|
Lines 35-40
Link Here
|
| 35 |
# renamed from KHOP_NO_FQDN |
35 |
# renamed from KHOP_NO_FQDN |
| 36 |
meta KHOP_HELO_BOT __HELO_NO_DOMAIN && KHOP_BOTNET_2 |
36 |
meta KHOP_HELO_BOT __HELO_NO_DOMAIN && KHOP_BOTNET_2 |
| 37 |
describe KHOP_HELO_BOT Suspect botnet sender claims no domain name |
37 |
describe KHOP_HELO_BOT Suspect botnet sender claims no domain name |
|
|
38 |
tflags KHOP_HELO_BOT nopublish |
| 38 |
#score KHOP_HELO_BOT 0.5 # 20090603 |
39 |
#score KHOP_HELO_BOT 0.5 # 20090603 |
| 39 |
|
40 |
|
| 40 |
header __NAME_IS_EMAIL From:raw =~ /\w\@[\w.-]+\.\w\w+["'`]*\s*<\w+\@\w/ |
41 |
header __NAME_IS_EMAIL From:raw =~ /\w\@[\w.-]+\.\w\w+["'`]*\s*<\w+\@\w/ |
