* ONEWORDBODY needs to match rawbody, not body

[spamassassin_config.git] / common / url_spam

diff --git a/common/url_spam b/common/url_spam
index 52c8193562f97ee423f2d5b1eabdba7199852326..a73c3fb96a33300c3d657ff4e73c1c94a70e0743 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -1,3 +1,4 @@
+# -*- mode: spamassassin -*-
 # joy, 2003-06-29
 body ORIENTSKY                 /orient-sky\.com/
 describe ORIENTSKY             Japanese spam
@@ -67,9 +68,10 @@ score CANDYHOS               5
 
 # blarson 2005-12-08
 # don 2007-11-21 -- combine other rule; increment score
-body GEOCITIES         /http\:\/\/.*geocities/i
-describe GEOCITIES     geocities url
-score GEOCITIES                2.5
+# don 2009-02-17 -- increase score even more; ditch http
+uri GEOCITIES          /geocities/i
+describe GEOCITIES     geocities uri
+score GEOCITIES                3
 
 # blarson 2005-12-24
 body EMPTYURL          /\bhttp:\/\/(?:www\.)?$/i
@@ -121,8 +123,8 @@ body PENPRO         /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medical
 describe PENPRO                penmailpro spam
 score PENPRO           3.5
 
-# blarson 2007-09-05 2007-09-11
-body WWWCN             /\b(?:www\.|https?\:.*)\w+\.cn\b/i
+# blarson 2007-09-05 2007-09-11 2009-04-12
+body WWWCN             /\b(?:www\.|https?\:.*)(\w|-|\.)+\.cn\b/i
 describe WWWCN         chinese web site
 score WWWCN            3
 
@@ -503,3 +505,65 @@ score STUPIDURL           2.5
 body SUGARCOM          /\b(?:indicatesugar|industryexpect|eset)\.com\b/
 describe SUGARCOM      indicatesugar.com
 score SUGARCOM         4
+
+# blarson 2008-07-22
+body VIEWMOVIE         /\/(?:(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default|gowatch|showvideo|livestreaming|top|whatsup|tophot|lol|first|index1|1)\.html\b|(?:video|news2\/)\s*$)/
+describe VIEWMOVIE     tabiloid style spam
+score VIEWMOVIE                3
+
+# blarson 2008-07-22
+uri OPERAMAIL          /\bwww\.opera\.com\/mail\//
+describe OPERAMAIL     opera.com mail
+score OPERAMAIL                1
+
+# blarson 2008-08-09
+body NOSITE            /http:\/\/\//
+describe NOSITE                http URL with no site
+score NOSITE           2
+
+# don 2008-09-04
+uri TIECORRECT         /tiecorrect\.com/
+describe TIECORRECT    Contains a tiecorrect.com uri
+score TIECORRECT       4
+
+# don 2009-02-04
+body FOURMINUTI                /4minuti/
+describe FOURMINUTI    Spam from 4 minuti
+score FOURMINUTI       3
+
+# don 2009-02-09
+uri CREDITREPORTURI    /creditreport/
+describe CREDITREPORTURI Credit report in the url isn't good
+score CREDITREPORTURI   2
+
+uri YAARIURI            /yaari.com/i
+describe YAARIURI       Contains a yaari.com uri
+score YAARIURI          3
+
+uri MALADIRET           /maladiretaemails/
+describe MALADIRET      Contains a maladiret uri
+score MALADIRET                 5
+
+uri DEBRICOLAJE                 /debricolaje/i
+describe DEBRICOLAJE    Contains a debricolaje url
+score DEBRICOLAJE       6
+
+# blarson 2009-05-02
+uri    ISUISSE         /\bisuisse\.com/
+describe ISUISSE       isuisse.com
+score ISUISSE          4
+
+# formorer 2010-01-23
+header LEXCHANGE       subject =~ /(?:for|4)\s+L[i1]nks?\s+E?xcha?nge/i
+describe LEXCHANGE     ask for link exchange
+score LEXCHANGE                4
+
+# don 2010-03-16
+uri EMAILSPARKLE       /emailsparkle.com/
+describe EMAILSPARKLE  emailsparkle.com uri
+score EMAILSPARKLE     4
+
+# don 2011-10-3
+uri MULTIPLYCOM                /multiply.com/
+describe MULTIPLYCOM   multiply.com uri
+score MULTIPLYCOM      3