# # 2009-2013 Victor Ustugov # header __KMail_MSGID From|Message-Id =~ /<(\S+)>[\s\r\n]*\|<(19[789]\d|20\d\d)(0\d|1[012])([012]\d|3[01])([0-5]\d)([0-5]\d)\.\d+\.\1>$/ #header __KMail_MSGID_Common Message-Id =~ /^\s*<20[01]\d{9}\.\d+\.\S+\@\S+>$/ header __KMail_MSGID_Common Message-Id =~ /^\s*<\d+\.\d+\.\S+\@\S+>$/ meta FORGED_MUA_KMail_MSGID __User_Agent_KMail && __KMail_MSGID_Common && !__KMail_MSGID && !__MAILMAN && !__UNUSABLE_MSGID describe FORGED_MUA_KMail_MSGID Message pretends to be send from KMail but has forged Message-ID (DSPAM autolearn) score FORGED_MUA_KMail_MSGID 2.8 meta FORGED_MUA_KMail_MSGID_UNKNOWN __User_Agent_KMail && !__KMail_MSGID_Common && !__UNUSABLE_MSGID describe FORGED_MUA_KMail_MSGID_UNKNOWN Message pretends to be send from KMail but has forged Message-ID (DSPAM autolearn) score FORGED_MUA_KMail_MSGID_UNKNOWN 2.5 #header __FORGED_MUA_KMail_CT_Text_Plain Content-Type =~ /^\s*Text\/Plain;/ # #meta FORGED_MUA_KMail_CT_Text_Plain __User_Agent_KMail && __FORGED_MUA_KMail_CT_Text_Plain #describe FORGED_MUA_KMail_CT_Text_Plain Message pretends to be send from KMail but has suspicious header Content-Type (DSPAM autolearn) #score FORGED_MUA_KMail_CT_Text_Plain 2.5