Block "my name is" spam

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 4fc618a55d61d6fd8d03d169d839bedf183f445f..1f50026f1a79cd52f1daeda784f32d39d44b3731 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -90,6 +90,14 @@ header ONEWORD               subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
 describe ONEWORD       one word subject
 score ONEWORD          2
 
+rawbody ONEWORDBODY    /^\s*\S+\s*$/s
+describe ONEWORDBODY   One word body
+score ONEWORDBODY      2
+
+meta  ONEWORDALL       (ONEWORD && ONEWORDBODY)
+describe ONEWORDALL    Both subject and body contain one word
+score ONEWORDALL       4
+
 # robot101, 2003-09-22
 header CROSSWALK       X-UnityUser =~ /^Crosswalk.com, Inc/
 describe CROSSWALK     Crosswalk bible mailing list
@@ -870,12 +878,12 @@ describe SUMHERE  summer is here
 score SUMHERE          3
 
 # don 2008-04-24
-header INVITATIONFROM  subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i
+header INVITATIONFROM  subject =~ /^\s*(Invitation|Invitaci.n)\s*(from|curso)\s*\w+\s*$/i
 describe INVITATIONFROM        Invitation from Spammer
 score INVITATIONFROM   5
 
-header INVITESYOU      subject =~ /^[\w\s]+invites\s+you\s+to[\w\s]+$/i
-describe INVITESYOU    Invites me with spam
+header INVITESYOU      subject =~ /^[\w\s]+(invites|communicates\s+with)\s+you\s+(to|about)[\w\s]+$/i
+describe INVITESYOU    Invites or communicates me with spam
 score INVITESYOU       5
 
 # blarson 2008-04-28
@@ -985,6 +993,53 @@ describe AAVEHICLE The AA Vehicle check report is broken
 score AAVEHICLE                4
 
 # don 2010-12-27
-header MODERNART       X-BeenThere =~ /group1@modernartmagazine.com/i
+header MODERNART       X-BeenThere =~ /group1\@modernartmagazine.com/i
 describe MODERNART     Broken mailing list spamers
 score MODERNART                5
+
+# formorer 2011-01-07
+header NYPOSTCARD      subject =~ /New Year postcard/i
+describe NYPOSTCARD    Enough New Year cards for 2011
+score  NYPOSTCARD      4
+
+
+# don 2011-01-24
+header   BIZZBOOSTER   from =~ /bizzbooster/i
+describe BIZZBOOSTER   From bizzbooster
+score   BIZZBOOSTER    5
+
+# don 2011-09-22
+header QUOTAEXP                subject =~ /mail\s+account(.+)quot[ae]\s+limit/
+describe QUOTAEXP      Exceeded quota limit
+score QUOTAEXP         4
+
+# don 2011-09-22
+body SEOBODY           /search\s+engine\s+traffic/
+describe SEOBODY       Body contains SEO terms
+score SEOBODY          1
+
+header SEOSUBJECT      subject =~ /\bseo\b/i
+describe SEOSUBJECT    Subject contains SEO terms
+score SEOSUBJECT       1
+
+meta SEOMETA           (SEOBODY && SEOSUBJECT)
+describe SEOMETA       Matches both SEOBODY and SEOSUBJECT
+score SEOMETA          3
+
+body WEBINAR           /webinar/i
+describe WEBINAR       Contains webinar
+score WEBINAR          2
+
+
+header TRIALVERSION    subject =~ /trial\s*version/i
+describe TRIALVERSION  Trial version in subject
+score TRIALVERSION     3
+
+header SHARESPAM       subject =~ /shared photos with you/i
+describe SHARESPAM     shares photos
+score SHARESPAM                3
+
+header MYNAMEIS                subject =~ /hello(.*)my name is/i
+describe               Name spam
+score                  2.5
+