disable flowgoaway RBL

[spamassassin_config.git] / common / url_spam

diff --git a/common/url_spam b/common/url_spam
index 627273344b828f3f453ea7677e6664b4633173d2..bb76063f19d4bc73d06913877c98510a6784d066 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS    spams from korea, hosts in japan
 score CANDYHOS         5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES         /http\:\/\/.*geocities/i
 describe GEOCITIES     geocities url
-score GEOCITIES                1.6
+score GEOCITIES                2.5
 
 # blarson 2005-12-24
 body EMPTYURL          /\bhttp:\/\/(?:www\.)?$/i
@@ -168,7 +169,7 @@ tflags      URIBL_CNKR      net
 score URIBL_CNKR       2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain   debian.org debian.net
+uridnsbl_skip_domain   debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -179,7 +180,7 @@ tflags          URIBL_SBL       net
 score          URIBL_SBL       3.5
 
 # blarson 2007-09-17
-body MYCHEAP           /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?(?:(?:4|for)?less)?\s*\.\s*com\b/i
+body MYCHEAP           /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
 describe MYCHEAP       software spam
 score MYCHEAP          4
 
@@ -252,10 +253,6 @@ body MASZON                /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
 describe MASZON                pron spam
 score MASZON           4
 
-# blarson 2007-10-26
-full GEOCITIES         /\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES     http://geocities.com/
-score GEOCITIES                1
 
 # blarson 2007-10-27
 body GMAIL             /\@gmail\.com\b/i
@@ -283,6 +280,34 @@ describe HANOIFASH WWW.HANOI-FASHION.COM
 score HANOIFASH                4
 
 # blarson 2007-11-06
-body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*)\.com\b/i
+body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
 describe ONLINEMED     onlinemedicalkey.com
 score ONLINEMED                4
+
+# blarson 2007-11-15
+body GETUP             /\bgetupgradednow\.com\b/i
+describe GETUP         getupgradednow.com
+score GETUP            4
+
+# blarson (pusling's idea) 2007-11-16
+body SPACECOM          /^[\w\d]+\s\.\scom\b/
+describe SPACECOM      whatever . com
+score SPACECOM         3
+
+# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
+# blarson 2007-11-20
+# uridnsbl URIBL_FLO   flowgoaway.com. A
+# body URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
+# describe URIBL_FLO   web site in flowgoaway.com
+# tflags       URIBL_FLO       net
+# score URIBL_FLO              1
+
+# blarson 2007-11-20
+body SOFTROU           /\bwww\.softrou\.com\b/i
+describe SOFTROU       www.softrou.com
+score SOFTROU          3
+
+# blarson 2007-11-20
+body GOOGLEPAGES       /\bgooglepages\.com\b/i
+describe GOOGLEPAGES   spammers use googlepages
+score GOOGLEPAGES      2