X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=7a35d5ce603bf683e1b4262737b95801c1a35cf6;hp=1968f10507efcc680e11f44fcb65a44002779ba7;hb=686845f117df24b4705450e6f3530cb32d0b7b89;hpb=edb74a23049ef5a4486335fbf0e8e55aac248d2b

diff --git a/common/url_spam b/common/url_spam
index 1968f10..7a35d5c 100644
--- a/common/url_spam
+++ b/common/url_spam
@@ -1,3 +1,4 @@
+# -*- mode: spamassassin -*-
 # joy, 2003-06-29
 body ORIENTSKY			/orient-sky\.com/
 describe ORIENTSKY		Japanese spam
@@ -67,9 +68,10 @@ score CANDYHOS		5
 
 # blarson 2005-12-08
 # don 2007-11-21 -- combine other rule; increment score
-body GEOCITIES		/http\:\/\/.*geocities/i
-describe GEOCITIES	geocities url
-score GEOCITIES		2.5
+# don 2009-02-17 -- increase score even more; ditch http
+uri GEOCITIES		/geocities/i
+describe GEOCITIES	geocities uri
+score GEOCITIES		3
 
 # blarson 2005-12-24
 body EMPTYURL		/\bhttp:\/\/(?:www\.)?$/i
@@ -300,7 +302,7 @@ describe SOFTBESTGRAND	softbestgrand.com
 score SOFTBESTGRAND	4
 
 # blarson 2007-12-10
-body PCSOFTCHEAP	/\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less)\s?\.\s?(?:com|net)\b/
+body PCSOFTCHEAP	/\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less|lun(?:soft|oem|software)|(?:new|fast)xp(?:soft|oem|software)|frukanoka|softcheap(?:n[eo]w|xp)|adobe(?:web|blog|new)(?:soft|spot|deal))\s?\.\s?(?:com|net)\b/
 describe PCSOFTCHEAP	pcsoftcheap. com
 score PCSOFTCHEAP	4
 
@@ -453,3 +455,87 @@ score JANEHOT		3
 rawbody BIFUTRA		/\b(?:bifutra|veriapoli|xenifeao|toporaig|jieros|bifreca|werikine|incroomise|genbullenst|writeprovide)(?:\.|\=2E)com\b/
 describe BIFUTRA	spammer web sites
 score BIFUTRA		4
+
+# don 2008-04-02
+body LONGLINEURL	/^.{55,}\S\shttp:\/\/www\.\w+\.(?:com|net|org)\/\s*$/
+describe LONGLINEURL	long line ending in a simple url
+score LONGLINEURL	2
+
+# don 2008-04-07
+uri MYTHANKYOUURI	/www\.mythankyou\.com/i
+describe MYTHANKYOUURI	www.mythankyou.com
+score MYTHANKYOUURI	5
+
+# blarson 2008-04-09
+uri SAMEAS		/\bsupersameas\.com\b/
+describe SAMEAS		supersameas.com
+score SAMEAS		3
+
+# blarson 2008-04-12
+body URIEXE		/\bhttp:\S*\.exe\b/
+describe URIEXE		.exe url
+score URIEXE		3
+
+# blarson 2008-04-24
+uri SANSATION		/\b(?:sansationel|garmenys|iconaliste)\.com\b/i
+describe SANSATION	sansationel.com
+score SANSATION		4
+
+# blarson 2008-05-04
+body EQMEDS		/\beqmeds\b/i
+describe EQMEDS		eqmeds
+score EQMEDS		4
+
+# blarson 2008-05-06
+uri MYLIVE			/\bmylivegi\b/i
+describe MYLIVE		mylivegirlx.com
+score MYLIVE		4
+
+# don 2008-05-26
+body BROKENURL		/^\s*www((\s+\.\s*)|(\s*\.\+))\S+((\s+\.\s*)|(\s*\.\+))(com|net|org)\s*$/
+describe BROKENURL	Broken url displayed
+score BROKENURL		4
+
+# don 2008-06-13
+body STUPIDURL         /\w+\[\w+\](?:com|net|org)/
+describe STUPIDURL     No one will guess that fooo[DOT]com is an URL!
+score STUPIDURL	       2.5
+
+# blarson 2008-06-16
+body SUGARCOM		/\b(?:indicatesugar|industryexpect|eset)\.com\b/
+describe SUGARCOM	indicatesugar.com
+score SUGARCOM		4
+
+# blarson 2008-07-22
+body VIEWMOVIE		/\/(?:(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default|gowatch|showvideo|livestreaming|top|whatsup|tophot|lol|first|index1|1)\.html\b|(?:video|news2\/)\s*$)/
+describe VIEWMOVIE	tabiloid style spam
+score VIEWMOVIE		3
+
+# blarson 2008-07-22
+uri OPERAMAIL		/\bwww\.opera\.com\/mail\//
+describe OPERAMAIL	opera.com mail
+score OPERAMAIL		1
+
+# blarson 2008-08-09
+body NOSITE		/http:\/\/\//
+describe NOSITE		http URL with no site
+score NOSITE		2
+
+# don 2008-09-04
+uri TIECORRECT		/tiecorrect\.com/
+describe TIECORRECT	Contains a tiecorrect.com uri
+score TIECORRECT	4
+
+# don 2009-02-04
+body 4MINUTI		/4minuti/
+describe 4MINUTI	Spam from 4 minuti
+score 4MINUTI		3
+
+# don 2009-02-09
+uri CREDITREPORTURI	/creditreport/
+describe CREDITREPORTURI Credit report in the url isn't good
+score CREDITREPORTURI	 2
+
+uri YAARIURI		 /yaari.com/i
+describe YAARIURI	 Contains a yaari.com uri
+score YARRIURI		 3