score CANDYHOS 5
# blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
body GEOCITIES /http\:\/\/.*geocities/i
describe GEOCITIES geocities url
-score GEOCITIES 1.6
+score GEOCITIES 2.5
# blarson 2005-12-24
body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i
score URIBL_CNKR 2.5
# blarson 2007-09-14
-uridnsbl_skip_domain debian.org debian.net
+uridnsbl_skip_domain debian.org debian.net yahoo.com google.com
# blarson 2007-09-14
uridnsbl URIBL_SBL sbl.spamhaus.org. A
describe MASZON pron spam
score MASZON 4
-# blarson 2007-10-26
-full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES http://geocities.com/
-score GEOCITIES 1
# blarson 2007-10-27
body GMAIL /\@gmail\.com\b/i
describe SPACECOM whatever . com
score SPACECOM 3
+# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
# blarson 2007-11-20
-uridnsbl URIBL_FLO flogoaway.com. A
-body URIBL_FLO eval:check_uridnsbl('URIBL_FLO')
-describe URIBL_FLO web sit in flogoaway.com
-tflags URIBL_FLO net
-score URIBL_FLO 1
+# uridnsbl URIBL_FLO flowgoaway.com. A
+# body URIBL_FLO eval:check_uridnsbl('URIBL_FLO')
+# describe URIBL_FLO web site in flowgoaway.com
+# tflags URIBL_FLO net
+# score URIBL_FLO 1
# blarson 2007-11-20
body SOFTROU /\bwww\.softrou\.com\b/i
body GOOGLEPAGES /\bgooglepages\.com\b/i
describe GOOGLEPAGES spammers use googlepages
score GOOGLEPAGES 2
+
+# blarson 2007-12-07
+body SOFTBESTGRAND /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
+describe SOFTBESTGRAND softbestgrand.com
+score SOFTBESTGRAND 4
+
+# blarson 2007-12-10
+body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xprimesoftware|xpxmas|cheap2008soft|xprimeeasy|snowysoftware|2008adobe)\s?\.\s?(?:com|net)\b/
+describe PCSOFTCHEAP pcsoftcheap. com
+score PCSOFTCHEAP 4
+
+# blarson 2007-12-11
+body GOLDGAME /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
+describe GOLDGAME gambling sites
+score GOLDGAME 4
+
+# blarson 2007-12-14
+body ENLARGETW /\b(?:enlarge|0rz)\.tw\b/
+describe ENLARGETW enlarge.tw
+score ENLARGETW 4
+
+# blarson 2007-12-15
+body POSTTHROUGH /\b(?:postthrough|speedgrand|certaincoast)\.com\b/
+describe POSTTHROUGH postthrough.com
+score POSTTHROUGH 4
+
+# blarson 2007-12-25
+body UHAVE /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh)cards?(?:2008)?\.com\b/
+describe UHAVE uhavepostcard.com
+score UHAVE 4
+
+# blarson 2007-12-26
+body RUSSWIFE /\byourrussianwife\.info\b/
+describe RUSSWIFE yourrussianwife.info
+score RUSSWIFE 4
+
+# blarson 2007-12-31
+body HAPPY2008 /\b(?:happy2008toyou|hellosanta2008|hohoho2008)\.com\b/
+describe HAPPY2008 happy2008toyou.com
+score HAPPY2008 4