* Make money rules better
* Even more substitutions for the office spam
* More urls for the software spam
git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@66
0b7a5b0c-1f2c-0410-bd74-
c376f8064c91
describe DMXC stock spam
score DMXC 4
-body MONEY /(\$\s*[\d\.]+|[\d\.]+\s*(usd|yen|euro|dollar))/
+body MONEY /(\$\s*[\d\.]+|[\d\.]+\s*(usd|yen|euro|dollar|$))/i
describe MONEY Some amount of money
score MONEY 1.5
+header SUBJMONEY subject =~ /(\$\s*[\d\.]+|[\d\.]+\s*(usd|yen|euro|dollar|$))/i
+describe SUBJMONEY Some amount of money in subject
+score SUBJMONEY 3
+
+
body HIDDENCOSTS /hidden\s*(costs|fees)/i
describe HIDDENCOSTS Hidden costs or fees?
score HIDDENCOSTS 1.5
score DELAFT 3
# blarson 2007-09-13
-header OFF1CE subject =~ /\b[O0]ff[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
+header OFF1CE subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
describe OFF1CE off1ce spam
score OFF1CE 4
score URIBL_SBL 3.5
# blarson 2007-09-17
-body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now)?\s*\.\s*com\b/i
+body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?\s*\.\s*com\b/i
describe MYCHEAP software spam
score MYCHEAP 4
bayes_auto_learn_threshold_nonspam -4
bayes_auto_learn_threshold_spam 27
+subscriber_file /var/list/whitelist/dist
+
################################################################
# SARE-rules (http://www.rulesemporium.com/rules.htm)
header EXINNEN From =~ /schilling\@fokus\.fraunhofer\.de/i
score EXINNEN 2.3
-header LDO_WHITELIST eval:check_for_subscriber()
+header LDO_WHITELIST eval:check_for_subscriber()
description LDO_WHITELIST Subscribed to the whitelist
-score LDO_WHITELIST -5
+score LDO_WHITELIST -5
header XXXPRON subject =~ /\bxxx\b/i
score XXXPRON 8.0