* Add subbodyrep rule to match words in subject repeated without spaces in body

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 5353c71945a17de3aa991c06d27dddb1a651fdcf..a5c70f7033077059b8b872291e7e33fa5ce41492 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -349,7 +349,7 @@ describe ACRO8PR0   sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO)\b/
 describe WBRS          stock spam
 score WBRS             4
 
@@ -650,7 +650,7 @@ describe CRETPROF   creative and perceptive professionals
 score CRETPROF         2
 
 # blarson 2007-11-15
-body REMOVEDOT         /\b(?:Remove|erase) the dot\b/i
+body REMOVEDOT         /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
 describe REMOVEDOT     Remove the dot
 score REMOVEDOT                3
 
@@ -719,6 +719,11 @@ full OEMSOFT               /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
 describe OEMSOFT       OEM software
 score OEMSOFT          2
 
+# don 2008-02-23
+body MSSOFTWARE                /(?:Microsoft|Windows) (?:Office Enterprise|Vista Ultimate)/i
+describe MSSOFTWARE    Microsoft Office Enterprise/Vista Ultimate
+score MSSOFTWARE       3
+
 # blarson 2008-01-01
 header NIGHTGIRL       subject =~ /\bnight\b.*\bgirlfriend\b/
 describe NIGHTGIRL     night ... girlfriend
@@ -782,3 +787,43 @@ score OPENPOS              3
 header EBAYMEMBER      subject =~ /message from ebay member/i
 describe EBAYMEMBER    Message from ebay member
 score EBAYMEMBER       4
+
+# blarson 2008-02-25
+header RESPONSERES     subject =~ /\bResponse to Resume\b/i
+describe RESPONSERES   Response to Resume
+score RESPONSERES      3
+
+# blarson 2008-02-29
+body INTCOMP           /^International company/
+describe INTCOMP       International company
+score INTCOMP          3
+
+# blarson 2008-03-04
+header VIAGPHRA                subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
+describe VIAGPHRA      misc spam phrases
+score VIAGPHRA         4
+
+# blarson 2008-03-05
+body SEXHEALTH         /\bSexual Health/i
+describe SEXHEALTH     Sexual Health
+score SEXHEALTH                4
+
+# blarson 2008-03-12
+header ADEGREE         subject =~ /\b(a|some|quick)\s+degree\b/i
+describe ADEGREE       a degree
+score ADEGREE          3
+
+# blarson 2008-03-12
+rawbody PZIP           /\bfilename\=\"\w\.zip\"/
+describe PZIP          p.zip
+score PZIP             3
+
+# blarson 2008-03-13
+header RETWO           subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
+describe RETWO         RE: bogus arbitrary
+score RETWO            2
+
+# don 2008-03-17
+header SUBBODYREP      subject =~ /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/
+describe SUBBODYREP    Repeated word in subject and body without spaces
+score SUBBODYREP       3