add blars patches

[spamassassin_config.git] / common / misc_spam

diff --git a/common/misc_spam b/common/misc_spam
index 1641a3dd06e3a2f7f8684f5aa078d5b566dbd605..548ac67a00579e9880c2bcb8b40cc4c8134e0408 100644 (file)
--- a/common/misc_spam
+++ b/common/misc_spam
@@ -19,6 +19,11 @@ body GUEBDE     /http\:\/\/www\.gueb\.de\//
 describe GUEBDE www.geub.de
 score GUEBDE    5
 
+# Don 2008-06-27
+rawbody         PGPSIGNATURE   /-----BEGIN PGP SIGNATURE-----/
+describe PGPSIGNATURE  Has a pgp signature (may not be valid, but who cares?)
+score   PGPSIGNATURE   -5
+
 
 # TODO: The rules below seem to be very similar; possibly fix them.
 
@@ -300,3 +305,28 @@ score ITXS         4
 rawbody TINYFONT       /\bFONT-SIZE\:\s+[123]px\;/i
 describe TINYFONT      tiny font specified
 score TINYFONT         3
+
+# blarson 2008-04-03
+rawbody ZIPFILE                /\bfilename\=.*\.zip\b/i
+describe ZIPFILE       zipfile attachment
+score ZIPFILE          0.5
+
+# blarson 2008-04-19
+header SPACESUB                subject =~ /^\s\w/
+describe SPACESUB      extra space before subject
+score SPACESUB         0.5
+
+# don 2008-05-04
+header YAHOOCALENDAR   X-Yahoo-Newman-Property: =~ /calendar-invite/i
+describe YAHOOCALENDAR Calendar invite from yahoo; broken captcha
+score YAHOOCALENDAR    4
+
+# blarson 2008-06-03
+header BOUNDARYID      content-type =~ /\bboundary\=\"Boundary_\(ID_/
+describe BOUNDARYID    spamware boundary
+score BOUNDARYID       0.6
+
+# blarson 2008-07-02
+body GBKXWFLXF         /\bgbkxwflxf\b/
+describe GBKXWFLXF     gbkxwflxf
+score GBKXWFLXF                5