-- Miscellaneous rules

reconf['EMPTY_REALNAME_FROM']	= 'From=/^\\s*\\"\\"\\s*</X'
metrics['default']['EMPTY_REALNAME_FROM'] = { weight = 1.5, description = 'Empty real name in header From' }

reconf['EMPTY_REALNAME_TO']	= 'To=/(?:\s|^)\\"\\"\\s*</X'
metrics['default']['EMPTY_REALNAME_TO'] = { weight = 1.9, description = 'Empty real name in header To' }

reconf['EMPTY_REALNAME_CC']	= 'Cc=/(?:\s|^)\\"\\"\\s*</X'
metrics['default']['EMPTY_REALNAME_CC'] = { weight = 1.9, description = 'Empty real name in header Cc' }

reconf['EMPTY_REALNAME_REPLYTO'] = 'Reply-To=/^\\s*\\"\\"\\s*</X'
metrics['default']['EMPTY_REALNAME_REPLYTO'] = { weight = 1.5, description = 'Empty real name in header Reply-To' }



local xm_msoe5 = 'X-Mailer=/^Microsoft Outlook Express 5/H'
local xm_msoe6 = 'X-Mailer=/^Microsoft Outlook Express 6/H'
local xm_mso12 = 'X-Mailer=/^Microsoft Office Outlook 12\\.0/H'

local timezone_000 = 'Date=/ -0000\\s*$/X'

function msgid_boundary_the_same_ftime(task, mua)
	local regexp_text
	if (mua == "OE") then
		regexp_text = '^Message-Id: <[\\da-f]{4}([\\da-f]{8})\\$([\\da-f]{8})\\$[\\da-f]{8}\\@.{50,500}boundary="----=_NextPart_000_[\\dA-F]{4}_\\1\\.\\2"'
	elseif (mua == "MSO12") then
		regexp_text = '^Message-Id: <[\\da-f]{4}([\\da-f]{8})\\$([\\da-f]{8})\\$[\\da-f]{8}\\$\\@.{50,500}boundary="----=_NextPart_000_[\\dA-F]{4}_\\1\\.\\2"'
	end
	if regexp_text then
		local re = regexp.get_cached(regexp_text)
		if not re then re = regexp.create(regexp_text, 'msi') end
		local res = re:match(task:get_raw_headers())
		if res then
        		return true
    		end
        end
        return false
end
reconf['SUSPICIOUS_MSGID_BOUNDARY_OE'] = string.format('((%s) | (%s)) & (%s)', xm_msoe5, xm_msoe6, 'msgid_boundary_the_same_ftime(OE)')
metrics['default']['SUSPICIOUS_MSGID_BOUNDARY_OE'] = { weight = 2.0, description = 'Suspicious the same filetimes in header Message-ID and boundary attribute of header Content-Type' }
reconf['SUSPICIOUS_MSGID_BOUNDARY_MSO12'] = string.format('(%s) & !(%s) & (%s)', xm_mso12, timezone_000, 'msgid_boundary_the_same_ftime(MSO12)')
metrics['default']['SUSPICIOUS_MSGID_BOUNDARY_MSO12'] = { weight = 2.0, description = 'Suspicious the same filetimes in header Message-ID and boundary attribute of header Content-Type' }



reconf['TO_IN_SUBJ'] = function(task)
	local msg = task:get_message()
	for _,rcpt in ipairs(task:get_recipients_headers()) do
		for i,subject in ipairs(msg:get_header('Subject')) do
			if string.match(subject, rcpt['addr'], 1, true) then return true end
		end
	end
        return false
end
metrics['default']['TO_IN_SUBJ'] = { weight = 1.0, description = 'Address from header To has been found in header Subject' }