#
# 2010-2018 Victor Ustugov <victor+spamassasin@corvax.kiev.ua>
#
# Microsoft Windows Live Mail
#
# для проверки комбинаций полей заголовков и проверки полей заголовков с учетом регистра названия поля нужен патч:
# https://mta.org.ua/spamassassin/patches/3.4.2-multi-casesensitive-headers-check/patch-src__3.4.2-multi-casesensitive-headers-check.patch
#

######################################################################

meta		CT_8BIT_CTE_7BIT_MWLM			CT_8BIT_CTE_7BIT && __CUST_X_Mailer_MWLM
describe	CT_8BIT_CTE_7BIT_MWLM			8-bit header Content-Type found with 7-bit header Content-Transfer-Encoding in message from Microsoft Windows Live Mail (DSPAM_autolearn)
score		CT_8BIT_CTE_7BIT_MWLM			2.2

ifplugin Mail::SpamAssassin::Plugin::DSPAM
meta		CT_8BIT_CTE_7BIT_MWLM_DSPAM_00_01	CT_8BIT_CTE_7BIT_MWLM && DSPAM_CHECK_00_01
describe	CT_8BIT_CTE_7BIT_MWLM_DSPAM_00_01	CT_8BIT_CTE_7BIT DSPAM compensation
score		CT_8BIT_CTE_7BIT_MWLM_DSPAM_00_01	3.5
endif

######################################################################

header		__MWLM_Message_ID			Message-ID:case =~ /^\s*<[\dA-F]{32}\@\S+>$/

meta		FORGED_MUA_MWLM_Message_ID		__CUST_X_MimeOLE_X_Mailer_MWLM && !__MWLM_Message_ID && !__MAILMAN && !__UNUSABLE_MSGID
describe	FORGED_MUA_MWLM_Message_ID		Forged MUA Microsoft Windows Live Mail
score		FORGED_MUA_MWLM_Message_ID		2.5

meta		FORGED_MUA_MWLM_MSGID_IP		__CUST_X_MimeOLE_X_Mailer_MWLM && __CUST_Message_ID_domain_IP
describe	FORGED_MUA_MWLM_MSGID_IP		IP address found in domain part of header Message-ID
score		FORGED_MUA_MWLM_MSGID_IP		3.5

######################################################################

meta		FORGED_MUA_MWLM_FROM_WOUT_QUOTE		__CUST_X_Mailer_MWLM && !__CUST_FROM_EMPTY && __HEADER_FROM_WITHOUT_QUOTES && !__HEADER_FROM_ENCODED && !__MAILMAN
describe	FORGED_MUA_MWLM_FROM_WOUT_QUOTE		Forged MUA Microsoft Windows Live Mail (there aren't double quotes in header From)
score		FORGED_MUA_MWLM_FROM_WOUT_QUOTE		2.0

meta		FORGED_MUA_MWLM_FROM			!__CUST_FROM_EMPTY && !__FROM_QUOTA_OR_ANGLE_BRACKET && !__HEADER_FROM_WITHOUT_QUOTES && __CUST_X_Mailer_MWLM
describe	FORGED_MUA_MWLM_FROM			Forged MUA Microsoft Windows Live Mail (header From does not contains double quote and angle bracket)
score		FORGED_MUA_MWLM_FROM			2.0

meta		FORGED_MUA_MWLM_REPLY_TO_WOUT_QUOTE	__CUST_X_Mailer_MWLM && !__CUST_REPLY_TO_EMPTY && __HEADER_REPLY_TO_WITHOUT_QUOTES && !__HEADER_REPLY_TO_ENCODED && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server
describe	FORGED_MUA_MWLM_REPLY_TO_WOUT_QUOTE	Forged MUA Microsoft Windows Live Mail (there aren't double quotes in header Reply-To)
score		FORGED_MUA_MWLM_REPLY_TO_WOUT_QUOTE	0.5

meta		FORGED_MUA_MWLM_REPLY_TO		!__CUST_REPLY_TO_EMPTY && !__REPLY_TO_QUOTA_OR_ANGLE_BRACKET && !__HEADER_REPLY_TO_WITHOUT_QUOTES && __CUST_X_Mailer_MWLM && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server
describe	FORGED_MUA_MWLM_REPLY_TO		Forged MUA Microsoft Windows Live Mail (header Reply-To does not contains double quote and angle bracket)
score		FORGED_MUA_MWLM_REPLY_TO		2.0

meta		FORGED_MUA_MWLM_TO_WOUT_QUOTE		__CUST_X_Mailer_MWLM && !__CUST_TO_EMPTY && __HEADER_TO_WITHOUT_QUOTES && !__HEADER_TO_ENCODED && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server
describe	FORGED_MUA_MWLM_TO_WOUT_QUOTE		Forged MUA Microsoft Windows Live Mail (there aren't double quotes in header To)
score		FORGED_MUA_MWLM_TO_WOUT_QUOTE		2.0

meta		FORGED_MUA_MWLM_TO			__TO_HAS_ADDR && !__CUST_TO_EMPTY && !__TO_QUOTA_OR_ANGLE_BRACKET && !__HEADER_TO_WITHOUT_QUOTES && __CUST_X_Mailer_MWLM && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server && !__iPlanet_Messaging_Server
describe	FORGED_MUA_MWLM_TO			Forged MUA Microsoft Windows Live Mail (header To does not contains double quote and angle bracket)
score		FORGED_MUA_MWLM_TO			2.0

meta		FORGED_MUA_MWLM_CC_WOUT_QUOTE		__CUST_X_Mailer_MWLM && !__CUST_CC_EMPTY && __HEADER_CC_WITHOUT_QUOTES && !__HEADER_CC_ENCODED && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server
describe	FORGED_MUA_MWLM_CC_WOUT_QUOTE		Forged MUA Microsoft Windows Live Mail (there aren't double quotes in header Cc)
score		FORGED_MUA_MWLM_CC_WOUT_QUOTE		2.0

meta		FORGED_MUA_MWLM_CC			!__CUST_CC_EMPTY && !__CC_QUOTA_OR_ANGLE_BRACKET && !__HEADER_CC_WITHOUT_QUOTES && __CUST_X_Mailer_MWLM && __CUST_List_Id_EMPTY && __CUST_List_Post_EMPTY && !__Mailing_List_Server
describe	FORGED_MUA_MWLM_CC			Forged MUA Microsoft Windows Live Mail (header Cc does not contains double quote and angle bracket)
score		FORGED_MUA_MWLM_CC			2.0

######################################################################