* don't bother to join people on things

[spamassassin_config.git] / common / misc_spam

diff --git a/common/misc_spam b/common/misc_spam
index d48de35b29c3ccdcc432c3a140d8a77a5587351c..1165f158636a1d413e15c46b9993023143e7eb63 100644 (file)
--- a/common/misc_spam
+++ b/common/misc_spam
@@ -20,9 +20,9 @@ describe GUEBDE www.geub.de
 score GUEBDE    5
 
 # Don 2008-06-27
-rawbody        PGPSIGNATURE    /-----BEGIN PGP SIGNATURE-----/
-descr  PGPSIGNATURE    Has a pgp signature (may not be valid, but who cares?)
-score  PGPSIGNATURE    -5
+rawbody         PGPSIGNATURE   /-----BEGIN PGP SIGNATURE-----/
+describe PGPSIGNATURE  Has a pgp signature (may not be valid, but who cares?)
+score   PGPSIGNATURE   -5
 
 
 # TODO: The rules below seem to be very similar; possibly fix them.
@@ -325,3 +325,45 @@ score YAHOOCALENDAR        4
 header BOUNDARYID      content-type =~ /\bboundary\=\"Boundary_\(ID_/
 describe BOUNDARYID    spamware boundary
 score BOUNDARYID       0.6
+
+# blarson 2008-07-02
+body GBKXWFLXF         /\bgbkxwflxf\b/
+describe GBKXWFLXF     gbkxwflxf
+score GBKXWFLXF                5
+
+# blarson 2008-09-07
+body LUKSUS            /\bluksus\b/i
+score LUKSUS           4
+describe LUKSUS                Luksus
+
+# blarson 2008-09-22
+header XIRONPORT       X-IronPort-Anti-Spam-Filtered =~ /true/
+describe XIRONPORT     claims to be ironport filtered
+score XIRONPORT                2.5
+
+# blarson 2008-10-13
+header AUTORESPON      subject =~ /Auto_response/
+describe AUTORESPON    Auto_response
+score AUTORESPON       3
+
+# blarson 2008-10-28
+header XWUM            x-wum-to =~ /./
+describe XWUM          X-WUM-TO
+score XWUM             2
+
+# cord 2008-10-31
+# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff
+header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/
+describe STATIC_RIMA_TDE static IP from rima-tde.net
+score STATIC_RIMA_TDE  -5
+
+# cord 2008-11-30 # compensate LDO_SUBSCRIBER bonus for Forum2Mail-Gw
+full NABBLE            /lists\@nabble\.com/
+describe NABBLE                sent through nabble.com
+score NABBLE           5
+
+# don 2009-02-04
+full HTML_NBSP         /(\ ){3,}/
+describe HTML_NBSP     Lots of  
+score HTML_NBSP                2
+