X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fphrase_spam;h=853842665be50ad772ec7d31683226d271103c08;hp=cffe96c5014cdffa193fe9b7a318ded624dd8c93;hb=2414ab40f59bb0805ec0ba6b27f0d2626ec362cf;hpb=ecd799cba01921cb33a12cbbd1d5c4a15d3f7281

diff --git a/common/phrase_spam b/common/phrase_spam
index cffe96c..8538426 100644
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -90,7 +90,7 @@ header ONEWORD		subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
 describe ONEWORD	one word subject
 score ONEWORD		2
 
-body ONEWORDBODY	/^\s*\S+\s*$/s
+rawbody ONEWORDBODY	/^\s*\S+\s*$/s
 describe ONEWORDBODY 	One word body
 score ONEWORDBODY	2
 
@@ -671,7 +671,7 @@ score HOLIDAYHERE	3
 # blarson 2007-11-22
 header CAPINIT		subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-\']+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
 describe CAPINIT	Capinit Every Word
-score CAPINIT		3
+score CAPINIT		0.5
 
 # blarson 2007-11-23
 body REMOVESPACE	/\b(?:remove|w\/o|without|delete) spaces?\b/i
@@ -855,7 +855,7 @@ score ITCSTORE		4
 # blarson 2008-03-26
 header GENDER		subject =~ /\b(?:she|her|wom[ae]n|m[ae]n|girls?|males?|females?|herself|wife|ladies|lady|wives|(?:girl|boy)friends?)\b/i
 describe GENDER		gender pronoun in subject
-score GENDER		1
+score GENDER		0.5
 
 # blarson 2008-03-28
 body REBODY		/^re\:\s/
@@ -1031,3 +1031,88 @@ describe WEBINAR	Contains webinar
 score WEBINAR		2
 
 
+header TRIALVERSION	subject =~ /trial\s*version/i
+describe TRIALVERSION	Trial version in subject
+score TRIALVERSION	3
+
+header SHARESPAM	subject =~ /shared photos with you/i
+describe SHARESPAM 	shares photos
+score SHARESPAM		3
+
+header MYNAMEIS		subject =~ /hello(.*)my name is/i
+describe MYNAMEIS	Name spam
+score	MYNAMEIS	2.5
+
+# formorer 2012-02-28
+header VOTREANN     Subject =~ /(votre|Petites) annonce/i
+describe VOTREANN   Votre annonce
+score VOTREANN      4
+
+# formorer 2010-01-23
+header LEXCHANGE 	subject =~ /(?:for|4)\s+L[i1]nks?\s+E?xcha?nge/i
+describe LEXCHANGE	ask for link exchange
+score LEXCHANGE		4
+
+# formorer 2013-11-08
+header IMARKETING   subject =~ /integrated marketing/i
+describe IMARKETING integrated marketing
+score IMARKETING    4
+
+header LYMBOOMATH   subject =~ /Lymboo Math/i
+describe LYMBOOMATH Lymboo Math spam
+score LYMBOOMATH    4
+
+# formorer 2014-05-26
+header JOB_DE1      subject =~ /(Freie Stellen|Stellenbeschreibungen)/
+describe JOB_DE1    german job spam
+score JOB_DE1       4
+
+header TODAYSHOW    subject =~ /Today Show/i
+describe TODAYSHOW  the today show
+score TODAYSHOW     4
+
+header LEADS    subject =~ /business leads/i
+describe LEADS  business leads
+score LEADS     4
+
+header CLIENTS subject =~ /need more clients/i
+describe CLIENTS need more clients
+score CLIENTS 4
+
+body SEOCONS      /SEO Consultant/i
+score SEOCONS     3
+describe SEOCONS  SEO Consultant
+
+body SEOISSUES      /major issues with your website/i
+score SEOISSUES     2.5
+describe SEOISSUES  Major issues with your website
+
+body SEOCOM /SEO Company/i
+score SEOCOM 2.5
+describe SEOCOM SEO Company
+
+# rince 2017-03-30
+header USERSLIST_HEADER1 Subject =~ /\bUsers\bList/i
+describe USERSLIST_HEADER1 Check wether Subject contains 'Users List'
+rawbody USERSLIST_BODY1 /\<div dir=3D\"ltr\"\>\<p class=3D\"MsoNormal\" style=3D\"background-image:/
+describe USERSLIST_BODY1 First potential Spam reconnaissance: style of HTML
+rawbody USERSLIST_BODY2 /\<\/span\>\<span style=3D\"color\:rgb\(219,219,219\)\"\>If you don=E2=80=99t want/
+describe USERSLIST_BODY2 second potential Spam reconnaissance: style of HTML
+rawbody USERSLIST_BODY3 /A Quick Follow up to you that if you are interested in/i
+describe USERSLIST_BODY3 third potential Spam reconnaissance: text phrases
+rawbody USERSLIST_BODY4 /we also have other technology users like: aws, tripod seat, Jira,/i
+describe USERSLIST_BODY4 fourth potential Spam reconnaissance: text phrases
+rawbody USERSLIST_BODY5 /Please let me know your thoughts so that I can send you cost of the list./i
+describe USERSLIST_BODY5 fifth potential Spam reconnaissance: text phrases
+meta META_USERSLIST (( USERSLIST_HEADER1 + USERSLIST_BODY1 + USERSLIST_BODY2 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY3 + USERSLIST_BODY4 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY5 )  > 1 )
+describe META_USERSLIST Question for a Users List
+score META_USERSLIST 0.5
+
+# rince 2017-04-11
+header OWNERSLIST_HEADER1 Subject =~ /\bOwners\bList/i
+describe OWNERSLIST_HEADER1 Check wether Subject contains 'Owners List'
+rawbody OWNERSLIST_BODY1 /The list of contacts are \*opt\-in verified\*/
+describe OWNERSLIST_BODY1 First potential Spam reconnaissance: verified opt-in lists
+meta META_OWNERSLIST ( (OWNERSLIST_HEADER1 + OWNERSLIST_BODY1 ) >1 )
+describe META_OWNERSLIST Questions for an Owners List
+score META_OWNERSLIST 0.5