X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=30032e4c9b27a7049cfa4a1491c7f45cdae70cd0;hp=a1a211e7d067be5a1a917bea55367b21466de513;hb=6bb9a2a665430bf7c44e23c3d91ddf37b09b072a;hpb=7fcf11cf9520c2ba3f2d686bfd9a3b9124019d18 diff --git a/common/url_spam b/common/url_spam index a1a211e..30032e4 100644 --- a/common/url_spam +++ b/common/url_spam @@ -66,9 +66,10 @@ describe CANDYHOS spams from korea, hosts in japan score CANDYHOS 5 # blarson 2005-12-08 +# don 2007-11-21 -- combine other rule; increment score body GEOCITIES /http\:\/\/.*geocities/i describe GEOCITIES geocities url -score GEOCITIES 1.6 +score GEOCITIES 2.5 # blarson 2005-12-24 body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i @@ -168,7 +169,7 @@ tflags URIBL_CNKR net score URIBL_CNKR 2.5 # blarson 2007-09-14 -uridnsbl_skip_domain debian.org debian.net +uridnsbl_skip_domain debian.org debian.net yahoo.com google.com # blarson 2007-09-14 uridnsbl URIBL_SBL sbl.spamhaus.org. A @@ -252,10 +253,6 @@ body MASZON /mc?a(szon|yvidol|ttk)\.(com|org|net)/i describe MASZON pron spam score MASZON 4 -# blarson 2007-10-26 -full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i -describe GEOCITIES http://geocities.com/ -score GEOCITIES 1 # blarson 2007-10-27 body GMAIL /\@gmail\.com\b/i @@ -283,7 +280,7 @@ describe HANOIFASH WWW.HANOI-FASHION.COM score HANOIFASH 4 # blarson 2007-11-06 -body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth)\s*\.\s*com\b/i +body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i describe ONLINEMED onlinemedicalkey.com score ONLINEMED 4 @@ -291,3 +288,25 @@ score ONLINEMED 4 body GETUP /\bgetupgradednow\.com\b/i describe GETUP getupgradednow.com score GETUP 4 + +# blarson (pusling's idea) 2007-11-16 +body SPACECOM /^[\w\d]+\s\.\scom\b/ +describe SPACECOM whatever . com +score SPACECOM 3 + +# blarson 2007-11-20 +uridnsbl URIBL_FLO flowgoaway.com. A +body URIBL_FLO eval:check_uridnsbl('URIBL_FLO') +describe URIBL_FLO web site in flowgoaway.com +tflags URIBL_FLO net +score URIBL_FLO 1 + +# blarson 2007-11-20 +body SOFTROU /\bwww\.softrou\.com\b/i +describe SOFTROU www.softrou.com +score SOFTROU 3 + +# blarson 2007-11-20 +body GOOGLEPAGES /\bgooglepages\.com\b/i +describe GOOGLEPAGES spammers use googlepages +score GOOGLEPAGES 2