# Last Mod: 5/8/2009
# Commiter: AXB
# Source http://sa.hege.li/FreeMail.cf
# Target: http://www.rulesemporium.com/rules/FreeMail.cf
# Licensed as per Source file.
#
# Commited as: FreeMail.cf
#

# Check if path to plugin is correct
loadplugin Mail::SpamAssassin::Plugin::FreeMail /etc/mail/spamassassin/FreeMail.pm

ifplugin Mail::SpamAssassin::Plugin::FreeMail


header FREEMAIL_REPLYTO eval:check_freemail_replyto()
describe FREEMAIL_REPLYTO Different freemail address found in Reply-To or Body than From
score FREEMAIL_REPLYTO 2

header FREEMAIL_FROM eval:check_freemail_from()
describe FREEMAIL_FROM From-address is freemail domain
score FREEMAIL_FROM 0.5

## To test any mail header you want

#header FREEMAIL_CUSTOM eval:check_freemail_header('Custom')

## You can experiment with something like:

# (Note that From-matching changed since 1.06, it might
#  be EnvelopeFrom that we want to match. I'll fix this later.)

#header __FREEMAIL_FROM_D2 From:addr =~ /[^\d]\d{1,2}@/
#meta FREEMAIL_FROM_D2 (FREEMAIL_FROM && __FREEMAIL_FROM_D2)
#describe FREEMAIL_FROM_D2 Freemail ending with 1-2 digits
#score FREEMAIL_FROM_D2 0.5

#header __FREEMAIL_FROM_D3 From:addr =~ /[^\d]\d{3,}@/
#meta FREEMAIL_FROM_D3 (FREEMAIL_FROM && __FREEMAIL_FROM_D3)
#describe FREEMAIL_FROM_D3 Freemail ending with 3 or more digits
#score FREEMAIL_FROM_D3 1

## Check HK_MUCHMONEY from http://sa.hege.li/HK.cf
## Add other good indicators to the list..
#meta FREEMAIL_EXTRA (FREEMAIL_FROM && (BAYES_95 || BAYES_99 || DCC_CHECK || RAZOR2_CHECK || HK_MUCHMONEY))
#score FREEMAIL_EXTRA 3

### SARE Additions
#

# # freemail_domains example.net freemail.*

freemail_domains eircom.net ekolay.net
freemail_domains hotbox.ru hotmail.ro
freemail_domains inMail24.com iquebec.com ifrance.com
freemail_domains land.ru
freemail_domains narod.ru
freemail_domains nightmail.ru
freemail_domains orange.*
freemail_domains pochtamt.ru pop3.ru
freemail_domains rbcmail.ru


endif