* Add blars rules

 * Disable the XXXBODY rule

git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@106 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

diff --git a/common/bts_specific b/common/bts_specific
index 87e419921d6d5bd6642ee185dfe71a9644eb548f..a616c294fe7b806dd973b79d13df586c4eb166e3 100644 (file)
--- a/common/bts_specific
+++ b/common/bts_specific
@@ -80,3 +80,7 @@ header INFOLOOP               subject =~ /Re: Bug\#\d+\: Info received \(Bug\#\d+: Info recei
 describe INFOLOOP      Loopy autoresponder
 score INFOLOOP         7
 
+# blarson 2007-11-17
+header KOI8R           Content-Type =~ /koi8-r/i
+describe KOI8R         korean content
+score KOI8R            3

diff --git a/common/drug_spam b/common/drug_spam
index 0263cb793c208a62c0f56e5eae9495e87f576260..f49baf84a28fe132d8d20b2c1c88a5d4b76324a6 100644 (file)
--- a/common/drug_spam
+++ b/common/drug_spam
@@ -259,6 +259,6 @@ describe XTRASIZE   more penis spam
 score XTRASIZE         2
 
 # blarson 2007-11-14
-header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic)\s+(?:body part|member|phallus|fuckstick|shlong|dick|shaft|penis|erectile|organ|cock|rod)\b/i
+header BIGORGAN                subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|oversize)\s+(?:body part|member|phallus|fuckstick|shlong|dic.?k|shaft|penis|erectile|organ|cock|rods?)\b/i
 describe BIGORGAN              big body part
 score BIGORGAN         3

diff --git a/common/phrase_spam b/common/phrase_spam
index b62513d4a99e16c91a1490d8f4f131126e6906f6..dc35d641914914b242bc8f5ce7f27a3f3127cf10 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -348,7 +348,7 @@ describe ACRO8PR0   sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n)\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu])\b/
 describe WBRS          stock spam
 score WBRS             4
 
@@ -651,4 +651,14 @@ score CRETPROF             2
 # blarson 2007-11-15
 body REMOVEDOT         /\b(?:Remove|erase) the dot\b/i
 describe REMOVEDOT     Remove the dot
-score REMOVEDOT                2
+score REMOVEDOT                3
+
+# blarson 2007-11-19
+full VENTTRANS         /\bVent Transports\b/
+describe VENTTRANS     Vent Transports
+score VENTTRANS                4
+
+# blarson 2007-11-19
+body HOLIDAYHERE       /\bHolidays are here\b/i
+describe HOLIDAYHERE   Holidays are here
+score HOLIDAYHERE      3

diff --git a/common/pron_spam b/common/pron_spam
index 6a446985622ad306ac8103733173d9642255712d..2823c00e714cc37437fd451bebbfecf13feeaa09 100644 (file)
--- a/common/pron_spam
+++ b/common/pron_spam
@@ -219,10 +219,11 @@ body HAVESEX              /\bhave\s+sex\b/i
 describe HAVESEX       have sex
 score HAVESEX          3
 
+# don -- disabled for false positives
 # zobel 2007-10-14
-body XXXBODY           /xxx/i
-describe XXXBODY       Body containing xxx
-score XXXBODY          4
+# body XXXBODY         /xxx/i
+# describe XXXBODY     Body containing xxx
+# score XXXBODY                4
 
 #zobel
 body __CNSITES1                /\bdot\s+cn\b/i

diff --git a/common/url_spam b/common/url_spam
index e938258e731d8ce74131b5379bf845f58ad488d2..b7989d2dfdf6f9398bc89ea9741be34e240da120 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -283,7 +283,7 @@ describe HANOIFASH  WWW.HANOI-FASHION.COM
 score HANOIFASH                4
 
 # blarson 2007-11-06
-body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i
+body ONLINEMED         /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
 describe ONLINEMED     onlinemedicalkey.com
 score ONLINEMED                4
 
@@ -295,4 +295,21 @@ score GETUP                4
 # blarson (pusling's idea) 2007-11-16
 body SPACECOM          /^[\w\d]+\s\.\scom\b/
 describe SPACECOM      whatever . com
-score SPACECOM         2
+score SPACECOM         3
+
+# blarson 2007-11-20
+uridnsbl URIBL_FLO     flogoaway.com.  A
+body   URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
+describe URIBL_FLO     web sit in flogoaway.com
+tflags URIBL_FLO       net
+score URIBL_FLO                1
+
+# blarson 2007-11-20
+body SOFTROU           /\bwww\.softrou\.com\b/i
+describe SOFTROU       www.softrou.com
+score SOFTROU          3
+
+# blarson 2007-11-20
+body GOOGLEPAGES       /\bgooglepages\.com\b/i
+describe GOOGLEPAGES   spammers use googlepages
+score GOOGLEPAGES      2