#
# 2024 Victor Ustugov <corvax+spamassassin@mta.org.ua>
#


header		__salesforce_com_Return_path		Return-path =~ /\.salesforce\.com>/
header		__salesforce_com_X_Envelope_From	X-Envelope-From =~ /\.salesforce.com>/
meta		__salesforce_com_ENV_FROM		__salesforce_com_Return_path || __salesforce_com_X_Envelope_From

#meta		FAKE_OUTLOOK_HOTMAIL		__salesforce_com_ENV_FROM && (__OUTLOOK_COM_From || __HOTMAIL_COM_From)
meta		FAKE_OUTLOOK_HOTMAIL		__salesforce_com_ENV_FROM && (__OUTLOOK_From || __HOTMAIL_COM_From)
describe	FAKE_OUTLOOK_HOTMAIL		Message from salesforce.com with Outlook/Hotmail in header From (sa-learn_candidate, not_classified)
score		FAKE_OUTLOOK_HOTMAIL		3.0

header		__FAKE_META_FOR_BUSINNESS	From =~ /^\s*("Meta For Business"|FaceBook|Facebook Ads Team|Facebook Business Team|Facebook Pro Team|Facebook Support Team|Facebook Team|META|Meta Business|Meta Business Support|Meta for Business|Meta for Business \xC2\xA0|Meta for Business Team|Meta for Supportt?|Meta Help|Meta Pro Team|Meta Support|Meta Support Team) </
meta		FAKE_META_FOR_BUSINNESS		__FAKE_META_FOR_BUSINNESS && (__OUTLOOK_COM_From || __HOTMAIL_COM_From || __GMAIL_COM_From || __salesforce_com_ENV_FROM)
describe	FAKE_META_FOR_BUSINNESS		Maybe fake messgae from Meta for Business (DSPAM_autolearn, bayes_recheck, sa-learn_candidate, not_classified)
score		FAKE_META_FOR_BUSINNESS		5.0
tflags		FAKE_META_FOR_BUSINNESS		mandatory_learn