X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fphrase_spam;h=63401e7abc2045e4e1101c4823f0d1a74dd9b9b9;hp=4fc618a55d61d6fd8d03d169d839bedf183f445f;hb=2c50b4a0861f83e732214ec8bdab1cd40a9c8c85;hpb=e9d517ac93e26ef8e16ae3083d961d1659818615 diff --git a/common/phrase_spam b/common/phrase_spam index 4fc618a..63401e7 100644 --- a/common/phrase_spam +++ b/common/phrase_spam @@ -90,6 +90,14 @@ header ONEWORD subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i describe ONEWORD one word subject score ONEWORD 2 +rawbody ONEWORDBODY /^\s*\S+\s*$/s +describe ONEWORDBODY One word body +score ONEWORDBODY 2 + +meta ONEWORDALL (ONEWORD && ONEWORDBODY) +describe ONEWORDALL Both subject and body contain one word +score ONEWORDALL 4 + # robot101, 2003-09-22 header CROSSWALK X-UnityUser =~ /^Crosswalk.com, Inc/ describe CROSSWALK Crosswalk bible mailing list @@ -663,7 +671,7 @@ score HOLIDAYHERE 3 # blarson 2007-11-22 header CAPINIT subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-\']+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/ describe CAPINIT Capinit Every Word -score CAPINIT 3 +score CAPINIT 1.5 # blarson 2007-11-23 body REMOVESPACE /\b(?:remove|w\/o|without|delete) spaces?\b/i @@ -870,12 +878,12 @@ describe SUMHERE summer is here score SUMHERE 3 # don 2008-04-24 -header INVITATIONFROM subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i +header INVITATIONFROM subject =~ /^\s*(Invitation|Invitaci.n)\s*(from|curso)\s*\w+\s*$/i describe INVITATIONFROM Invitation from Spammer score INVITATIONFROM 5 -header INVITESYOU subject =~ /^[\w\s]+invites\s+you\s+to[\w\s]+$/i -describe INVITESYOU Invites me with spam +header INVITESYOU subject =~ /^[\w\s]+(invites|communicates\s+with)\s+you\s+(to|about)[\w\s]+$/i +describe INVITESYOU Invites or communicates me with spam score INVITESYOU 5 # blarson 2008-04-28 @@ -985,6 +993,77 @@ describe AAVEHICLE The AA Vehicle check report is broken score AAVEHICLE 4 # don 2010-12-27 -header MODERNART X-BeenThere =~ /group1@modernartmagazine.com/i +header MODERNART X-BeenThere =~ /group1\@modernartmagazine.com/i describe MODERNART Broken mailing list spamers score MODERNART 5 + +# formorer 2011-01-07 +header NYPOSTCARD subject =~ /New Year postcard/i +describe NYPOSTCARD Enough New Year cards for 2011 +score NYPOSTCARD 4 + + +# don 2011-01-24 +header BIZZBOOSTER from =~ /bizzbooster/i +describe BIZZBOOSTER From bizzbooster +score BIZZBOOSTER 5 + +# don 2011-09-22 +header QUOTAEXP subject =~ /mail\s+account(.+)quot[ae]\s+limit/ +describe QUOTAEXP Exceeded quota limit +score QUOTAEXP 4 + +# don 2011-09-22 +body SEOBODY /search\s+engine\s+traffic/ +describe SEOBODY Body contains SEO terms +score SEOBODY 1 + +header SEOSUBJECT subject =~ /\bseo\b/i +describe SEOSUBJECT Subject contains SEO terms +score SEOSUBJECT 1 + +meta SEOMETA (SEOBODY && SEOSUBJECT) +describe SEOMETA Matches both SEOBODY and SEOSUBJECT +score SEOMETA 3 + +body WEBINAR /webinar/i +describe WEBINAR Contains webinar +score WEBINAR 2 + + +header TRIALVERSION subject =~ /trial\s*version/i +describe TRIALVERSION Trial version in subject +score TRIALVERSION 3 + +header SHARESPAM subject =~ /shared photos with you/i +describe SHARESPAM shares photos +score SHARESPAM 3 + +header MYNAMEIS subject =~ /hello(.*)my name is/i +describe MYNAMEIS Name spam +score MYNAMEIS 2.5 + +# formorer 2012-02-28 +header VOTREANN Subject =~ /(votre|Petites) annonce/i +describe VOTREANN Votre annonce +score VOTREANN 4 + +# formorer 2010-01-23 +header LEXCHANGE subject =~ /(?:for|4)\s+L[i1]nks?\s+E?xcha?nge/i +describe LEXCHANGE ask for link exchange +score LEXCHANGE 4 + +# formorer 2013-11-08 +header IMARKETING subject =~ /integrated marketing/i +describe IMARKETING integrated marketing +score IMARKETING 4 + +header LYMBOOMATH subject =~ /Lymboo Math/i +describe LYMBOOMATH Lymboo Math spam +score LYMBOOMATH 4 + +# formorer 2014-05-26 +header JOB_DE1 subject =~ /(Freie Stellen|Stellenbeschreibungen)/ +describe JOB_DE1 german job spam +score JOB_DE1 4 +