X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=9fb44a41fabb93b105f18692c490574790acf1d6;hp=1641a3dd06e3a2f7f8684f5aa078d5b566dbd605;hb=e34629fb3ce7e02d47c1c0be61f2d1a8729ba36f;hpb=bae9f77537c76cd539ec4111aae4d68180ed0963 diff --git a/common/misc_spam b/common/misc_spam index 1641a3d..9fb44a4 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -19,6 +19,11 @@ body GUEBDE /http\:\/\/www\.gueb\.de\// describe GUEBDE www.geub.de score GUEBDE 5 +# Don 2008-06-27 +rawbody PGPSIGNATURE /-----BEGIN PGP SIGNATURE-----/ +describe PGPSIGNATURE Has a pgp signature (may not be valid, but who cares?) +score PGPSIGNATURE -5 + # TODO: The rules below seem to be very similar; possibly fix them. @@ -300,3 +305,39 @@ score ITXS 4 rawbody TINYFONT /\bFONT-SIZE\:\s+[123]px\;/i describe TINYFONT tiny font specified score TINYFONT 3 + +# blarson 2008-04-03 +rawbody ZIPFILE /\bfilename\=.*\.zip\b/i +describe ZIPFILE zipfile attachment +score ZIPFILE 0.5 + +# blarson 2008-04-19 +header SPACESUB subject =~ /^\s\w/ +describe SPACESUB extra space before subject +score SPACESUB 0.5 + +# don 2008-05-04 +header YAHOOCALENDAR X-Yahoo-Newman-Property: =~ /calendar-invite/i +describe YAHOOCALENDAR Calendar invite from yahoo; broken captcha +score YAHOOCALENDAR 4 + +# blarson 2008-06-03 +header BOUNDARYID content-type =~ /\bboundary\=\"Boundary_\(ID_/ +describe BOUNDARYID spamware boundary +score BOUNDARYID 0.6 + +# blarson 2008-07-02 +body GBKXWFLXF /\bgbkxwflxf\b/ +describe GBKXWFLXF gbkxwflxf +score GBKXWFLXF 5 + +# cord 2008-10-31 +# compensate false-positives for 140.Red-80-25-20.staticIP.rima-tde.net and stuff +header STATIC_RIMA_TDE received =~ /staticIP\.rima-tde\.net/ +describe STATIC_RIMA_TDE static IP from rima-tde.net +score STATIC_RIMA_TDE -5 + +# cord 2008-11-30 # compensate LDO_SUBSCRIBER bonus for Forum2Mail-Gw +header NABBLE /lists\@nabble.com/ +describe NABBLE sent through nabble.com +score NABBLE 5