X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=38f72eb74a199f33875ae59fb759865cc82ccb37;hp=40c7bd34b0338cdaeb22e89aecc56707191d1f44;hb=bb32e99bfc6ba43254b0ae5ffd56b24e8c730561;hpb=5ee4927b41c0fd80142e16bcb50e7a837cdb68e7 diff --git a/common/url_spam b/common/url_spam index 40c7bd3..38f72eb 100644 --- a/common/url_spam +++ b/common/url_spam @@ -1,3 +1,4 @@ +# -*- mode: spamassassin -*- # joy, 2003-06-29 body ORIENTSKY /orient-sky\.com/ describe ORIENTSKY Japanese spam @@ -67,9 +68,10 @@ score CANDYHOS 5 # blarson 2005-12-08 # don 2007-11-21 -- combine other rule; increment score -body GEOCITIES /http\:\/\/.*geocities/i -describe GEOCITIES geocities url -score GEOCITIES 2.5 +# don 2009-02-17 -- increase score even more; ditch http +uri GEOCITIES /geocities/i +describe GEOCITIES geocities uri +score GEOCITIES 3 # blarson 2005-12-24 body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i @@ -121,8 +123,8 @@ body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medical describe PENPRO penmailpro spam score PENPRO 3.5 -# blarson 2007-09-05 2007-09-11 -body WWWCN /\b(?:www\.|https?\:.*)\w+\.cn\b/i +# blarson 2007-09-05 2007-09-11 2009-04-12 +body WWWCN /\b(?:www\.|https?\:.*)(\w|-|\.)+\.cn\b/i describe WWWCN chinese web site score WWWCN 3 @@ -300,7 +302,7 @@ describe SOFTBESTGRAND softbestgrand.com score SOFTBESTGRAND 4 # blarson 2007-12-10 -body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less|lun(?:soft|oem|software)|(?:new|fast)xp(?:soft|oem|software)|frukanoka)\s?\.\s?(?:com|net)\b/ +body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less|lun(?:soft|oem|software)|(?:new|fast)xp(?:soft|oem|software)|frukanoka|softcheap(?:n[eo]w|xp)|adobe(?:web|blog|new)(?:soft|spot|deal))\s?\.\s?(?:com|net)\b/ describe PCSOFTCHEAP pcsoftcheap. com score PCSOFTCHEAP 4 @@ -459,7 +461,94 @@ body LONGLINEURL /^.{55,}\S\shttp:\/\/www\.\w+\.(?:com|net|org)\/\s*$/ describe LONGLINEURL long line ending in a simple url score LONGLINEURL 2 -# don 2008-04-03 +# don 2008-04-07 uri MYTHANKYOUURI /www\.mythankyou\.com/i describe MYTHANKYOUURI www.mythankyou.com -score MYTHANKYOUURI 3 +score MYTHANKYOUURI 5 + +# blarson 2008-04-09 +uri SAMEAS /\bsupersameas\.com\b/ +describe SAMEAS supersameas.com +score SAMEAS 3 + +# blarson 2008-04-12 +body URIEXE /\bhttp:\S*\.exe\b/ +describe URIEXE .exe url +score URIEXE 3 + +# blarson 2008-04-24 +uri SANSATION /\b(?:sansationel|garmenys|iconaliste)\.com\b/i +describe SANSATION sansationel.com +score SANSATION 4 + +# blarson 2008-05-04 +body EQMEDS /\beqmeds\b/i +describe EQMEDS eqmeds +score EQMEDS 4 + +# blarson 2008-05-06 +uri MYLIVE /\bmylivegi\b/i +describe MYLIVE mylivegirlx.com +score MYLIVE 4 + +# don 2008-05-26 +body BROKENURL /^\s*www((\s+\.\s*)|(\s*\.\+))\S+((\s+\.\s*)|(\s*\.\+))(com|net|org)\s*$/ +describe BROKENURL Broken url displayed +score BROKENURL 4 + +# don 2008-06-13 +body STUPIDURL /\w+\[\w+\](?:com|net|org)/ +describe STUPIDURL No one will guess that fooo[DOT]com is an URL! +score STUPIDURL 2.5 + +# blarson 2008-06-16 +body SUGARCOM /\b(?:indicatesugar|industryexpect|eset)\.com\b/ +describe SUGARCOM indicatesugar.com +score SUGARCOM 4 + +# blarson 2008-07-22 +body VIEWMOVIE /\/(?:(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default|gowatch|showvideo|livestreaming|top|whatsup|tophot|lol|first|index1|1)\.html\b|(?:video|news2\/)\s*$)/ +describe VIEWMOVIE tabiloid style spam +score VIEWMOVIE 3 + +# blarson 2008-07-22 +uri OPERAMAIL /\bwww\.opera\.com\/mail\// +describe OPERAMAIL opera.com mail +score OPERAMAIL 1 + +# blarson 2008-08-09 +body NOSITE /http:\/\/\// +describe NOSITE http URL with no site +score NOSITE 2 + +# don 2008-09-04 +uri TIECORRECT /tiecorrect\.com/ +describe TIECORRECT Contains a tiecorrect.com uri +score TIECORRECT 4 + +# don 2009-02-04 +body FOURMINUTI /4minuti/ +describe FOURMINUTI Spam from 4 minuti +score FOURMINUTI 3 + +# don 2009-02-09 +uri CREDITREPORTURI /creditreport/ +describe CREDITREPORTURI Credit report in the url isn't good +score CREDITREPORTURI 2 + +uri YAARIURI /yaari.com/i +describe YAARIURI Contains a yaari.com uri +score YAARIURI 3 + +uri MALADIRET /maladiretaemails/ +describe MALADIRET Contains a maladiret uri +score MALADIRET 5 + +uri DEBRICOLAJE /debricolaje/i +describe DEBRICOLAJE Contains a debricolaje url +score DEBRICOLAJE 6 + +# blarson 2009-05-02 +uri ISUISSE /\bisuisse\.com/ +describe ISUISSE isuisse.com +score ISUISSE 4