X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fauto_response_spam;h=d29d4f63adc2b4856f0fe791dcc77fc191886d9c;hp=a78aba53629757b969ac4f29a7f2824999e67582;hb=bb32e99bfc6ba43254b0ae5ffd56b24e8c730561;hpb=4cbb1e86273811dd5d98cea12edf0da4f268103e

diff --git a/common/auto_response_spam b/common/auto_response_spam
index a78aba5..d29d4f6 100644
--- a/common/auto_response_spam
+++ b/common/auto_response_spam
@@ -11,20 +11,40 @@ describe QMAILBOUNCE	Stupid qmail bounces; we don't want them
 score QMAILBOUNCE	2
 
 # don 2009-02-05 (the following are all for various stupid auto-repsonse things)
-header RECEIVEDMAIL	subject =~ /(?:received\s*your\s*mail|(?:respuesta|risposta) autom.tica)/i
+header RECEIVEDMAIL	subject =~ /(?:received\s*your\s*mail|(?:respuesta|risposta|response) (?:autom.tica|automatic)|auto(?:matic|m.tica)?\s*(?:respuesta|risposta|response))/i
 describe RECEIVEDMAIL	It's great that you've received our mail and automatically responded. We don't care
 score RECEIVEDMAIL	4
 
+body AUTOREBOD		/(?:received\s*your\s*mail|(?:(?:respuesta|risposta|response|message) auto(?:m.tica?|mated)?)|auto(?:m.tica?|mated)?\s*(?:respuesta|risposta|response|message))/i
+describe AUTOREBOD	It's great that you've automatically responded
+score AUTOREBOD		4
+
 header YOURMESSAGE	subject =~ /your message/i
 describe YOURMESSAGE	It's great that our message did something; we don't care
 score YOURMESSAGE	2.5
 
+body YOURMESSAGEBOD	/^Your message/i
+describe YOURMESSAGEBOD	It's great that our message did something; we don't care
+score YOURMESSAGEBOD	2.5
+
+body NODELIVERY		/(?:could not be|has not been) delivered/i
+describe NODELIVERY	We don't care if it could be or has not been delivered
+score NODELIVERY	1.5
+
+body NORESEND		/do not resend your original message/i
+describe NORESEND	If you don't want us to resend our message, why tell us?
+score NORESEND		2
+
+header PROOFPOINT	from =~ /proofpoint/
+describe PROOFPOINT	Automatic mail from proofpoint (some MTA thingie)
+score PROOFPOINT	3.5
+
 body  NOTPROCBOUNCE	/was not processed by our system/i
 describe NOTPROCBOUNCE	Bounce by system that was not processed
 score NOTPROCBOUNCE	2
 
-body ACCOUNTNOTEXIST	/account\s+\S+\s+(does\s*not|doesn't)\s*exist/
-describe ACCOUNTNOTEXIST	It's not our problem if an account doesn't eixst
+body ACCOUNTNOTEXIST	/(?:account\s+\S+\s+(does\s*not|doesn't)\s*exist|(?:invalid|not a valid) e-?mail address)/i
+describe ACCOUNTNOTEXIST	It's not our problem if an account doesn't exist
 score ACCOUNTNOTEXIST		2
 
 body CR_SYSTEM1		/sent by a human and not a computer/i
@@ -51,6 +71,14 @@ header CR_SYSTEM6	subject =~ /^confirm\:/i
 describe CR_SYSTEM6	Subject asks us to confirm something; we don't want to
 score CR_SYSTEM6	2
 
+header CR_SYSTEM7	x-cr-puzzleid =~ /./i
+describe CR_SYSTEM7	Has a X-cr-puzzleid: header
+score CR_SYSTEM7	5
+
+body CR_SYSTEM8		/reply to this message/i
+describe CR_SYSTEM8	Reply to this message? are you crazy?
+score CR_SYSTEM8	3
+
 body SUPPORTMAIL1	/assigned a ticket/
 describe SUPPORTMAIL1	Message from an automated support/response system
 score SUPPORTMAIL1	2
@@ -67,10 +95,9 @@ body SUPPORTMAIL4	/(reached an unmonitored e-mail address|no response will be gi
 describe SUPPORTMAIL4	Yeay for dumb auto-response bots that don't want a response
 score SUPPORTMAIL4	1.5
 
-header SUPPORTMAIL5	from =~ /\bsupport\@/i
-describe SUPPORTMAIL5	Message from an address that looks like support@
-score SUPPORTMAIL5	1.5
-
+header SUPPORTMAIL5	from =~ /\b(?:support|info)\@/i
+describe SUPPORTMAIL5	Message from an address that looks like support@ or info@
+score SUPPORTMAIL5	2
 
 header FROMAUTOREPLY 	from =~ /(autoreply|no-?repl(?:y|ies))/i
 describe FROMAUTOREPLY	Message from an autoreplier or something who doesn't seem to want a reply
@@ -80,8 +107,12 @@ header FROMABUSE	from =~ /\babbuse\@/i
 describe FROMABUSE	Message from abbuse@somedomain
 score FROMABUSE		1.5
 
-header SUBJECTSPAM	subject =~ /\*\*\s*spam\s*\*\*/i
-describe SUBJECTSPAM	Subject contains **spam**, so it's probably spam
+header FROMSPAMCOP	from =~ /spamcop\@/i
+describe FROMSPAMCOP	Message from spamcop@somedomain
+score FROMSPAMCOP	3.5
+
+header SUBJECTSPAM	subject =~ /(?:\*\*|\[)\s*spam\s*(?:\*\*|\])/i
+describe SUBJECTSPAM	Subject contains **spam** or [spam], so it's probably spam
 score SUBJECTSPAM	3.5
 
 header MESBLOCKED	subject =~ /your message (?:is )?blocked/i
@@ -91,3 +122,19 @@ score	 MESBLOCKED	2
 header FAILDELIVERY	subject =~ /failed to deliver/i
 describe FAILDELIVERY	Oh noes! You failed to deliver spam!
 score FAILDELIVERY	2
+
+header NEWADDRESS	subject =~ /(?:new e-?mail address|deaktivierung der mailadresse)/i
+describe NEWADDRESS	We don't care that you have a new e-mail address
+score NEWADDRESS	4
+
+header VACATIONMAIL1	user-agent =~ /vacation/i
+describe VACATIONMAIL1	Mail from the vacation user agent
+score VACATIONMAIL1	0.1
+
+header VACATIONMAIL2	X-Vacation =~ /./
+describe VACATIONMAIL2	Has an X-Vacation header
+score VACATIONMAIL2	0.1
+
+meta  VACATIONMAIL	(VACATIONMAIL1 || VACATIONMAIL2)
+describe VACATIONMAIL	Looks like a vacation message
+score VACATIONMAIL	1
\ No newline at end of file