* Make the money rules more powerful

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 482edf9607c2cbcbc0fd4e9cb911c575a5e0b33b..0d53bc9188860f22d0f179181ccbc6906356d1b9 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -87,7 +87,7 @@ score FW                3
 # blarson 2007-07-13
 header REFWD           subject =~ /\b(?:RE|FWD)\:\s*$/i
 describe REFWD         re or fwd nothing
-score REFWD            3
+score REFWD            3.5
 
 # blarson 2005-11-11
 header ONEWORD         subject =~ /^(?:Fw:|re:)?\s*\w+\s*$/i
@@ -347,20 +347,16 @@ header ACRO8PR0           subject =~ /\bAcr[0o]bat\s*[78]\s+(?:PR[0O]\b|\$?\d+\$?)/i
 describe ACRO8PR0      sales spam
 score ACRO8PR0         4       
 
-# blarson 2007-09-15
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E)\b/
+# blarson 2007-10-05
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd)\b/
 describe WBRS          stock spam
 score WBRS             4
 
 body FOURLA            /\b([A-Z]\s?){4}\b/
 describe FOURLA                Four letter acronym (stock spam?)
-score FOURLA           1
+score FOURLA           0.1
 
-full WORDMONEY         /^\w+\s*:\s*(?:\$\s*[\d\.]+|[\d\.]+\s*USD)/mi
-describe WORDMONEY     Word Colon Money
-score WORDMONEY                1
-
-meta STOCKLIKE         (FOURLA && WORDMONEY)
+meta STOCKLIKE         (FOURLA && (MONEY || SUBJMONEY))
 describe STOCKLIKE     Four letter acronyms with money; stock scam
 score STOCKLIKE                2
 
@@ -430,7 +426,7 @@ describe DELAFT             more pdf spam
 score DELAFT           3
 
 # blarson 2007-09-13
-header OFF1CE          subject =~ /\b[O0]ff[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
+header OFF1CE          subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
 describe OFF1CE                off1ce spam
 score OFF1CE           4
 
@@ -500,6 +496,94 @@ describe PHONENUMBER       Toll free phone number
 score PHONENUMBER      1.5
 
 # don 2007-10-02
-header GERMANSPAM      subject =~ /Stellangebot/i
+body GERMANSPAM                /Zerix Intern/i
 describe GERMANSPAM    Um... no clue what that is.
 score GERMANSPAM       3
+
+body URBANNEWS         /UrbaNNews\.ro/
+describe URBANNEWS     URBANNEWS Newsletter
+score URBANNEWS                3
+
+# blarson 2007-10-05
+header JOBS            subject =~ /\b(?:job|Employ(?:ers|ment|ee))s?\b/i
+describe JOBS          job spam
+score JOBS             1
+
+# don 2007-10-09
+header FREEPASSWORD    subject =~ /your\s*free\s*password/i
+describe FREEPASSWORD  We don't need free password
+score FREEPASSWORD     3
+
+# don 2007-10-11
+header AFRICABYBIKE    subject =~ /africa\s*by\s*bike/i
+describe AFRICABYBIKE  We don't care about africa by bike or car or bus or train
+score AFRICABYBIKE     4
+
+# blarson 2007-10-14
+header BRAKETDIGIT     subject =~ /\[\d+\]\:\s*$/
+describe BRAKETDIGIT   braketed digit colon last in subject
+score BRAKETDIGIT      2
+
+# blarson 2007-10-14
+full WHATISOEM         /\bWhat\s*is\s*OEM\b/i
+describe WHATISOEM     What is OEM
+score WHATISOEM                4
+
+# blarson 2007-10-15
+body WORKEXP           /\bwork\s+experience\s+degree\b/i
+describe WORKEXP       work experience degree
+score WORKEXP          3
+
+# blarson 2007-10-24
+body NICEGIRL          /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
+describe NICEGIRL      nice girl
+score NICEGIRL         2
+
+# blarson 2007-10-16
+header FEALCHAT                subject =~ /\bFeel Like Chatting\b/i
+describe FEALCHAT      Feel Like Chatting
+score FEALCHAT         3
+
+# blarson 2007-10-18
+header DFF1CE          subject =~ /UmU6INDSydfF1CE/i
+describe DFF1CE                korean spam
+score DFF1CE           4
+
+# blarson 2007-10-23
+header FAILNOTE                subject =~ /\bFailure notice\:/i
+describe FAILNOTE      bounced spam
+score FAILNOTE         4
+
+# blarson 2007-10-25
+full STILLSINGLE       /\bstill\s+single\b/i
+describe STILLSINGLE   still single
+score STILLSINGLE      2
+
+# blarson 2007-10-26
+header PERSONALCRED    subject =~ /\bPersonal\s+Credit/i
+describe PERSONALCRED  Personal Credit
+score PERSONALCRED     2
+
+# blarson 2007-10-26
+body XMASGIFT          /\b(?:christ|x)mas gift\b/
+describe XMASGIFT      christmas gift
+score XMASGIFT         2
+
+# blarson 2007-10-26
+body RONPAUL           /\bRon Paul\b/
+describe RONPAUL       Ron Paul
+score RONPAUL          3
+
+# blarson 2007-10-27
+body YOURJOB           /your Job Verification Number/
+describe YOURJOB       your Job Verification Number
+score YOURJOB          3
+
+# blason 2007-10-28
+body PASTERESUME       /\bPASTE your resume\b/i
+describe PASTERESUME   PASTE your resume
+score PASTERESUME      3
+
+body LETHIHELO         /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
+describe LETHIHELO     Hello, how are you
+score LETHIHELO                4