X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=bb76063f19d4bc73d06913877c98510a6784d066;hp=9fb5b520232c9ad6021574e82efc7aed6c82702b;hb=a41f744a1d96220e3c83279cdcbdf83b773cf6b8;hpb=ca2a6eaf067f68deb80e9376f692cd7e995c84b5 diff --git a/common/url_spam b/common/url_spam index 9fb5b52..bb76063 100644 --- a/common/url_spam +++ b/common/url_spam @@ -66,9 +66,10 @@ describe CANDYHOS spams from korea, hosts in japan score CANDYHOS 5 # blarson 2005-12-08 +# don 2007-11-21 -- combine other rule; increment score body GEOCITIES /http\:\/\/.*geocities/i describe GEOCITIES geocities url -score GEOCITIES 1.6 +score GEOCITIES 2.5 # blarson 2005-12-24 body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i @@ -168,7 +169,7 @@ tflags URIBL_CNKR net score URIBL_CNKR 2.5 # blarson 2007-09-14 -uridnsbl_skip_domain debian.org debian.net +uridnsbl_skip_domain debian.org debian.net yahoo.com google.com # blarson 2007-09-14 uridnsbl URIBL_SBL sbl.spamhaus.org. A @@ -179,7 +180,7 @@ tflags URIBL_SBL net score URIBL_SBL 3.5 # blarson 2007-09-17 -body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i +body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i describe MYCHEAP software spam score MYCHEAP 4 @@ -252,10 +253,6 @@ body MASZON /mc?a(szon|yvidol|ttk)\.(com|org|net)/i describe MASZON pron spam score MASZON 4 -# blarson 2007-10-26 -full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i -describe GEOCITIES http://geocities.com/ -score GEOCITIES 1 # blarson 2007-10-27 body GMAIL /\@gmail\.com\b/i @@ -283,6 +280,34 @@ describe HANOIFASH WWW.HANOI-FASHION.COM score HANOIFASH 4 # blarson 2007-11-06 -body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd)\s*\.\s*com\b/i +body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i describe ONLINEMED onlinemedicalkey.com score ONLINEMED 4 + +# blarson 2007-11-15 +body GETUP /\bgetupgradednow\.com\b/i +describe GETUP getupgradednow.com +score GETUP 4 + +# blarson (pusling's idea) 2007-11-16 +body SPACECOM /^[\w\d]+\s\.\scom\b/ +describe SPACECOM whatever . com +score SPACECOM 3 + +# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?) +# blarson 2007-11-20 +# uridnsbl URIBL_FLO flowgoaway.com. A +# body URIBL_FLO eval:check_uridnsbl('URIBL_FLO') +# describe URIBL_FLO web site in flowgoaway.com +# tflags URIBL_FLO net +# score URIBL_FLO 1 + +# blarson 2007-11-20 +body SOFTROU /\bwww\.softrou\.com\b/i +describe SOFTROU www.softrou.com +score SOFTROU 3 + +# blarson 2007-11-20 +body GOOGLEPAGES /\bgooglepages\.com\b/i +describe GOOGLEPAGES spammers use googlepages +score GOOGLEPAGES 2