X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=30032e4c9b27a7049cfa4a1491c7f45cdae70cd0;hp=6b43b4f95c708eb8e8ac9eef695c54540423e260;hb=6bb9a2a665430bf7c44e23c3d91ddf37b09b072a;hpb=f7dc9fe44d9934f943761b46bbbcc687fb7be41c

diff --git a/common/url_spam b/common/url_spam
index 6b43b4f..30032e4 100644
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS	spams from korea, hosts in japan
 score CANDYHOS		5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES		/http\:\/\/.*geocities/i
 describe GEOCITIES	geocities url
-score GEOCITIES		1.6
+score GEOCITIES		2.5
 
 # blarson 2005-12-24
 body EMPTYURL		/\bhttp:\/\/(?:www\.)?$/i
@@ -116,7 +117,7 @@ describe BESTLOANS	Best loans url
 score BESTLOANS		2
 
 # blarson 2007-07-22 2007-09-12
-body PENPRO		/\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell)\.info\b/i
+body PENPRO		/\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
 describe PENPRO		penmailpro spam
 score PENPRO		3.5
 
@@ -168,7 +169,7 @@ tflags	URIBL_CNKR	net
 score URIBL_CNKR	2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain	debian.org debian.net
+uridnsbl_skip_domain	debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -179,7 +180,7 @@ tflags          URIBL_SBL       net
 score		URIBL_SBL	3.5
 
 # blarson 2007-09-17
-body MYCHEAP		/\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?\s*\.\s*com\b/i
+body MYCHEAP		/\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
 describe MYCHEAP	software spam
 score MYCHEAP		4
 
@@ -236,3 +237,76 @@ score PLATSOFT		4
 body BLOGSPOT		/\bblogspot\.com\b/i
 describe BLOGSPOT	spammers are hosting on blogspot
 score BLOGSPOT		2
+
+# blarson 2007-10-25
+body PILLUS		/PILL-US\.COM\b/i
+describe PILLUS		PILL-US spam
+score PILLUS		4
+
+# blarson 2007-10-25
+body BETWEENTO		/\bhttp\:\/\/betweento\.com\b/i
+describe BETWEENTO	betweento.com
+score BETWEENTO		4
+
+# don 2007-10-25
+body MASZON		/mc?a(szon|yvidol|ttk)\.(com|org|net)/i
+describe MASZON		pron spam
+score MASZON		4
+
+
+# blarson 2007-10-27
+body GMAIL		/\@gmail\.com\b/i
+describe GMAIL		@gmail.com
+score GMAIL		1
+
+# blarson 2007-10-28
+body MAILRU		/\@mail\.ru\b/i
+describe MAILRU		@mail.ru
+score MAILRU		3
+
+# blarson 2007-10-31
+body ADOBE4LESS		/\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
+describe ADOBE4LESS	adobe4less . com
+score ADOBE4LESS	4
+
+# blarson 2007-11-01
+body RMAPPLY		/http\:\/\/rmapply\.com\b/i
+describe RMAPPLY	http://rmapply.com
+score RMAPPLY		4
+
+# blarson 2007-11-04
+header HANOIFASH	subject =~ /WWW\.HANOI-FASHION\.COM/i
+describe HANOIFASH	WWW.HANOI-FASHION.COM
+score HANOIFASH		4
+
+# blarson 2007-11-06
+body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
+describe ONLINEMED	onlinemedicalkey.com
+score ONLINEMED		4
+
+# blarson 2007-11-15
+body GETUP		/\bgetupgradednow\.com\b/i
+describe GETUP		getupgradednow.com
+score GETUP		4
+
+# blarson (pusling's idea) 2007-11-16
+body SPACECOM		/^[\w\d]+\s\.\scom\b/
+describe SPACECOM	whatever . com
+score SPACECOM		3
+
+# blarson 2007-11-20
+uridnsbl URIBL_FLO	flowgoaway.com.	A
+body	URIBL_FLO	eval:check_uridnsbl('URIBL_FLO')
+describe URIBL_FLO	web site in flowgoaway.com
+tflags	URIBL_FLO	net
+score URIBL_FLO		1
+
+# blarson 2007-11-20
+body SOFTROU		/\bwww\.softrou\.com\b/i
+describe SOFTROU	www.softrou.com
+score SOFTROU		3
+
+# blarson 2007-11-20
+body GOOGLEPAGES	/\bgooglepages\.com\b/i
+describe GOOGLEPAGES	spammers use googlepages
+score GOOGLEPAGES	2