* add changes to rules by blars

git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@13 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

diff --git a/common/drug_spam b/common/drug_spam
index 4a2af62518350cdbb39a5b364499180122c9acae..ce13021a5bcb49f4dac4844024c9843ae7084bd0 100644 (file)
--- a/common/drug_spam
+++ b/common/drug_spam
@@ -3,17 +3,17 @@
 # blarson, 2004-05-10 -> lists --pasc 04/05/11
 body DRUGSPAM   /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed).?[\a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i
 describe DRUGSPAM       drug spam 
 # blarson, 2004-05-10 -> lists --pasc 04/05/11
 body DRUGSPAM   /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed).?[\a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i
 describe DRUGSPAM       drug spam 

-score DRUGSPAM  3                                                                                                                              
-                                                                                                                                               
+score DRUGSPAM  3
+

 # blarson, 2004-05-10 -> lists --pasc 04/05/11
 header DRUGSPAM2        subject =~ /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?[a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i
 describe DRUGSPAM2      more drug spam
 score DRUGSPAM2         3
 
 # blarson, 2004-05-10 -> lists --pasc 04/05/11
 header DRUGSPAM2        subject =~ /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?[a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i
 describe DRUGSPAM2      more drug spam
 score DRUGSPAM2         3
 

-# More drugs! --pasc 2003-05-13
-body           DRUGSPAM3       /(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i
+# More drugs! --pasc 2003-05-13 blarson 2007-09-12
+body           DRUGSPAM3       /\b(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i

 describe       DRUGSPAM3       yet more drugs
 describe       DRUGSPAM3       yet more drugs

-score          DRUGSPAM3       1
+score          DRUGSPAM3       1.5

 
 body           MURPHY_DRUGS1   /v.?i.?a.?g.?r.?a/i
 describe       MURPHY_DRUGS1   Viagra
 
 body           MURPHY_DRUGS1   /v.?i.?a.?g.?r.?a/i
 describe       MURPHY_DRUGS1   Viagra


@@ -202,4 +202,17 @@ body GETABIG               /\bwww\.getabiggercock\.net\b/i
 describe GETABIG       cock spam
 score GETABIG          4
 
 describe GETABIG       cock spam
 score GETABIG          4
 

+# blarson 2007-09-11
+body PHYLET            /\bphysician (?:letter|questions?)\b/i
+describe PHYLET                physician letter
+score PHYLET           3.5
+
+# blarson 2007-09-11
+body PEN1S             /\bpen1s\b/i
+describe PEN1S         pen1s
+score PEN1S            3

 
 

+# blarson 2007-09-12
+body PILLS             /\bx\s+\d+\s+pills\b/
+describe PILLS         pills spam
+score PILLS            3

diff --git a/common/money_spam b/common/money_spam
index 2527d36cb7d5ff8b6fc7fb0233bf8bade4f124cc..32cc87d8f77b2b763e6d5495f3eaba6c53181e5e 100644 (file)
--- a/common/money_spam
+++ b/common/money_spam
@@ -218,10 +218,10 @@ body ANALLE               /\bAN ALLE FINANZINVESTOREN\b/
 describe ANALLE                stock spam in german
 score ANALLE           3
 
 describe ANALLE                stock spam in german
 score ANALLE           3
 

-# blarson 2007-06-17
+# blarson 2007-06-17 2007-09-10

 body REPWATCH2         /\breplica watch/i
 describe REPWATCH2     still pushing fake watches
 body REPWATCH2         /\breplica watch/i
 describe REPWATCH2     still pushing fake watches

-score REPWATCH2                2
+score REPWATCH2                3.5

 
 # blarson 2007-07-19
 header WEEKLYNEWS      subject =~ /\bWeekly (:?Sales? )(Newsletter|Special)\b/i
 
 # blarson 2007-07-19
 header WEEKLYNEWS      subject =~ /\bWeekly (:?Sales? )(Newsletter|Special)\b/i

diff --git a/common/phrase_spam b/common/phrase_spam
index 7a3d9ae18b4b37c8e4e0911ddc4be4e7eefcab99..de3de0e8a9f0d5bb11310485044a71fcf732cb03 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -188,8 +188,8 @@ header MESSAGESUB   subject =~ /^\s*\(?message\s*(subject)?\)?$/i
 describe MESSAGESUB    really descriptive subject
 score MESSAGESUB       3
 
 describe MESSAGESUB    really descriptive subject
 score MESSAGESUB       3
 

-# blarson 2006-03-16 2007-08-28
-body DEARDIGIT         /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon)|what.?i?s\s+up|greetings|Salutations|(Mail|News)\s+to|how.?s?\s*(?:(?:it)?\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)\d{3,}/i
+# blarson 2006-03-16 2007-09-11
+body DEARDIGIT         /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro\s+)?\d{3,}/i

 describe DEARDIGIT     Dear number
 score DEARDIGIT                3.9
 
 describe DEARDIGIT     Dear number
 score DEARDIGIT                3.9
 


@@ -342,8 +342,8 @@ header ACRO8PR0             subject =~ /\bAcr[0o]bat\s*[78]\s+(?:PR[0O]\b|\$?\d+\$?)/i
 describe ACRO8PR0      sales spam
 score ACRO8PR0         4       
 
 describe ACRO8PR0      sales spam
 score ACRO8PR0         4       
 

-# blarson 2007-08-31
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?)\b/
+# blarson 2007-09-11
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG)\b/

 describe WBRS          stock spam
 score WBRS             4
 
 describe WBRS          stock spam
 score WBRS             4
 

diff --git a/common/url_spam b/common/url_spam
index 57c233b2747c32bc9f65d2a45995e638160eefd8..961f110d8956ca6b6d4b7e1ac1db4beb2df2206c 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -115,13 +115,13 @@ body BESTLOANS            /www.bestmortloans.com/i
 describe BESTLOANS     Best loans url
 score BESTLOANS                2
 
 describe BESTLOANS     Best loans url
 score BESTLOANS                2
 

-# blarson 2007-07-22
-body PENPRO            /\@penmailpro\.info\b/i
+# blarson 2007-07-22 2007-09-11
+body PENPRO            /\@(?:penmailpro|OnsetIng|openprotection)\.info\b/i

 describe PENPRO                penmailpro spam
 score PENPRO           3.5
 
 describe PENPRO                penmailpro spam
 score PENPRO           3.5
 

-# blarson 2007-09-05
-body WWWCN             /\bwww\.\w+\.cn\b/i
+# blarson 2007-09-05 2007-09-11
+body WWWCN             /\b(?:www\.|https?\:.*)\w+\.cn\b/i

 describe WWWCN         chinese web site
 score WWWCN            3
 
 describe WWWCN         chinese web site
 score WWWCN            3
 


@@ -135,3 +135,12 @@ body JUSTYAK                       /www\.JustYak\.com/
 describe JUSTYAK               JustSpam
 score JUSTYAK                  4.0
 
 describe JUSTYAK               JustSpam
 score JUSTYAK                  4.0
 

+# blarson 2007-09-10
+body SIZMATZ           /\bsize-matterz\.com\b/i
+describe SIZMATZ       size matterz
+score SIZMATZ          3
+
+# blarson 2007-09-10
+body EMAGX             /\bhttp\:\/\/emagx\.net\b/i
+describe EMAGX         wondercum spammer
+score EMAGX            3.5