X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=1fd858ff6570e803b2c7cee0ebf0faeeccd8eda4;hp=946e9692a1709ead6e81421a983eec131088eec5;hb=0cdaf21fb478802c6886dab48aaeab58f0cb61bb;hpb=4a013b0adb0b2174024daa8dc71e302bf2690827

diff --git a/common/url_spam b/common/url_spam
index 946e969..1fd858f 100644
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS	spams from korea, hosts in japan
 score CANDYHOS		5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES		/http\:\/\/.*geocities/i
 describe GEOCITIES	geocities url
-score GEOCITIES		1.6
+score GEOCITIES		2.5
 
 # blarson 2005-12-24
 body EMPTYURL		/\bhttp:\/\/(?:www\.)?$/i
@@ -168,7 +169,7 @@ tflags	URIBL_CNKR	net
 score URIBL_CNKR	2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain	debian.org debian.net
+uridnsbl_skip_domain	debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -252,10 +253,6 @@ body MASZON		/mc?a(szon|yvidol|ttk)\.(com|org|net)/i
 describe MASZON		pron spam
 score MASZON		4
 
-# blarson 2007-10-26
-full GEOCITIES		/\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES	http://geocities.com/
-score GEOCITIES		1
 
 # blarson 2007-10-27
 body GMAIL		/\@gmail\.com\b/i
@@ -283,7 +280,7 @@ describe HANOIFASH	WWW.HANOI-FASHION.COM
 score HANOIFASH		4
 
 # blarson 2007-11-06
-body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear)\s*\.\s*com\b/i
+body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
 describe ONLINEMED	onlinemedicalkey.com
 score ONLINEMED		4
 
@@ -291,3 +288,66 @@ score ONLINEMED		4
 body GETUP		/\bgetupgradednow\.com\b/i
 describe GETUP		getupgradednow.com
 score GETUP		4
+
+# blarson (pusling's idea) 2007-11-16
+body SPACECOM		/^[\w\d]+\s\.\scom\b/
+describe SPACECOM	whatever . com
+score SPACECOM		3
+
+# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
+# blarson 2007-11-20
+# uridnsbl URIBL_FLO	flowgoaway.com.	A
+# body	URIBL_FLO	eval:check_uridnsbl('URIBL_FLO')
+# describe URIBL_FLO	web site in flowgoaway.com
+# tflags	URIBL_FLO	net
+# score URIBL_FLO		1
+
+# blarson 2007-11-20
+body SOFTROU		/\bwww\.softrou\.com\b/i
+describe SOFTROU	www.softrou.com
+score SOFTROU		3
+
+# blarson 2007-11-20
+body GOOGLEPAGES	/\bgooglepages\.com\b/i
+describe GOOGLEPAGES	spammers use googlepages
+score GOOGLEPAGES	2
+
+# blarson 2007-12-07
+body SOFTBESTGRAND	/\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
+describe SOFTBESTGRAND	softbestgrand.com
+score SOFTBESTGRAND	4
+
+# blarson 2007-12-10
+body PCSOFTCHEAP	/\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xprimesoftware|xpxmas|cheap2008soft|xprimeeasy|snowysoftware|2008adobe)\s?\.\s?(?:com|net)\b/
+describe PCSOFTCHEAP	pcsoftcheap. com
+score PCSOFTCHEAP	4
+
+# blarson 2007-12-11
+body GOLDGAME		/\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
+describe GOLDGAME	gambling sites
+score GOLDGAME		4
+
+# blarson 2007-12-14
+body ENLARGETW		/\b(?:enlarge|0rz)\.tw\b/
+describe ENLARGETW	enlarge.tw
+score ENLARGETW		4
+
+# blarson 2007-12-15
+body POSTTHROUGH	/\b(?:postthrough|speedgrand|certaincoast)\.com\b/
+describe POSTTHROUGH	postthrough.com
+score POSTTHROUGH	4
+
+# blarson 2007-12-25
+body UHAVE		/\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh)cards?(?:2008)?\.com\b/
+describe UHAVE		uhavepostcard.com
+score UHAVE		4
+
+# blarson 2007-12-26
+body RUSSWIFE		/\byourrussianwife\.info\b/
+describe RUSSWIFE	yourrussianwife.info
+score RUSSWIFE		4
+
+# blarson 2007-12-31
+body HAPPY2008		/\b(?:happy2008toyou|hellosanta2008|hohoho2008)\.com\b/
+describe HAPPY2008	happy2008toyou.com
+score HAPPY2008		4