move some of the common rbl sites around; add multi.surbl.org

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 6a64f68250af2ea013a0e90a310768db04643f77..634a9ed59bbef9cea5b19a26335734a5a14a4be9 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -814,11 +814,31 @@ describe ADEGREE  a degree
 score ADEGREE          3
 
 # blarson 2008-03-12
-rawbody PZIP           /\bfilename\=\"\w\.zip\"/
+rawbody PZIP           /\bfilename\=\"\w\w?\.zip\"/
 describe PZIP          p.zip
 score PZIP             3
 
 # blarson 2008-03-13
-header RETWO           subject =~ /RE\: [ab][a-z]{2,} [ab][a-z]{2,}\s*$/
+header RETWO           subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
 describe RETWO         RE: bogus arbitrary
 score RETWO            2
+
+# don 2008-03-17
+full SUBBODYREP                /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/i
+describe SUBBODYREP    Repeated word in subject and body without spaces
+score SUBBODYREP       3
+
+# don 2008-03-19
+full MYMSNNAMEIS       /(?:add\s+me\s+on|my)\s+(?:msn|(?:live|msn|)\s*mess?enger|aim|aol|screen)\s+(?:name\s+)?(?:is)?\s+\S+\@\S+/i
+describe MYMSNNAMEIS   My screen name is foo@bar.com
+score MYMSNNAMEIS      2.5
+
+# blarson 2008-03-20
+body LONGWURL          /^[\w\-]{11,}\s+http\:\/\/[\w\.\-]{4,}\s*$/
+describe LONGWURL      longWord URL
+score LONGWURL         2
+
+# blarson 2008-03-20
+header ITCSTORE                subject =~ /ITC Store/
+describe ITCSTORE      ITC Store
+score ITCSTORE         4