X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=fb1c7bc89247965e1a0c5fd0aaae89f673a7d561;hp=946e9692a1709ead6e81421a983eec131088eec5;hb=17951141d6176ad0f670d55291155c61d2f0a12a;hpb=4a013b0adb0b2174024daa8dc71e302bf2690827

diff --git a/common/url_spam b/common/url_spam
index 946e969..fb1c7bc 100644
--- a/common/url_spam
+++ b/common/url_spam
@@ -66,9 +66,10 @@ describe CANDYHOS	spams from korea, hosts in japan
 score CANDYHOS		5
 
 # blarson 2005-12-08
+# don 2007-11-21 -- combine other rule; increment score
 body GEOCITIES		/http\:\/\/.*geocities/i
 describe GEOCITIES	geocities url
-score GEOCITIES		1.6
+score GEOCITIES		2.5
 
 # blarson 2005-12-24
 body EMPTYURL		/\bhttp:\/\/(?:www\.)?$/i
@@ -116,7 +117,7 @@ describe BESTLOANS	Best loans url
 score BESTLOANS		2
 
 # blarson 2007-07-22 2007-09-12
-body PENPRO		/\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
+body PENPRO		/\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld|NaturalImprove|charmshine)\.info\b/i
 describe PENPRO		penmailpro spam
 score PENPRO		3.5
 
@@ -168,7 +169,7 @@ tflags	URIBL_CNKR	net
 score URIBL_CNKR	2.5
 
 # blarson 2007-09-14
-uridnsbl_skip_domain	debian.org debian.net
+uridnsbl_skip_domain	debian.org debian.net yahoo.com google.com
 
 # blarson 2007-09-14
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
@@ -252,10 +253,6 @@ body MASZON		/mc?a(szon|yvidol|ttk)\.(com|org|net)/i
 describe MASZON		pron spam
 score MASZON		4
 
-# blarson 2007-10-26
-full GEOCITIES		/\bhttp\:\/\/geocities\.com\b/i
-describe GEOCITIES	http://geocities.com/
-score GEOCITIES		1
 
 # blarson 2007-10-27
 body GMAIL		/\@gmail\.com\b/i
@@ -283,7 +280,7 @@ describe HANOIFASH	WWW.HANOI-FASHION.COM
 score HANOIFASH		4
 
 # blarson 2007-11-06
-body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear)\s*\.\s*com\b/i
+body ONLINEMED		/\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
 describe ONLINEMED	onlinemedicalkey.com
 score ONLINEMED		4
 
@@ -291,3 +288,86 @@ score ONLINEMED		4
 body GETUP		/\bgetupgradednow\.com\b/i
 describe GETUP		getupgradednow.com
 score GETUP		4
+
+# blarson (pusling's idea) 2007-11-16
+body SPACECOM		/^[\w\d]+\s\.\scom\b/
+describe SPACECOM	whatever . com
+score SPACECOM		3
+
+# don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
+# blarson 2007-11-20
+# uridnsbl URIBL_FLO	flowgoaway.com.	A
+# body	URIBL_FLO	eval:check_uridnsbl('URIBL_FLO')
+# describe URIBL_FLO	web site in flowgoaway.com
+# tflags	URIBL_FLO	net
+# score URIBL_FLO		1
+
+# blarson 2007-11-20
+body SOFTROU		/\bwww\.softrou\.com\b/i
+describe SOFTROU	www.softrou.com
+score SOFTROU		3
+
+# blarson 2007-11-20
+body GOOGLEPAGES	/\bgooglepages\.com\b/i
+describe GOOGLEPAGES	spammers use googlepages
+score GOOGLEPAGES	2
+
+# blarson 2007-12-07
+body SOFTBESTGRAND	/\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
+describe SOFTBESTGRAND	softbestgrand.com
+score SOFTBESTGRAND	4
+
+# blarson 2007-12-10
+body PCSOFTCHEAP	/\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload)\s?\.\s?(?:com|net)\b/
+describe PCSOFTCHEAP	pcsoftcheap. com
+score PCSOFTCHEAP	4
+
+# blarson 2007-12-11
+body GOLDGAME		/\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
+describe GOLDGAME	gambling sites
+score GOLDGAME		4
+
+# blarson 2007-12-14
+body ENLARGETW		/\b(?:enlarge|0rz)\.tw\b/
+describe ENLARGETW	enlarge.tw
+score ENLARGETW		4
+
+# blarson 2007-12-15
+body POSTTHROUGH	/\b(?:postthrough|speedgrand|certaincoast)\.com\b/
+describe POSTTHROUGH	postthrough.com
+score POSTTHROUGH	4
+
+# blarson 2007-12-25
+body UHAVE		/\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh|post)cards?-?(?:2008)?\.com\b/
+describe UHAVE		uhavepostcard.com
+score UHAVE		4
+
+# blarson 2007-12-26
+body RUSSWIFE		/\byour(?:russian?|address)(?:wife|bride)\.info\b/
+describe RUSSWIFE	yourrussianwife.info
+score RUSSWIFE		4
+
+# blarson 2007-12-31
+body HAPPY2008		/\b(?:happy2008toyou|hellosanta2008|hohoho2008|santawishes2008)\.com\b/
+describe HAPPY2008	happy2008toyou.com
+score HAPPY2008		4
+
+# blarson 2008-01-02
+body BONGHIT		/\b(?:beaverbonghits|dobongworld)\.com\b/
+describe BONGHIT	beaverbonghits.com
+score BONGHIT		4
+
+# blarson 2008-01-02
+body GOOGLESEARCH	/http\:\/\/google\.(com|tw|co\.uk)\/+search/i
+describe GOOGLESEARCH	google search URL
+score GOOGLESEARCH	2
+
+# blarson 2008-01-02
+body SIGAS		/\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo)(?:\.|\=2E)com\b/
+describe SIGAS		www.Sigashash.com
+score SIGAS		4
+
+# blarson 2008-01-05
+body RUSSIABRIDE	/\brussian?(bride|wife)(?:home|live)\.info\b/
+describe RUSSIABRIDE	russiabridehome.info
+score RUSSIABRIDE	4