phrase spam: from: pls check this new site

[spamassassin_config.git] / common / url_spam

diff --git a/common/url_spam b/common/url_spam
index e938258e731d8ce74131b5379bf845f58ad488d2..1fd858ff6570e803b2c7cee0ebf0faeeccd8eda4 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS    spams from korea, hosts in japan
 score CANDYHOS         5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES         /http\:\/\/.*geocities/i
 describe GEOCITIES     geocities url
-score GEOCITIES                1.6
+score GEOCITIES                2.5
 
 # blarson 2005-12-24
 body EMPTYURL          /\bhttp:\/\/(?:www\.)?$/i
@@ -168,7 +169,7 @@ tflags      URIBL_CNKR      net
 score URIBL_CNKR       2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain   debian.org debian.net
+uridnsbl_skip_domain   debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -252,10 +253,6 @@ body MASZON                /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
 describe MASZON                pron spam
 score MASZON           4
 
-# blarson 2007-10-26
-full GEOCITIES         /\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES     http://geocities.com/
-score GEOCITIES                1
 
 # blarson 2007-10-27
 body GMAIL             /\@gmail\.com\b/i
@@ -283,7 +280,7 @@ describe HANOIFASH  WWW.HANOI-FASHION.COM
 score HANOIFASH                4
 
 # blarson 2007-11-06
-body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i
+body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
 describe ONLINEMED     onlinemedicalkey.com
 score ONLINEMED                4
 
@@ -295,4 +292,62 @@ score GETUP                4
 # blarson (pusling's idea) 2007-11-16
 body SPACECOM          /^[\w\d]+\s\.\scom\b/
 describe SPACECOM      whatever . com
-score SPACECOM         2
+score SPACECOM         3
+
+# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
+# blarson 2007-11-20
+# uridnsbl URIBL_FLO   flowgoaway.com. A
+# body URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
+# describe URIBL_FLO   web site in flowgoaway.com
+# tflags       URIBL_FLO       net
+# score URIBL_FLO              1
+
+# blarson 2007-11-20
+body SOFTROU           /\bwww\.softrou\.com\b/i
+describe SOFTROU       www.softrou.com
+score SOFTROU          3
+
+# blarson 2007-11-20
+body GOOGLEPAGES       /\bgooglepages\.com\b/i
+describe GOOGLEPAGES   spammers use googlepages
+score GOOGLEPAGES      2
+
+# blarson 2007-12-07
+body SOFTBESTGRAND     /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
+describe SOFTBESTGRAND softbestgrand.com
+score SOFTBESTGRAND    4
+
+# blarson 2007-12-10
+body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xprimesoftware|xpxmas|cheap2008soft|xprimeeasy|snowysoftware|2008adobe)\s?\.\s?(?:com|net)\b/
+describe PCSOFTCHEAP   pcsoftcheap. com
+score PCSOFTCHEAP      4
+
+# blarson 2007-12-11
+body GOLDGAME          /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
+describe GOLDGAME      gambling sites
+score GOLDGAME         4
+
+# blarson 2007-12-14
+body ENLARGETW         /\b(?:enlarge|0rz)\.tw\b/
+describe ENLARGETW     enlarge.tw
+score ENLARGETW                4
+
+# blarson 2007-12-15
+body POSTTHROUGH       /\b(?:postthrough|speedgrand|certaincoast)\.com\b/
+describe POSTTHROUGH   postthrough.com
+score POSTTHROUGH      4
+
+# blarson 2007-12-25
+body UHAVE             /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh)cards?(?:2008)?\.com\b/
+describe UHAVE         uhavepostcard.com
+score UHAVE            4
+
+# blarson 2007-12-26
+body RUSSWIFE          /\byourrussianwife\.info\b/
+describe RUSSWIFE      yourrussianwife.info
+score RUSSWIFE         4
+
+# blarson 2007-12-31
+body HAPPY2008         /\b(?:happy2008toyou|hellosanta2008|hohoho2008)\.com\b/
+describe HAPPY2008     happy2008toyou.com
+score HAPPY2008                4