X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=1165f158636a1d413e15c46b9993023143e7eb63;hp=81c7e88ec0e87cca7aee1a767a795842bdc02ecd;hb=3963552e4d22ea96a5e0dbf1f3f009bfe1839736;hpb=64da135334e1d5bcfb271e11b38571ac27875083 diff --git a/common/misc_spam b/common/misc_spam index 81c7e88..1165f15 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -19,6 +19,11 @@ body GUEBDE /http\:\/\/www\.gueb\.de\// describe GUEBDE www.geub.de score GUEBDE 5 +# Don 2008-06-27 +rawbody PGPSIGNATURE /-----BEGIN PGP SIGNATURE-----/ +describe PGPSIGNATURE Has a pgp signature (may not be valid, but who cares?) +score PGPSIGNATURE -5 + # TODO: The rules below seem to be very similar; possibly fix them. @@ -320,3 +325,45 @@ score YAHOOCALENDAR 4 header BOUNDARYID content-type =~ /\bboundary\=\"Boundary_\(ID_/ describe BOUNDARYID spamware boundary score BOUNDARYID 0.6 + +# blarson 2008-07-02 +body GBKXWFLXF /\bgbkxwflxf\b/ +describe GBKXWFLXF gbkxwflxf +score GBKXWFLXF 5 + +# blarson 2008-09-07 +body LUKSUS /\bluksus\b/i +score LUKSUS 4 +describe LUKSUS Luksus + +# blarson 2008-09-22 +header XIRONPORT X-IronPort-Anti-Spam-Filtered =~ /true/ +describe XIRONPORT claims to be ironport filtered +score XIRONPORT 2.5 + +# blarson 2008-10-13 +header AUTORESPON subject =~ /Auto_response/ +describe AUTORESPON Auto_response +score AUTORESPON 3 + +# blarson 2008-10-28 +header XWUM x-wum-to =~ /./ +describe XWUM X-WUM-TO +score XWUM 2 + +# cord 2008-10-31 +# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff +header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/ +describe STATIC_RIMA_TDE static IP from rima-tde.net +score STATIC_RIMA_TDE -5 + +# cord 2008-11-30 # compensate LDO_SUBSCRIBER bonus for Forum2Mail-Gw +full NABBLE /lists\@nabble\.com/ +describe NABBLE sent through nabble.com +score NABBLE 5 + +# don 2009-02-04 +full HTML_NBSP /(\ ){3,}/ +describe HTML_NBSP Lots of   +score HTML_NBSP 2 +