update rules for blars changes
authorDon Armstrong <don@debian.org>
Sun, 16 Mar 2008 03:07:39 +0000 (03:07 +0000)
committerDon Armstrong <don@debian.org>
Sun, 16 Mar 2008 03:07:39 +0000 (03:07 +0000)
git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@168 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

common/drug_spam
common/phrase_spam
common/url_spam

index c7ffda5..7b9dc09 100644 (file)
@@ -372,3 +372,13 @@ score NAKEDWOM             2
 full HERBALSUP         /\bherbal supplement/i
 describe HERBALSUP     herbal supplement
 score HERBALSUP                3
+
+# blarson 2008-02-06
+full VIA4              /viagra/i
+describe VIA4          viagra in the middle of a word
+score VIA4             3
+
+# blarson 2008-03-14
+full LEGALWEED         /\bLegal WEED\b/
+describe LEGALWEED      Legal WEED
+score LEGALWEED                4
index 89c6bf9..6a64f68 100644 (file)
@@ -349,7 +349,7 @@ describe ACRO8PR0   sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO)\b/
 describe WBRS          stock spam
 score WBRS             4
 
@@ -650,7 +650,7 @@ describe CRETPROF   creative and perceptive professionals
 score CRETPROF         2
 
 # blarson 2007-11-15
-body REMOVEDOT         /\b(?:Remove|erase) the dot\b/i
+body REMOVEDOT         /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
 describe REMOVEDOT     Remove the dot
 score REMOVEDOT                3
 
@@ -799,6 +799,26 @@ describe INTCOMP   International company
 score INTCOMP          3
 
 # blarson 2008-03-04
-header VIAGPHRA                subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person)\b/i
+header VIAGPHRA                subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
 describe VIAGPHRA      misc spam phrases
 score VIAGPHRA         4
+
+# blarson 2008-03-05
+body SEXHEALTH         /\bSexual Health/i
+describe SEXHEALTH     Sexual Health
+score SEXHEALTH                4
+
+# blarson 2008-03-12
+header ADEGREE         subject =~ /\b(a|some|quick)\s+degree\b/i
+describe ADEGREE       a degree
+score ADEGREE          3
+
+# blarson 2008-03-12
+rawbody PZIP           /\bfilename\=\"\w\.zip\"/
+describe PZIP          p.zip
+score PZIP             3
+
+# blarson 2008-03-13
+header RETWO           subject =~ /RE\: [ab][a-z]{2,} [ab][a-z]{2,}\s*$/
+describe RETWO         RE: bogus arbitrary
+score RETWO            2
index 957fa41..4cb97f0 100644 (file)
@@ -318,7 +318,7 @@ describe SOFTBESTGRAND      softbestgrand.com
 score SOFTBESTGRAND    4
 
 # blarson 2007-12-10
-body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast)\s?\.\s?(?:com|net)\b/
+body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less))\s?\.\s?(?:com|net)\b/
 describe PCSOFTCHEAP   pcsoftcheap. com
 score PCSOFTCHEAP      4
 
@@ -423,7 +423,26 @@ describe ILVE              www.ilveant.net
 score ILVE             4
 
 # don 2008-03-04
-body  VIDEOFILBMS      /www.videofilbms.cn/i
+body  VIDEOFILBMS      /www\.videofilbms\.cn/i
 describe VIDEOFILBMS   video filbms url
 score   VIDEOFILBMS    4
 
+# blarson 2008-03-05
+body ABESOFT           /\bca.abesoft\.com\b/i
+describe ABESOFT       www.cazabesoft.com etc.
+score ABESOFT          4
+
+# blarson 2008-03-06
+body STARLEYT          /\bstarleyt\.com\b/i
+describe STARLEYT      starleyt.com
+score STARLEYT         4
+
+# blarson 2008-03-07
+body URLOEM            /\bhttp\:\/\/\{/
+describe URLOEM                http://{urloem2}
+score URLOEM           3
+
+# blarson 2008-03-12
+body WILDERGO          /\b(?:WilderGoLovan|golovable)\.com\b/i
+describe WILDERGO      WilderGoLovan.com
+score WILDERGO         4