ r1919584 | billcole | 2024-07-29 12:49:25 +0000 (Mon, 29 Jul 2024) | 1 line wrap URIBL_MULTI_SURBL_HEADERS definition in conditional to maintain backwared compatibility ------------------------------------------------------------------------ r1919583 | billcole | 2024-07-29 12:47:12 +0000 (Mon, 29 Jul 2024) | 1 line LinkedIn scraping rule ------------------------------------------------------------------------ r1919574 | jhardin | 2024-07-29 03:25:11 +0000 (Mon, 29 Jul 2024) | 1 line FONT_INVNS FP tuning. Google storage also uses subdomains. ------------------------------------------------------------------------ r1919556 | billcole | 2024-07-27 20:48:23 +0000 (Sat, 27 Jul 2024) | 1 line Bug #8134 new SURBL datasets ------------------------------------------------------------------------ r1919554 | billcole | 2024-07-27 19:16:58 +0000 (Sat, 27 Jul 2024) | 1 line Added rules for SURBL Headers BL ------------------------------------------------------------------------ r1919451 | gbechis | 2024-07-22 08:31:01 +0000 (Mon, 22 Jul 2024) | 2 lines extract URIs from rtf files ------------------------------------------------------------------------ r1919365 | gbechis | 2024-07-19 09:53:44 +0000 (Fri, 19 Jul 2024) | 2 lines avoid some warnings if the regexp doesn't match ------------------------------------------------------------------------ r1919361 | gbechis | 2024-07-19 07:34:20 +0000 (Fri, 19 Jul 2024) | 2 lines use domain from spf headers if domain from AAR headers cannot be found ------------------------------------------------------------------------ r1919224 | jhardin | 2024-07-14 18:17:13 +0000 (Sun, 14 Jul 2024) | 1 line Add To: == CC: rule for evaluation per users list request ------------------------------------------------------------------------ r1919202 | jhardin | 2024-07-13 19:46:26 +0000 (Sat, 13 Jul 2024) | 1 line GOOGDRAWPREVIEW tuning. ------------------------------------------------------------------------ r1919159 | fkento | 2024-07-12 04:38:58 +0000 (Fri, 12 Jul 2024) | 1 line Bug 8267 - Fix uri regex in ExtractText.pm ------------------------------------------------------------------------ r1919157 | fkento | 2024-07-12 03:49:30 +0000 (Fri, 12 Jul 2024) | 1 line Bug 8249 - Implement suppl_attrib 'return_path' and improve documentation ------------------------------------------------------------------------ r1919000 | jhardin | 2024-07-07 19:26:05 +0000 (Sun, 07 Jul 2024) | 1 line FP Avoidance tuning ------------------------------------------------------------------------ r1918975 | jhardin | 2024-07-06 17:48:29 +0000 (Sat, 06 Jul 2024) | 1 line Evaluate some google draw metas ------------------------------------------------------------------------ r1918936 | jhardin | 2024-07-05 14:54:31 +0000 (Fri, 05 Jul 2024) | 1 line Add another phishing redir rule for eval, boost some other phishing redir score limits ------------------------------------------------------------------------ r1918756 | jhardin | 2024-06-30 04:37:00 +0000 (Sun, 30 Jun 2024) | 1 line Add rule for phishing redirect via google docs image ------------------------------------------------------------------------ r1918726 | axb | 2024-06-28 06:12:39 +0000 (Fri, 28 Jun 2024) | 1 line added 111.com ------------------------------------------------------------------------ r1918278 | jhardin | 2024-06-12 14:44:50 +0000 (Wed, 12 Jun 2024) | 1 line "Bill 1618" disclaimers showing up again. ------------------------------------------------------------------------ r1918168 | billcole | 2024-06-05 14:19:38 +0000 (Wed, 05 Jun 2024) | 1 line correcting test counts ------------------------------------------------------------------------ r1918167 | billcole | 2024-06-05 12:47:50 +0000 (Wed, 05 Jun 2024) | 1 line SORBS is shutting down BZ#8246 ------------------------------------------------------------------------ r1918166 | billcole | 2024-06-05 12:35:44 +0000 (Wed, 05 Jun 2024) | 1 line SORBS is shutting down BZ#8246 ------------------------------------------------------------------------ r1917943 | mmartinec | 2024-05-24 13:40:52 +0000 (Fri, 24 May 2024) | 1 line AskDNS docs: re-worded a paragraph ------------------------------------------------------------------------ r1917907 | mmartinec | 2024-05-22 14:58:41 +0000 (Wed, 22 May 2024) | 1 line AskDNS docs: quad-dotted -> dotted-quad ------------------------------------------------------------------------ r1917855 | gbechis | 2024-05-21 15:15:44 +0000 (Tue, 21 May 2024) | 2 lines honor uridnsbl_skip_domain in AskDNS plugin ------------------------------------------------------------------------ r1917691 | gbechis | 2024-05-13 07:46:44 +0000 (Mon, 13 May 2024) | 2 lines Remove anchors and parameters from uris before running the dns query ------------------------------------------------------------------------ r1917531 | sidney | 2024-05-06 08:20:08 +0000 (Mon, 06 May 2024) | 1 line bug 8254 - fix sa-compile test to work with Makefile.PL RE2C_BIN option ------------------------------------------------------------------------ r1917490 | sidney | 2024-05-04 06:21:52 +0000 (Sat, 04 May 2024) | 1 line Bug 8253 - make test more robust against low memory on test machine ------------------------------------------------------------------------ r1917487 | sidney | 2024-05-04 04:06:02 +0000 (Sat, 04 May 2024) | 1 line bug 8252 - skip bayesbdb.t on FreeBSD arm64 ------------------------------------------------------------------------ r1917441 | gbechis | 2024-04-30 21:33:16 +0000 (Tue, 30 Apr 2024) | 3 lines avoid a __URI_TRY_3LD Fp looks ok to jhardin@ ------------------------------------------------------------------------ r1917349 | sidney | 2024-04-26 10:06:28 +0000 (Fri, 26 Apr 2024) | 1 line bug 8250 - Remove unnecessary use Test; ------------------------------------------------------------------------ r1917281 | gbechis | 2024-04-23 13:12:44 +0000 (Tue, 23 Apr 2024) | 3 lines correctly handle dns queries in RCVD_IN_VALIDITY_*_BLOCKED rules. From Validity Inc. ------------------------------------------------------------------------ r1917279 | gbechis | 2024-04-23 10:25:09 +0000 (Tue, 23 Apr 2024) | 3 lines prevent a FP no objections from jhardin@ ------------------------------------------------------------------------ r1917179 | sidney | 2024-04-20 09:07:07 +0000 (Sat, 20 Apr 2024) | 1 line bug 8245 - fix undefined value error in DMARC in perl 5.16 and 5.18 ------------------------------------------------------------------------ r1917027 | sidney | 2024-04-16 10:31:45 +0000 (Tue, 16 Apr 2024) | 1 line bug 8240 - fix test by using a test subdomain that will not be changed ------------------------------------------------------------------------ r1917016 | gbechis | 2024-04-16 09:32:28 +0000 (Tue, 16 Apr 2024) | 3 lines Honor uridnsbl_skip_domain in DNSEval bz #8234 ------------------------------------------------------------------------ r1917007 | sidney | 2024-04-16 02:28:01 +0000 (Tue, 16 Apr 2024) | 1 line bug 8241 - test using all of the supportd db modules that are available ------------------------------------------------------------------------ r1917005 | sidney | 2024-04-15 23:01:12 +0000 (Mon, 15 Apr 2024) | 1 line bug 8089 - avoid triggering an obscure perl bug on some systems ------------------------------------------------------------------------ r1916991 | sidney | 2024-04-14 22:04:29 +0000 (Sun, 14 Apr 2024) | 1 line Bug 8239 remove dead obsolete code from Makefile.PL ------------------------------------------------------------------------ r1916986 | sidney | 2024-04-14 17:28:38 +0000 (Sun, 14 Apr 2024) | 1 line bug 8237 - properly delete elements of tied hash ------------------------------------------------------------------------ r1916985 | sidney | 2024-04-14 17:00:33 +0000 (Sun, 14 Apr 2024) | 1 line bug 8238 delete SDBM_File files during cleanuo in test ------------------------------------------------------------------------ r1916942 | billcole | 2024-04-12 21:01:09 +0000 (Fri, 12 Apr 2024) | 1 line Microsoft sends spam ------------------------------------------------------------------------ r1916884 | gbechis | 2024-04-09 14:52:50 +0000 (Tue, 09 Apr 2024) | 2 lines add VALIDITY_BLOCKED_* rules that will hit when dns queries will be limited ------------------------------------------------------------------------ r1916751 | gbechis | 2024-04-02 14:48:30 +0000 (Tue, 02 Apr 2024) | 2 lines restore phishstats feed ------------------------------------------------------------------------ r1916735 | gbechis | 2024-04-02 07:43:56 +0000 (Tue, 02 Apr 2024) | 2 lines catch more malware in Office Documents ------------------------------------------------------------------------ r1916640 | sidney | 2024-03-29 21:40:10 +0000 (Fri, 29 Mar 2024) | 1 line Update build/release document to remove obsolete sections and update based on last release experience, correct typos ------------------------------------------------------------------------ r1916632 | sidney | 2024-03-29 14:24:12 +0000 (Fri, 29 Mar 2024) | 1 line fix mispelling. change download URL as per recent change on website ------------------------------------------------------------------------ r1916630 | sidney | 2024-03-29 13:39:11 +0000 (Fri, 29 Mar 2024) | 1 line Remove mention of 24 hr wait after uploading, there is no longer a mirror propagation delay ------------------------------------------------------------------------ r1916617 | sidney | 2024-03-29 10:41:20 +0000 (Fri, 29 Mar 2024) | 1 line 4.0.2 devel cycle started ------------------------------------------------------------------------ r1916616 | sidney | 2024-03-29 10:37:51 +0000 (Fri, 29 Mar 2024) | 1 line 4.0.1 RELEASED ------------------------------------------------------------------------