add blars changes to rules

git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@129 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

diff --git a/common/drug_spam b/common/drug_spam
index a26de30361e61124a3b7daa715e9df33b1e7afb5..eaa027de8e076c2aa89cc2ec731356eff16bed0c 100644 (file)
--- a/common/drug_spam
+++ b/common/drug_spam
@@ -16,7 +16,7 @@ describe      DRUGSPAM3       yet more drugs
 score          DRUGSPAM3       1.5
 
 # blarson 2007-09-13
-body           MURPHY_DRUGS1   /\bv.?i.?a.?[gdk].?r.?a\b/i
+full           MURPHY_DRUGS1   /\bv.?i.?a+.?[gdk]+.?r+.?a+\b/i
 describe       MURPHY_DRUGS1   Viagra
 score          MURPHY_DRUGS1   1.5
 
@@ -259,7 +259,7 @@ describe XTRASIZE   more penis spam
 score XTRASIZE         2
 
 # blarson 2007-11-14
-header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining)\s+(?:body part|member|phallus|fuckstick|sc?hlong|dic?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE)\b/i
+header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining|ultimate|amazing)\s+(?:body part|member|phallus|fuckstick|sc?hlong|d[il]c?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE|pleasure machine|herbal|stick|male|d\Wi\Wc\Wk)\b/i
 describe BIGORGAN              big body part
 score BIGORGAN         3
 
@@ -317,3 +317,18 @@ score INVOICE              3
 header S_E_X           subject =~ /\bs\W?e\W?(?:x|[>)]\W?[<(])(?:\b|u)/i
 describe S_E_X         s.e.x
 score S_E_X            3
+
+# blarson 2008-01-11
+header EDSET           subject =~ /\bEDSET\b/
+describe EDSET         EDSET
+score EDSET            4
+
+# blarson 2008-01-12
+full CANADIAN          /\bCanadian.*pharmacy\b/i
+describe CANADIAN      Canadian pharmacy
+score CANADIAN         3
+
+# blarson 2008-01-14
+header INVOICE         subject =~ /\bInvoice\s+.?\d+/i
+describe INVOICE       invoice number
+score INVOICE          3

diff --git a/common/money_spam b/common/money_spam
index cfb44ddcf7b2c108c879433d8e1c706dbe826770..a89019a01e4f6a85f39beb53b976e82a7a405c79 100644 (file)
--- a/common/money_spam
+++ b/common/money_spam
@@ -257,9 +257,9 @@ body DMXC               /Look at D-M-X-C!/
 describe DMXC           stock spam
 score DMXC              4
 
-body MONEY             /((usd|yen|eur?o?|dollar|\$)\s*[\d\.\, ]+|[\d\.\, ]+\s*(usd|yen|eur?o?|dollar|\$))/i
+body MONEY             /((usd|yen|eur?o?|dollar|\$)\s*\d[\d\.\,]+|\d[\d\.\,]+\s*(usd|yen|eur?o?|dollar|\$))/i
 describe MONEY         Some amount of money in body
-score MONEY            1.5
+score MONEY            0.5
 
 header SUBJMONEY       subject =~ /((usd|yen|eur?o?|dollar|\$)\s*[\d\.\, ]+|[\d\.\, ]+\s*(usd|yen|eur?o?|dollar|\$))/i
 describe SUBJMONEY     Some amount of money in subject

diff --git a/common/phrase_spam b/common/phrase_spam
index 16d1f7b287af1b72344dcbea9e77f3cb8e41338c..b2864efbaa24401bc95b54601c6301d7e4bf4cb7 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -359,7 +359,7 @@ score FOURLA                0.1
 
 meta STOCKLIKE         (FOURLA && (MONEY || SUBJMONEY))
 describe STOCKLIKE     Four letter acronyms with money; stock scam
-score STOCKLIKE                2
+score STOCKLIKE                1
 
 # blarson 2007-01-26
 header ACROBAT8                subject =~ /\badobe acr[o0]bat 8\b/i
@@ -710,7 +710,7 @@ describe SEEKEMP    seeking for employees
 score SEEKEMP          3
 
 # blarson 2007-12-27
-body PRICELIST         /(?:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
+body PRICELIST         /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
 describe PRICELIST     list of prices
 score PRICELIST                1
 
@@ -743,3 +743,7 @@ header BUYTHEPRODUCT        subject =~ /Buy the product/i
 describe BUYTHEPRODUCT Buy the product subject
 score BUYTHEPRODUCT    3
 
+# blarson 2008-01-11
+body IBERIS            /\bIberis Capital Group\b/
+describe IBERIS                Iberis Capital Group
+score IBERIS           4

diff --git a/common/url_spam b/common/url_spam
index fb1c7bc89247965e1a0c5fd0aaae89f673a7d561..bfe6dc43393755ec94b0bffc2dd0aaa6002abb1b 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -318,7 +318,7 @@ describe SOFTBESTGRAND      softbestgrand.com
 score SOFTBESTGRAND    4
 
 # blarson 2007-12-10
-body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload)\s?\.\s?(?:com|net)\b/
+body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow)\s?\.\s?(?:com|net)\b/
 describe PCSOFTCHEAP   pcsoftcheap. com
 score PCSOFTCHEAP      4
 
@@ -343,7 +343,7 @@ describe UHAVE              uhavepostcard.com
 score UHAVE            4
 
 # blarson 2007-12-26
-body RUSSWIFE          /\byour(?:russian?|address)(?:wife|bride)\.info\b/
+body RUSSWIFE          /\b(?:your|best|new|the)(?:russian?|address)(?:wife|bride)\.info\b/
 describe RUSSWIFE      yourrussianwife.info
 score RUSSWIFE         4
 
@@ -358,16 +358,26 @@ describe BONGHIT  beaverbonghits.com
 score BONGHIT          4
 
 # blarson 2008-01-02
-body GOOGLESEARCH      /http\:\/\/google\.(com|tw|co\.uk)\/+search/i
+body GOOGLESEARCH      /\bgoo+gle\.(com|\w\w|com?\.\w\w)\/+search/i
 describe GOOGLESEARCH  google search URL
 score GOOGLESEARCH     2
 
 # blarson 2008-01-02
-body SIGAS             /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo)(?:\.|\=2E)com\b/
+body SIGAS             /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo|clitoriseries|clitorina)(?:\.|\=2E)com\b/
 describe SIGAS         www.Sigashash.com
 score SIGAS            4
 
 # blarson 2008-01-05
-body RUSSIABRIDE       /\brussian?(bride|wife)(?:home|live)\.info\b/
+body RUSSIABRIDE       /\brussian?(bride|wife)(?:home|live|blog)\.info\b/
 describe RUSSIABRIDE   russiabridehome.info
 score RUSSIABRIDE      4
+
+# blarson 2008-01-14
+body REDMEHS           /\bwww\.redmehs\b/
+describe REDMEHS       www.redmehs
+score REDMEHS          4
+
+# blarson 2008-01-15
+body MYURL             /\bmyurl\.com\.tw\b/i
+describe MYURL         myurl.com.tw
+score MYURL            3