X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=bfe6dc43393755ec94b0bffc2dd0aaa6002abb1b;hp=627273344b828f3f453ea7677e6664b4633173d2;hb=15e8c786455bae45a18d16dfa703ff851b208b46;hpb=09c0e55ec8b47b9a8037a813960a1bfe0f64b136 diff --git a/common/url_spam b/common/url_spam index 6272733..bfe6dc4 100644 --- a/common/url_spam +++ b/common/url_spam @@ -66,9 +66,10 @@ describe CANDYHOS spams from korea, hosts in japan score CANDYHOS 5 # blarson 2005-12-08 +# don 2007-11-21 -- combine other rule; increment score body GEOCITIES /http\:\/\/.*geocities/i describe GEOCITIES geocities url -score GEOCITIES 1.6 +score GEOCITIES 2.5 # blarson 2005-12-24 body EMPTYURL /\bhttp:\/\/(?:www\.)?$/i @@ -116,7 +117,7 @@ describe BESTLOANS Best loans url score BESTLOANS 2 # blarson 2007-07-22 2007-09-12 -body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i +body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld|NaturalImprove|charmshine)\.info\b/i describe PENPRO penmailpro spam score PENPRO 3.5 @@ -168,7 +169,7 @@ tflags URIBL_CNKR net score URIBL_CNKR 2.5 # blarson 2007-09-14 -uridnsbl_skip_domain debian.org debian.net +uridnsbl_skip_domain debian.org debian.net yahoo.com google.com # blarson 2007-09-14 uridnsbl URIBL_SBL sbl.spamhaus.org. A @@ -179,7 +180,7 @@ tflags URIBL_SBL net score URIBL_SBL 3.5 # blarson 2007-09-17 -body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?(?:(?:4|for)?less)?\s*\.\s*com\b/i +body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i describe MYCHEAP software spam score MYCHEAP 4 @@ -252,10 +253,6 @@ body MASZON /mc?a(szon|yvidol|ttk)\.(com|org|net)/i describe MASZON pron spam score MASZON 4 -# blarson 2007-10-26 -full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i -describe GEOCITIES http://geocities.com/ -score GEOCITIES 1 # blarson 2007-10-27 body GMAIL /\@gmail\.com\b/i @@ -283,6 +280,104 @@ describe HANOIFASH WWW.HANOI-FASHION.COM score HANOIFASH 4 # blarson 2007-11-06 -body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*)\.com\b/i +body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i describe ONLINEMED onlinemedicalkey.com score ONLINEMED 4 + +# blarson 2007-11-15 +body GETUP /\bgetupgradednow\.com\b/i +describe GETUP getupgradednow.com +score GETUP 4 + +# blarson (pusling's idea) 2007-11-16 +body SPACECOM /^[\w\d]+\s\.\scom\b/ +describe SPACECOM whatever . com +score SPACECOM 3 + +# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?) +# blarson 2007-11-20 +# uridnsbl URIBL_FLO flowgoaway.com. A +# body URIBL_FLO eval:check_uridnsbl('URIBL_FLO') +# describe URIBL_FLO web site in flowgoaway.com +# tflags URIBL_FLO net +# score URIBL_FLO 1 + +# blarson 2007-11-20 +body SOFTROU /\bwww\.softrou\.com\b/i +describe SOFTROU www.softrou.com +score SOFTROU 3 + +# blarson 2007-11-20 +body GOOGLEPAGES /\bgooglepages\.com\b/i +describe GOOGLEPAGES spammers use googlepages +score GOOGLEPAGES 2 + +# blarson 2007-12-07 +body SOFTBESTGRAND /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/ +describe SOFTBESTGRAND softbestgrand.com +score SOFTBESTGRAND 4 + +# blarson 2007-12-10 +body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow)\s?\.\s?(?:com|net)\b/ +describe PCSOFTCHEAP pcsoftcheap. com +score PCSOFTCHEAP 4 + +# blarson 2007-12-11 +body GOLDGAME /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/ +describe GOLDGAME gambling sites +score GOLDGAME 4 + +# blarson 2007-12-14 +body ENLARGETW /\b(?:enlarge|0rz)\.tw\b/ +describe ENLARGETW enlarge.tw +score ENLARGETW 4 + +# blarson 2007-12-15 +body POSTTHROUGH /\b(?:postthrough|speedgrand|certaincoast)\.com\b/ +describe POSTTHROUGH postthrough.com +score POSTTHROUGH 4 + +# blarson 2007-12-25 +body UHAVE /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh|post)cards?-?(?:2008)?\.com\b/ +describe UHAVE uhavepostcard.com +score UHAVE 4 + +# blarson 2007-12-26 +body RUSSWIFE /\b(?:your|best|new|the)(?:russian?|address)(?:wife|bride)\.info\b/ +describe RUSSWIFE yourrussianwife.info +score RUSSWIFE 4 + +# blarson 2007-12-31 +body HAPPY2008 /\b(?:happy2008toyou|hellosanta2008|hohoho2008|santawishes2008)\.com\b/ +describe HAPPY2008 happy2008toyou.com +score HAPPY2008 4 + +# blarson 2008-01-02 +body BONGHIT /\b(?:beaverbonghits|dobongworld)\.com\b/ +describe BONGHIT beaverbonghits.com +score BONGHIT 4 + +# blarson 2008-01-02 +body GOOGLESEARCH /\bgoo+gle\.(com|\w\w|com?\.\w\w)\/+search/i +describe GOOGLESEARCH google search URL +score GOOGLESEARCH 2 + +# blarson 2008-01-02 +body SIGAS /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo|clitoriseries|clitorina)(?:\.|\=2E)com\b/ +describe SIGAS www.Sigashash.com +score SIGAS 4 + +# blarson 2008-01-05 +body RUSSIABRIDE /\brussian?(bride|wife)(?:home|live|blog)\.info\b/ +describe RUSSIABRIDE russiabridehome.info +score RUSSIABRIDE 4 + +# blarson 2008-01-14 +body REDMEHS /\bwww\.redmehs\b/ +describe REDMEHS www.redmehs +score REDMEHS 4 + +# blarson 2008-01-15 +body MYURL /\bmyurl\.com\.tw\b/i +describe MYURL myurl.com.tw +score MYURL 3