X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=23d89a963ac7a3fc5867c9c22a011e31240402eb;hp=6223627ad91a31ecb6255519babc6bc6b0c57942;hb=36cbf824a8ef7c5523e5e1aafc20b957b50db6d1;hpb=794ba501e9d195a6ec8d5717d6cb897af9a794de diff --git a/common/misc_spam b/common/misc_spam index 6223627..23d89a9 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -19,6 +19,11 @@ body GUEBDE /http\:\/\/www\.gueb\.de\// describe GUEBDE www.geub.de score GUEBDE 5 +# Don 2008-06-27 +rawbody PGPSIGNATURE /-----BEGIN PGP SIGNATURE-----/ +describe PGPSIGNATURE Has a pgp signature (may not be valid, but who cares?) +score PGPSIGNATURE -5 + # TODO: The rules below seem to be very similar; possibly fix them. @@ -315,3 +320,44 @@ score SPACESUB 0.5 header YAHOOCALENDAR X-Yahoo-Newman-Property: =~ /calendar-invite/i describe YAHOOCALENDAR Calendar invite from yahoo; broken captcha score YAHOOCALENDAR 4 + +# blarson 2008-06-03 +header BOUNDARYID content-type =~ /\bboundary\=\"Boundary_\(ID_/ +describe BOUNDARYID spamware boundary +score BOUNDARYID 0.6 + +# blarson 2008-07-02 +body GBKXWFLXF /\bgbkxwflxf\b/ +describe GBKXWFLXF gbkxwflxf +score GBKXWFLXF 5 + +# blarson 2008-09-07 +body LUKSUS /\bluksus\b/i +score LUKSUS 4 +describe LUKSUS Luksus + +# blarson 2008-09-22 +header XIRONPORT X-IronPort-Anti-Spam-Filtered =~ /true/ +describe XIRONPORT claims to be ironport filtered +score XIRONPORT 2.5 + +# blarson 2008-10-13 +header AUTORESPON subject =~ /Auto_response/ +describe AUTORESPON Auto_response +score AUTORESPON 3 + +# blarson 2008-10-28 +header XWUM x-wum-to =~ /./ +describe XWUM X-WUM-TO +score XWUM 2 + +# cord 2008-10-31 +# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff +header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/ +describe STATIC_RIMA_TDE static IP from rima-tde.net +score STATIC_RIMA_TDE -5 + +# cord 2008-11-30 # compensate LDO_SUBSCRIBER bonus for Forum2Mail-Gw +full NABBLE /lists\@nabble\.com/ +describe NABBLE sent through nabble.com +score NABBLE 5