X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=946e9692a1709ead6e81421a983eec131088eec5;hp=57c233b2747c32bc9f65d2a45995e638160eefd8;hb=4a013b0adb0b2174024daa8dc71e302bf2690827;hpb=652703901508da38854d07b3b53b6d231eff175f

diff --git a/common/url_spam b/common/url_spam
index 57c233b..946e969 100644
--- a/common/url_spam
+++ b/common/url_spam
@@ -115,13 +115,13 @@ body BESTLOANS		/www.bestmortloans.com/i
 describe BESTLOANS	Best loans url
 score BESTLOANS		2
 
-# blarson 2007-07-22
-body PENPRO		/\@penmailpro\.info\b/i
+# blarson 2007-07-22 2007-09-12
+body PENPRO		/\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
 describe PENPRO		penmailpro spam
 score PENPRO		3.5
 
-# blarson 2007-09-05
-body WWWCN		/\bwww\.\w+\.cn\b/i
+# blarson 2007-09-05 2007-09-11
+body WWWCN		/\b(?:www\.|https?\:.*)\w+\.cn\b/i
 describe WWWCN		chinese web site
 score WWWCN		3
 
@@ -135,3 +135,159 @@ body JUSTYAK			/www\.JustYak\.com/
 describe JUSTYAK		JustSpam
 score JUSTYAK			4.0
 
+# blarson 2007-09-10
+body SIZMATZ		/\bsize-matterz\.com\b/i
+describe SIZMATZ	size matterz
+score SIZMATZ		3
+
+# blarson 2007-09-10
+body EMAGX		/\bhttp\:\/\/emagx\.net\b/i
+describe EMAGX		wondercum spammer
+score EMAGX		3.5
+
+# blarson 2007-09-13
+body FREENFL		/\bhttp\:\/\/freeNFLtracker\.com\b/i
+describe FREENFL	nfl spam
+score FREENFL		3
+
+# blarson 2007-09-13
+body SPAMARREST		/\bhttp\:\/\/www\.spamarrest\.com\b/
+describe SPAMARREST	forwards thier spam problem
+score SPAMARREST	4
+
+# blarson 2007-09-14
+body FROMAD		/\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe)\.com\b/i
+describe FROMAD		more penis spam
+score FROMAD		4
+
+# blarson 2007-09-14
+uridnsbl URIBL_CNKR	cn-kr.blackholes.us.	A
+body	URIBL_CNKR	eval:check_uridnsbl('URIBL_CNKR')
+describe URIBL_CNKR	china or korea hosted web site
+tflags	URIBL_CNKR	net
+score URIBL_CNKR	2.5
+
+# blarson 2007-09-14
+uridnsbl_skip_domain	debian.org debian.net
+
+# blarson 2007-09-14
+uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
+body            URIBL_SBL       eval:check_uridnsbl('URIBL_SBL')
+describe        URIBL_SBL       Contains an URL listed in the SBL blocklist
+tflags          URIBL_SBL       net
+#reuse          URIBL_SBL
+score		URIBL_SBL	3.5
+
+# blarson 2007-09-17
+body MYCHEAP		/\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
+describe MYCHEAP	software spam
+score MYCHEAP		4
+
+# blarson 2007-09-16
+body WWWRU		/\b(?:www\.|https?\:.*)\w+\.ru\b/i
+describe WWWRU		russian web site
+score WWWRU		2
+
+# blarson 2007-09-24
+body VIPSMS		/\bvipsms\.org\b/i
+describe VIPSMS		vipsms.org
+score VIPSMS		4
+
+# don 2007-10-01
+header MAKEUP		subject =~ /makeup\.com/i
+describe MAKEUP		makeup.com url
+score MAKEUP		3
+
+# blarson 2007-10-04
+body SUBT		/\bsubtracthold\.com\b/i
+describe SUBT		subtracthold.com
+score SUBT		4
+
+body GRAPHICMAIL	/\bhttp\:\/\/www\.graphicmail\.de\b/i
+describe GRAPHICMAIL	graphicmail.de
+score	GRAPHICMAIL	4
+
+
+body WWWRO		/\b(?:www\.|https?\:.*)\w+\.ro\b/i
+describe WWWRO		romanian web site
+score WWWRO		2
+
+# blarson 2007-10-10
+body CLEANDOM		/http\:\/\/\{_clean_domains\}/
+describe CLEANDOM	broken spamware
+score CLEANDOM		4
+
+# blarson 2007-10-11
+body SOFTNLSE		/\bsoftnlse\s*\.\s*com\b/i
+describe SOFTNLSE	softnlse.com
+score SOFTNLSE		4
+
+# blarson 2007-10-13
+body MUSVID		/\b(?:MusicAndVideoWorld|usa-bestsellers)\.com/i
+describe MUSVID		MusicAndVideoWorld.com
+score MUSVID		4
+
+# blarson 2007-10-16
+body PLATSOFT		/\btheplatinumsoft\.com\b/i
+describe PLATSOFT	theplatinumsoft.com
+score PLATSOFT		4
+
+# blarson 2007-10-22
+body BLOGSPOT		/\bblogspot\.com\b/i
+describe BLOGSPOT	spammers are hosting on blogspot
+score BLOGSPOT		2
+
+# blarson 2007-10-25
+body PILLUS		/PILL-US\.COM\b/i
+describe PILLUS		PILL-US spam
+score PILLUS		4
+
+# blarson 2007-10-25
+body BETWEENTO		/\bhttp\:\/\/betweento\.com\b/i
+describe BETWEENTO	betweento.com
+score BETWEENTO		4
+
+# don 2007-10-25
+body MASZON		/mc?a(szon|yvidol|ttk)\.(com|org|net)/i
+describe MASZON		pron spam
+score MASZON		4
+
+# blarson 2007-10-26
+full GEOCITIES		/\bhttp\:\/\/geocities\.com\b/i
+describe GEOCITIES	http://geocities.com/
+score GEOCITIES		1
+
+# blarson 2007-10-27
+body GMAIL		/\@gmail\.com\b/i
+describe GMAIL		@gmail.com
+score GMAIL		1
+
+# blarson 2007-10-28
+body MAILRU		/\@mail\.ru\b/i
+describe MAILRU		@mail.ru
+score MAILRU		3
+
+# blarson 2007-10-31
+body ADOBE4LESS		/\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
+describe ADOBE4LESS	adobe4less . com
+score ADOBE4LESS	4
+
+# blarson 2007-11-01
+body RMAPPLY		/http\:\/\/rmapply\.com\b/i
+describe RMAPPLY	http://rmapply.com
+score RMAPPLY		4
+
+# blarson 2007-11-04
+header HANOIFASH	subject =~ /WWW\.HANOI-FASHION\.COM/i
+describe HANOIFASH	WWW.HANOI-FASHION.COM
+score HANOIFASH		4
+
+# blarson 2007-11-06
+body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear)\s*\.\s*com\b/i
+describe ONLINEMED	onlinemedicalkey.com
+score ONLINEMED		4
+
+# blarson 2007-11-15
+body GETUP		/\bgetupgradednow\.com\b/i
+describe GETUP		getupgradednow.com
+score GETUP		4