score INFOCOUK 3
# blarson 2009-05-27
-body EXITAT /\bexit\@(?:datalistsource|listsourcesworld)\.com\b/
+body EXITAT /\b(?:exit|rembox)\@(?:datalistsource|listsourcesworld|BestAccurateReliable|expertdatasystems|bestbizlists)\.\b/i
describe EXITAT exit@datalistsource.com
score EXITAT 3
describe CONSTCONTACT Mail comming from constant contact, which doesn't require double opt-in
score CONSTCONTACT 5
+# blarson 2009-08-16
+meta CTBDN (CT_IMAGE && MIXEDBDN)
+describe CTBDN CT_IMAGE && MIXEDBDN
+score CTBDN 0.5
+
# don 2009-09-22
body NUMEMAIL /\d{3,}\s+emails?/i
describe NUMEMAIL Mail which mentions some number of e-mail addresses
score NUMEMAIL 2
+
+# don 2009-11-25
+header YAHOOCALENDAR X-Yahoo-Calendar-IId: =~ /./
+describe YAHOOCALENDAR Mail comming from yahoo calendar, which spams us with updates
+score YAHOOCALENDAR 5
+
+# alex 2009-12-05
+header TLOTTERY subject =~ /Ticket no: [0-9]+/i
+describe TLOTTERY Lottery spam
+score TLOTTERY 3
+
+# alex 2009-12-05
+header GLOTTERY subject =~ /Google_L_o_t_t_e_r_y_W_i_n_n_e_r_s/i
+describe GLOTTERY Google Lottery spam
+score GLOTTERY 3
+
+# alex 2009-12-16
+header DOTNET subject =~ /Planning a Website Design\? Updates/
+describe DOTNET .NET Spam
+score DOTNET 3
+
+# blarson 2009-12-08
+body REMBOX /\brembox\@/
+describe REMBOX rembox
+score REMBOX 3