* fixed my CN pron spam rule

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 8906819644e95cdd3e1aab902739fdb2f85e7345..f4e8c28c4cde0f6a70f9f04a1d4fbf1f1344867f 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -348,19 +348,15 @@ describe ACRO8PR0 sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H)\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N)\b/
 describe WBRS          stock spam
 score WBRS             4
 
 body FOURLA            /\b([A-Z]\s?){4}\b/
 describe FOURLA                Four letter acronym (stock spam?)
-score FOURLA           1
+score FOURLA           0.1
 
-full WORDMONEY         /^\w+\s*:\s*(?:\$\s*[\d\.]+|[\d\.]+\s*USD)/mi
-describe WORDMONEY     Word Colon Money
-score WORDMONEY                1
-
-meta STOCKLIKE         (FOURLA && WORDMONEY)
+meta STOCKLIKE         (FOURLA && (MONEY || SUBJMONEY))
 describe STOCKLIKE     Four letter acronyms with money; stock scam
 score STOCKLIKE                2
 
@@ -523,3 +519,46 @@ header AFRICABYBIKE        subject =~ /africa\s*by\s*bike/i
 describe AFRICABYBIKE  We don't care about africa by bike or car or bus or train
 score AFRICABYBIKE     4
 
+# blarson 2007-10-14
+header BRAKETDIGIT     subject =~ /\[\d+\]\:\s*$/
+describe BRAKETDIGIT   braketed digit colon last in subject
+score BRAKETDIGIT      2
+
+# blarson 2007-10-14
+full WHATISOEM         /\bWhat\s*is\s*OEM\b/i
+describe WHATISOEM     What is OEM
+score WHATISOEM                4
+
+# blarson 2007-10-15
+body WORKEXP           /\bwork\s+experience\s+degree\b/i
+describe WORKEXP       work experience degree
+score WORKEXP          3
+
+# blarson 2007-10-24
+body NICEGIRL          /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
+describe NICEGIRL      nice girl
+score NICEGIRL         2
+
+# blarson 2007-10-16
+header FEALCHAT                subject =~ /\bFeel Like Chatting\b/i
+describe FEALCHAT      Feel Like Chatting
+score FEALCHAT         3
+
+# blarson 2007-10-18
+header DFF1CE          subject =~ /UmU6INDSydfF1CE/i
+describe DFF1CE                korean spam
+score DFF1CE           4
+
+# blarson 2007-10-23
+header FAILNOTE                subject =~ /\bFailure notice\:/i
+describe FAILNOTE      bounced spam
+score FAILNOTE         4
+
+# blarson 2007-10-25
+full STILLSINGLE       /\bstill\s+single\b/i
+describe STILLSINGLE   still single
+score STILLSINGLE      2
+
+body LETHIHELO         /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
+describe LETHIHELO     Hello, how are you
+score LETHIHELO                4