X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=bb76063f19d4bc73d06913877c98510a6784d066;hp=e938258e731d8ce74131b5379bf845f58ad488d2;hb=a41f744a1d96220e3c83279cdcbdf83b773cf6b8;hpb=8a22a55bc937824a7d826d15d1f284a9c7e11175 diff --git a/common/url_spam b/common/url_spam index e938258..bb76063 100644 --- a/common/url_spam +++ b/common/url_spam @@ -66,9 +66,10 @@ describe CANDYHOS spams from korea, hosts in japan score CANDYHOS 5 # blarson 2005-12-08 +# don 2007-11-21 -- combine other rule; increment score body GEOCITIES /http\:\/\/.*geocities/i describe GEOCITIES geocities url -score GEOCITIES 1.6 +score GEOCITIES 2.5 # blarson 2005-12-24 body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i @@ -168,7 +169,7 @@ tflags URIBL_CNKR net score URIBL_CNKR 2.5 # blarson 2007-09-14 -uridnsbl_skip_domain debian.org debian.net +uridnsbl_skip_domain debian.org debian.net yahoo.com google.com # blarson 2007-09-14 uridnsbl URIBL_SBL sbl.spamhaus.org. A @@ -252,10 +253,6 @@ body MASZON /mc?a(szon|yvidol|ttk)\.(com|org|net)/i describe MASZON pron spam score MASZON 4 -# blarson 2007-10-26 -full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i -describe GEOCITIES http://geocities.com/ -score GEOCITIES 1 # blarson 2007-10-27 body GMAIL /\@gmail\.com\b/i @@ -283,7 +280,7 @@ describe HANOIFASH WWW.HANOI-FASHION.COM score HANOIFASH 4 # blarson 2007-11-06 -body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i +body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i describe ONLINEMED onlinemedicalkey.com score ONLINEMED 4 @@ -295,4 +292,22 @@ score GETUP 4 # blarson (pusling's idea) 2007-11-16 body SPACECOM /^[\w\d]+\s\.\scom\b/ describe SPACECOM whatever . com -score SPACECOM 2 +score SPACECOM 3 + +# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?) +# blarson 2007-11-20 +# uridnsbl URIBL_FLO flowgoaway.com. A +# body URIBL_FLO eval:check_uridnsbl('URIBL_FLO') +# describe URIBL_FLO web site in flowgoaway.com +# tflags URIBL_FLO net +# score URIBL_FLO 1 + +# blarson 2007-11-20 +body SOFTROU /\bwww\.softrou\.com\b/i +describe SOFTROU www.softrou.com +score SOFTROU 3 + +# blarson 2007-11-20 +body GOOGLEPAGES /\bgooglepages\.com\b/i +describe GOOGLEPAGES spammers use googlepages +score GOOGLEPAGES 2