Catch some link exchange spam

[spamassassin_config.git] / common / money_spam

diff --git a/common/money_spam b/common/money_spam
index 12eccc3acde21bfbe692b6f5bd2af95c5a63b763..5a362ee44dbb385272dfb0bb7d10cf20eb23d0b7 100644 (file)
--- a/common/money_spam
+++ b/common/money_spam
@@ -1,3 +1,4 @@
+# -*- mode: spamassassin -*-
 # Spam dealing with selling stuff, stocks, etc. is matched by these
 # rules
 
@@ -161,7 +162,7 @@ score MRG           2
 # blarson 2004-11-08
 body CITIBANK          /\bciti.?bank\b/i
 describe CITIBANK      citibank scam
-score CITIBANK         2
+score CITIBANK         3
 
 # blarson 2005-01-14
 body HOMEOWNER         /home.?owner/i
@@ -222,8 +223,8 @@ body ANALLE         /\bAN ALLE FINANZINVESTOREN\b/
 describe ANALLE                stock spam in german
 score ANALLE           3
 
-# blarson 2007-06-17 2007-09-21
-body REPWATCH2         /\breplica (?:watch|timepiece)/i
+# blarson 2007-06-17 2007-09-21 2007-10-20 2007-11-06
+body REPWATCH2         /\brepl[i1]c+a\s*(?:w[a4]tch|timepiece)/i
 describe REPWATCH2     still pushing fake watches
 score REPWATCH2                3.5
 
@@ -257,9 +258,14 @@ body DMXC               /Look at D-M-X-C!/
 describe DMXC           stock spam
 score DMXC              4
 
-body MONEY             /(\$\s*[\d\.]+|[\d\.]+\s*(usd|yen|euro|dollar))/
-describe MONEY         Some amount of money
-score MONEY            1.5
+body MONEY             /((usd|yen|eur?o?|dollar|\$)\s*\d[\d\.\,]+|\d[\d\.\,]+\s*(usd|yen|eur?o?|dollar|\$))/i
+describe MONEY         Some amount of money in body
+score MONEY            0.5
+
+header SUBJMONEY       subject =~ /((usd|yen|eur?o?|dollar|\$)\s*[\d\.\, ]+|[\d\.\, ]+\s*(usd|yen|eur?o?|dollar|\$))/i
+describe SUBJMONEY     Some amount of money in subject
+score SUBJMONEY                3
+
 
 body HIDDENCOSTS       /hidden\s*(costs|fees)/i
 describe HIDDENCOSTS   Hidden costs or fees?
@@ -268,3 +274,73 @@ score HIDDENCOSTS  1.5
 header EXCHANGEFIN     subject =~ /\bE-exchange Finland\b/
 describe EXCHANGEFIN   EXCHANGEFIN E-money
 score EXCHANGEFIN      4.0
+
+body STOCKFRLE         /\bFRLE\b/i
+describe STOCKFRLE     FRLE Stock Spam
+score STOCKFRLE                3.4
+
+# blarson 2007-10-16
+body OPORTUNI          /\bOportunidade de Emprego\b/i
+describe OPORTUNI      Oportunidade de Emprego
+score OPORTUNI         3.5
+
+# blarson 2007-12-10
+header WATCHES         subject =~ /\b(?:watches|time\s*piece|Replica|aRolex|Cartier|Omega)\b/i
+describe WATCHES       watches
+score WATCHES          2
+
+# blarson 2007-12-29
+body COUP0N            /\bCoup0n\b/i
+describe COUP0N                Coup0n
+score COUP0N           3
+
+header SOFTWARERETAIL  subject =~ /\bretail/i
+describe SOFTWARERETAIL Adobe RETAIL products
+score SOFTWARERETAIL   3.2
+
+# cord 2008-01-23
+full DEPOSIT           /deposit/i
+describe DEPOSIT       Deposit
+score DEPOSIT          2
+
+# blarson 2008-07-17
+body PRINCIPALSONLY    /\bPrincipals\s+Only\b/i
+describe PRINCIPALSONLY        Principals Only
+score PRINCIPALSONLY   3
+
+# don 2008-07-21
+full AMERO             /\bamero\b/i
+describe AMERO         Amero, whatever the hell it is, it's spam
+score AMERO            3
+
+# blarson 2008-07-27
+header GAGO            subject =~ /\bGA\s*G[O0]\b/
+describe GAGO          stock scam
+score GAGO             4
+
+# blarson 2008-07-31
+body NYSE              /\bNYSE\b/
+describe NYSE          stock scam
+score NYSE             2
+
+# cord 2008-11-30
+full LOAN              /\bloan\b/
+describe LOAN          loan spam
+score LOAN             2
+
+# cord 2008-11-30
+full CREDIT            /\[ck]redit\b/
+describe CREDIT                credit spam
+score CREDIT           2
+
+# cord 2008-12-05
+full LEASING           /\bleasing\b/
+describe LEASING       leasing spam
+score LEASING          2
+
+# formorer 2010-01-23
+header LOTTERY         from =~ /\blottery\b/i
+describe LOTTERY       lottery spam
+score LOTTERY          2
+
+