X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fphrase_spam;h=bb7d71ecd715bd5c11e5a5e22266658743ec82c2;hp=e264f2d4d9ae37052785002403e07dbac034a348;hb=d6e9cadda6ebc0595e16f8691ecebf12fc825d0f;hpb=812dc177a20dcbd6377ae1efa98c92d57a944728

diff --git a/common/phrase_spam b/common/phrase_spam
index e264f2d..bb7d71e 100644
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -1,3 +1,4 @@
+# -*- mode: spamassassin -*-
 # Added some rules from Rule du Jour that I've been testing for a while
 
 #Monotone (from airmax.cf)
@@ -873,6 +874,10 @@ header INVITATIONFROM	subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i
 describe INVITATIONFROM	Invitation from Spammer
 score INVITATIONFROM	5
 
+header INVITESYOU	subject =~ /^[\w\s]+invites\s+you\s+to[\w\s]+$/i
+describe INVITESYOU	Invites me with spam
+score INVITESYOU	5
+
 # blarson 2008-04-28
 header RERE		subject =~ /^Re\:\s+Re\:\s+/i
 describe RERE		Re: Re:
@@ -904,6 +909,116 @@ describe SCOUR		Scour invite from some spammer
 score SCOUR		3
 
 # don 2008-09-04
-body  YOURNAME		/\d+\)\s*y+o+u+r+\s*n+a+m+e+/
+body  YOURNAME		/\d+\)\s*y+o+u+r+\s*n+a+m+e+/i
 describe YOURNAME	1) your name is spam
 score YOURNAME		3
+
+# blarson 2008-12-11
+header TWITTER		subject =~ /you on Twitter/
+describe TWITTER	Twitter invite spam
+score TWITTER		4
+
+# don 2008-12-18
+uri DOS_LIVE_SPACES_CID	/cid-.{10,20}\.spaces\.live\.com/
+describe DOS_LIVE_SPACES_CID	live spaces uri
+score DOS_LIVE_SPACES_CID	3
+
+# don 2008-12-18
+header CHRISTMAS	subject =~ /chris+tma+s (pleasure+|night)/i
+describe CHRISTMAS	Does christmas really give you pleasure?
+score CHRISTMAS		2
+
+# cord 2008-12-27 (transfered from rc.spam)
+# don 2010-07-18 (decrease score from 4 to 2.5 for false positives)
+full AWARD_WINNING	/Award win/i
+describe AWARD_WINNING	Award win(ning); we don't believe that it is
+score AWARD_WINNING	2.5
+
+# don 2009-01-10
+header LINKEDIN		from =~ /linkedin\.com/
+describe LINKEDIN	Linked in spam
+score LINKEDIN		4
+
+# don 2009-02-02
+header	LIFECHANGERS	from =~ /lifechangers/
+describe LIFECHANGERS	Life changers spam
+score LIFECHANGERS	4
+
+# don 2009-02-05
+header WINESEASON	subject =~ /Wine\s*Season\s*Promo/i
+describe WINESEASON	Wine season spam
+score WINESEASON	3
+
+# don 2009-02-05
+header JOINMEON		subject =~ /(?:friend request|join me) on/i
+describe JOINMEON	Lets not join you on anything
+score JOINMEON		2
+
+# don 2009-02-09
+header ABOUTAPARTMENT	subject =~/about\s*the\s*apartment/i
+describe ABOUTAPARTMENT	We don't care about apartments
+score ABOUTAPARTMENT	2
+
+# don 2009-02-14
+header YARISUBJECT	subject =~ /\byari\b/i
+describe YARISUBJECT	Contains YARI in the subject
+score YARISUBJECT	2
+
+# don 2009-03-03
+body HTMLCOMPATIBLE	/html\s+compatible\s+(?:e-?mail)?\s*(?:viewer|client)/i
+describe HTMLCOMPATIBLE	If you want us to use an HTML compatible viewer, we don't want your mail.
+score HTMLCOMPATIBLE	3
+
+# zobel 2009-08-31
+header AYDA10KILO	subject =~ /Ayda 10 Kilo Vermek Istermisiniz/i
+describe AYDA10KILO     We don't care about Ayda 10 Kilo Vermek
+score AYDA10KILO        4
+
+# don 2010-08-21
+body CANNOTVIEW		/cannot\s+view\s+this\s+email/i
+describe CANNOTVIEW	If we cannot view this email, it must be spam
+score CANNOTVIEW	4
+
+# don 2010-09-24
+header AAVEHICLE	subject =~ /vehicle check report/i
+describe AAVEHICLE	The AA Vehicle check report is broken
+score AAVEHICLE		4
+
+# don 2010-12-27
+header MODERNART	X-BeenThere =~ /group1\@modernartmagazine.com/i
+describe MODERNART	Broken mailing list spamers
+score MODERNART		5
+
+# formorer 2011-01-07
+header NYPOSTCARD	subject =~ /New Year postcard/i
+describe NYPOSTCARD	Enough New Year cards for 2011
+score	NYPOSTCARD 	4
+
+
+# don 2011-01-24
+header   BIZZBOOSTER	from =~ /bizzbooster/i
+describe BIZZBOOSTER	From bizzbooster
+score	 BIZZBOOSTER	5
+
+# don 2011-09-22
+header QUOTAEXP		subject =~ /mail\s+account(.+)quot[ae]\s+limit/
+describe QUOTAEXP	Exceeded quota limit
+score QUOTAEXP		4
+
+# don 2011-09-22
+body SEOBODY		/search\s+engine\s+traffic/
+describe SEOBODY	Body contains SEO terms
+score SEOBODY		1
+
+header SEOSUBJECT	subject =~ /\bseo\b/i
+describe SEOSUBJECT	Subject contains SEO terms
+score SEOSUBJECT	1
+
+meta SEOMETA		(SEOBODY && SEOSUBJECT)
+describe SEOMETA	Matches both SEOBODY and SEOSUBJECT
+score SEOMETA		3
+
+body WEBINAR		/webinar/i
+describe WEBINAR	Contains webinar
+score WEBINAR		2
+