X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=23d89a963ac7a3fc5867c9c22a011e31240402eb;hp=81c7e88ec0e87cca7aee1a767a795842bdc02ecd;hb=a14d7ef4250c12826c4d906fcab953821ca6294d;hpb=64da135334e1d5bcfb271e11b38571ac27875083 diff --git a/common/misc_spam b/common/misc_spam index 81c7e88..23d89a9 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -19,6 +19,11 @@ body GUEBDE /http\:\/\/www\.gueb\.de\// describe GUEBDE www.geub.de score GUEBDE 5 +# Don 2008-06-27 +rawbody PGPSIGNATURE /-----BEGIN PGP SIGNATURE-----/ +describe PGPSIGNATURE Has a pgp signature (may not be valid, but who cares?) +score PGPSIGNATURE -5 + # TODO: The rules below seem to be very similar; possibly fix them. @@ -320,3 +325,39 @@ score YAHOOCALENDAR 4 header BOUNDARYID content-type =~ /\bboundary\=\"Boundary_\(ID_/ describe BOUNDARYID spamware boundary score BOUNDARYID 0.6 + +# blarson 2008-07-02 +body GBKXWFLXF /\bgbkxwflxf\b/ +describe GBKXWFLXF gbkxwflxf +score GBKXWFLXF 5 + +# blarson 2008-09-07 +body LUKSUS /\bluksus\b/i +score LUKSUS 4 +describe LUKSUS Luksus + +# blarson 2008-09-22 +header XIRONPORT X-IronPort-Anti-Spam-Filtered =~ /true/ +describe XIRONPORT claims to be ironport filtered +score XIRONPORT 2.5 + +# blarson 2008-10-13 +header AUTORESPON subject =~ /Auto_response/ +describe AUTORESPON Auto_response +score AUTORESPON 3 + +# blarson 2008-10-28 +header XWUM x-wum-to =~ /./ +describe XWUM X-WUM-TO +score XWUM 2 + +# cord 2008-10-31 +# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff +header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/ +describe STATIC_RIMA_TDE static IP from rima-tde.net +score STATIC_RIMA_TDE -5 + +# cord 2008-11-30 # compensate LDO_SUBSCRIBER bonus for Forum2Mail-Gw +full NABBLE /lists\@nabble\.com/ +describe NABBLE sent through nabble.com +score NABBLE 5