add blars changes to spam rules

git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@125 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

diff --git a/common/bts_specific b/common/bts_specific
index a616c294fe7b806dd973b79d13df586c4eb166e3..579d4874c092d8d0547bd5c4cd6775dca1fd38bb 100644 (file)
--- a/common/bts_specific
+++ b/common/bts_specific
@@ -84,3 +84,6 @@ score INFOLOOP                7
 header KOI8R           Content-Type =~ /koi8-r/i
 describe KOI8R         korean content
 score KOI8R            3
+
+# blarson 2007-12-10
+score ONEWORD          3

diff --git a/common/drug_spam b/common/drug_spam
index c5c93a57c3e51f31f53a164bc9c0068e1507b8f0..173cc26fd30ed8b10eefd8caeadb8049f5412794 100644 (file)
--- a/common/drug_spam
+++ b/common/drug_spam
@@ -72,8 +72,8 @@ score         MURPHY_DRUGS_REL7       0.2
 body           MURPHY_DRUGS_REL8       /patch/i
 score          MURPHY_DRUGS_REL8       0.02
 
-body           MURPHY_DRUGS_REL9       /pill/i
-score          MURPHY_DRUGS_REL9       0.2
+body           MURPHY_DRUGS_REL9       /\bpills?\b/i
+score          MURPHY_DRUGS_REL9       1
 
 body           MURPHY_DRUGS_REL10      /bacteria/i
 score          MURPHY_DRUGS_REL10      0.1
@@ -259,6 +259,56 @@ describe XTRASIZE  more penis spam
 score XTRASIZE         2
 
 # blarson 2007-11-14
-header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|oversize|super)\s+(?:body part|member|phallus|fuckstick|shlong|dic.?k|shaft|penis|erectile|organ|cock|rods?|dik)\b/i
+header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder)\s+(?:body part|member|phallus|fuckstick|sc?hlong|dic?\W?k|shaft|p\W?e\W?n[i!]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE)\b/i
 describe BIGORGAN              big body part
 score BIGORGAN         3
+
+# blarson 2007-12-02
+header BKWORD          subject =~ /\b\{word\}\b/
+describe BKWORD                {word}
+score BKWORD           3
+
+# blarson 2007-12-10
+header MEDS            subject =~ /\bmed(?:ication)?s?\b/
+describe MEDS          meds
+score MEDS             2
+
+# blarson 2007-12-10
+header STEROIDS                subject =~ /\bsteroids?\b/i
+describe STEROIDS      steroids
+score STEROIDS         3
+
+# blarson 2007-12-11
+header HEALTH          subject =~ /\bhealth\b/i
+describe HEALTH                health
+score HEALTH           0.2
+
+# blarson 2007-12-18
+body MEDS2             /\bmed\W?s?\b/
+describe MEDS2         meds
+score MEDS2            2
+
+# blarson 2007-12-21
+full VPXL              /\bVPXL\b/
+describe VPXL          VPXL
+score VPXL             3
+
+# blarson 2007-12-22
+full TRIBULUS          /\b(?:Tribulus terrestris|Albizzia lebbeck|Argyrerin speciosa|Valeriana wallichii|Soya protein)\b/i
+describe TRIBULUS      Tribulus terrestris|Albizzia lebbeck
+score TRIBULUS         3
+
+# blarson 2007-12-24
+body VITAMINE          /\bVitamin E\b/
+describe VITAMINE      Vitamin E
+score VITAMINE         3
+
+# blarson 2007-12-24
+full PENISSIZE         /\b(?:penis|dick|cock)\s+(?:size|enlargement|width|girth)\b/i
+describe PENISSIZE     penis size
+score PENISSIZE                3
+
+# blarson 2007-12-24
+full INVOICE           /\bPharmacy Invoice\b/i
+describe INVOICE       Pharmacy Invoice
+score INVOICE          3

diff --git a/common/misc_spam b/common/misc_spam
index 9a2f8c15db2d7e1b8075f366dcce749a77f835c3..1641a3dd06e3a2f7f8684f5aa078d5b566dbd605 100644 (file)
--- a/common/misc_spam
+++ b/common/misc_spam
@@ -291,3 +291,12 @@ header TESTIMONIAL subject =~ /\btestimonial/i
 describe TESTIMONIAL   testimonials
 score TESTIMONIAL      2
 
+# blarson 2007-12-13
+header ITXS            subject =~ /\bit\`s\b/i
+describe ITXS          it`s
+score ITXS             4
+
+# blarson 2007-12-18
+rawbody TINYFONT       /\bFONT-SIZE\:\s+[123]px\;/i
+describe TINYFONT      tiny font specified
+score TINYFONT         3

diff --git a/common/money_spam b/common/money_spam
index 34f52164200de8ebd96fb891ad8981fd0df30a00..cfb44ddcf7b2c108c879433d8e1c706dbe826770 100644 (file)
--- a/common/money_spam
+++ b/common/money_spam
@@ -282,3 +282,13 @@ score STOCKFRLE            3.4
 body OPORTUNI          /\bOportunidade de Emprego\b/i
 describe OPORTUNI      Oportunidade de Emprego
 score OPORTUNI         3.5
+
+# blarson 2007-12-10
+header WATCHES         subject =~ /\b(?:watches|time\s*piece|Replica)\b/i
+describe WATCHES       watches
+score WATCHES          2
+
+# blarson 2007-12-29
+body COUP0N            /\bCoup0n\b/i
+describe COUP0N                Coup0n
+score COUP0N           3

diff --git a/common/phrase_spam b/common/phrase_spam
index c03ca6e574650ef6322d4efb43da155cbac2d6ce..7edc197985c09845502ed3ecbf7e75abd4e34fcb 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -87,7 +87,7 @@ score REFWD           3.5
 # blarson 2005-11-11
 header ONEWORD         subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
 describe ONEWORD       one word subject
-score ONEWORD          1
+score ONEWORD          2
 
 # robot101, 2003-09-22
 header CROSSWALK       X-UnityUser =~ /^Crosswalk.com, Inc/
@@ -193,8 +193,9 @@ header SENTMESSAGE  subject =~ /(sent you a( personal|) message|would like to cha
 describe SENTMESSAGE   Sent you a message (like duh?)
 score SENTMESSAGE      2
 
-# blarson 2006-03-16 2007-09-18
-body DEARDIGIT         /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
+# blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
+# body DEARDIGIT               /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
+body DEARDIGIT         /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
 describe DEARDIGIT     Dear number
 score DEARDIGIT                3.9
 
@@ -348,7 +349,7 @@ describe ACRO8PR0   sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu])\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|PERT|EWIN|SXB\.F)\b/
 describe WBRS          stock spam
 score WBRS             4
 
@@ -664,9 +665,9 @@ describe HOLIDAYHERE        Holidays are here
 score HOLIDAYHERE      3
 
 # blarson 2007-11-22
-header CAPINIT         subject =~ /^\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet plane|Tennis racquet|Leather jacket)\s+){2,}[A-Z][a-z-]+\s*$/
+header CAPINIT         subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
 describe CAPINIT       Capinit Every Word
-score CAPINIT          2
+score CAPINIT          2.2
 
 # blarson 2007-11-23
 body REMOVESPACE       /\b(?:remove|w\/o|without|delete) spaces?\b/i
@@ -693,6 +694,36 @@ header MAKEMONEY   subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
 describe MAKEMONEY     Make Cash
 score MAKEMONEY                3
 
+# blarson 2007-12-07
+header PREVED          subject =~ /\bPreved\b/i
+describe PREVED                Preved
+score PREVED           3
+
+# blarson 2007-12-08
+body YOURPROFILE       /\byour profile\b/i
+describe YOURPROFILE   your profile
+score YOURPROFILE      2
+
+# blarson 2007-12-09
+body SEEKEMP           /\bseeking for employees\b/
+describe SEEKEMP       seeking for employees
+score SEEKEMP          3
+
+# blarson 2007-12-27
+body PRICELIST         /(?:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
+describe PRICELIST     list of prices
+score PRICELIST                1
+
+# blarson 2007-12-30
+full OEMSOFT           /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
+describe OEMSOFT       OEM software
+score OEMSOFT          2
+
+# blarson 2008-01-01
+header NIGHTGIRL       subject =~ /\bnight\b.*\bgirlfriend\b/
+describe NIGHTGIRL     night ... girlfriend
+score NIGHTGIRL                3
+
 body SITESUBJECT       /\bPlease see this site in Subject\b/i
 describe SITESUBJECT   Pls check this new site
 score SITESUBJECT      3

diff --git a/common/url_spam b/common/url_spam
index bb76063f19d4bc73d06913877c98510a6784d066..1fd858ff6570e803b2c7cee0ebf0faeeccd8eda4 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -311,3 +311,43 @@ score SOFTROU              3
 body GOOGLEPAGES       /\bgooglepages\.com\b/i
 describe GOOGLEPAGES   spammers use googlepages
 score GOOGLEPAGES      2
+
+# blarson 2007-12-07
+body SOFTBESTGRAND     /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
+describe SOFTBESTGRAND softbestgrand.com
+score SOFTBESTGRAND    4
+
+# blarson 2007-12-10
+body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xprimesoftware|xpxmas|cheap2008soft|xprimeeasy|snowysoftware|2008adobe)\s?\.\s?(?:com|net)\b/
+describe PCSOFTCHEAP   pcsoftcheap. com
+score PCSOFTCHEAP      4
+
+# blarson 2007-12-11
+body GOLDGAME          /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
+describe GOLDGAME      gambling sites
+score GOLDGAME         4
+
+# blarson 2007-12-14
+body ENLARGETW         /\b(?:enlarge|0rz)\.tw\b/
+describe ENLARGETW     enlarge.tw
+score ENLARGETW                4
+
+# blarson 2007-12-15
+body POSTTHROUGH       /\b(?:postthrough|speedgrand|certaincoast)\.com\b/
+describe POSTTHROUGH   postthrough.com
+score POSTTHROUGH      4
+
+# blarson 2007-12-25
+body UHAVE             /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh)cards?(?:2008)?\.com\b/
+describe UHAVE         uhavepostcard.com
+score UHAVE            4
+
+# blarson 2007-12-26
+body RUSSWIFE          /\byourrussianwife\.info\b/
+describe RUSSWIFE      yourrussianwife.info
+score RUSSWIFE         4
+
+# blarson 2007-12-31
+body HAPPY2008         /\b(?:happy2008toyou|hellosanta2008|hohoho2008)\.com\b/
+describe HAPPY2008     happy2008toyou.com
+score HAPPY2008                4