Moved listserver to liszt

[spamassassin_config.git] / common / url_spam

diff --git a/common/url_spam b/common/url_spam
index 2afdd4ee2c6be2f81e487b845cc9c9215106aab2..30032e4c9b27a7049cfa4a1491c7f45cdae70cd0 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS    spams from korea, hosts in japan
 score CANDYHOS         5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES         /http\:\/\/.*geocities/i
 describe GEOCITIES     geocities url
-score GEOCITIES                1.6
+score GEOCITIES                2.5
 
 # blarson 2005-12-24
 body EMPTYURL          /\bhttp:\/\/(?:www\.)?$/i
@@ -116,7 +117,7 @@ describe BESTLOANS  Best loans url
 score BESTLOANS                2
 
 # blarson 2007-07-22 2007-09-12
-body PENPRO            /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell)\.info\b/i
+body PENPRO            /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
 describe PENPRO                penmailpro spam
 score PENPRO           3.5
 
@@ -168,7 +169,7 @@ tflags      URIBL_CNKR      net
 score URIBL_CNKR       2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain   debian.org debian.net
+uridnsbl_skip_domain   debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -179,7 +180,7 @@ tflags          URIBL_SBL       net
 score          URIBL_SBL       3.5
 
 # blarson 2007-09-17
-body MYCHEAP           /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?\s*\.\s*com\b/i
+body MYCHEAP           /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
 describe MYCHEAP       software spam
 score MYCHEAP          4
 
@@ -252,10 +253,6 @@ body MASZON                /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
 describe MASZON                pron spam
 score MASZON           4
 
-# blarson 2007-10-26
-full GEOCITIES         /\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES     http://geocities.com/
-score GEOCITIES                1
 
 # blarson 2007-10-27
 body GMAIL             /\@gmail\.com\b/i
@@ -266,3 +263,50 @@ score GMAIL                1
 body MAILRU            /\@mail\.ru\b/i
 describe MAILRU                @mail.ru
 score MAILRU           3
+
+# blarson 2007-10-31
+body ADOBE4LESS                /\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
+describe ADOBE4LESS    adobe4less . com
+score ADOBE4LESS       4
+
+# blarson 2007-11-01
+body RMAPPLY           /http\:\/\/rmapply\.com\b/i
+describe RMAPPLY       http://rmapply.com
+score RMAPPLY          4
+
+# blarson 2007-11-04
+header HANOIFASH       subject =~ /WWW\.HANOI-FASHION\.COM/i
+describe HANOIFASH     WWW.HANOI-FASHION.COM
+score HANOIFASH                4
+
+# blarson 2007-11-06
+body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
+describe ONLINEMED     onlinemedicalkey.com
+score ONLINEMED                4
+
+# blarson 2007-11-15
+body GETUP             /\bgetupgradednow\.com\b/i
+describe GETUP         getupgradednow.com
+score GETUP            4
+
+# blarson (pusling's idea) 2007-11-16
+body SPACECOM          /^[\w\d]+\s\.\scom\b/
+describe SPACECOM      whatever . com
+score SPACECOM         3
+
+# blarson 2007-11-20
+uridnsbl URIBL_FLO     flowgoaway.com. A
+body   URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
+describe URIBL_FLO     web site in flowgoaway.com
+tflags URIBL_FLO       net
+score URIBL_FLO                1
+
+# blarson 2007-11-20
+body SOFTROU           /\bwww\.softrou\.com\b/i
+describe SOFTROU       www.softrou.com
+score SOFTROU          3
+
+# blarson 2007-11-20
+body GOOGLEPAGES       /\bgooglepages\.com\b/i
+describe GOOGLEPAGES   spammers use googlepages
+score GOOGLEPAGES      2