update rules for blars changes

git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@168 0b7a5b0c-1f2c-0410-bd74-c376f8064c91

diff --git a/common/drug_spam b/common/drug_spam
index c7ffda52aa7560ebae44576393827feaa76c8b69..7b9dc0927c6acf40919f38e29ed926c04ae0513b 100644 (file)
--- a/common/drug_spam
+++ b/common/drug_spam
@@ -372,3 +372,13 @@ score NAKEDWOM             2
 full HERBALSUP         /\bherbal supplement/i
 describe HERBALSUP     herbal supplement
 score HERBALSUP                3
 full HERBALSUP         /\bherbal supplement/i
 describe HERBALSUP     herbal supplement
 score HERBALSUP                3

+
+# blarson 2008-02-06
+full VIA4              /viagra/i
+describe VIA4          viagra in the middle of a word
+score VIA4             3
+
+# blarson 2008-03-14
+full LEGALWEED         /\bLegal WEED\b/
+describe LEGALWEED      Legal WEED
+score LEGALWEED                4

diff --git a/common/phrase_spam b/common/phrase_spam
index 89c6bf959b481351515775392ce1b03ce0854214..6a64f68250af2ea013a0e90a310768db04643f77 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -349,7 +349,7 @@ describe ACRO8PR0   sales spam
 score ACRO8PR0         4       
 
 # blarson 2007-10-05
 score ACRO8PR0         4       
 
 # blarson 2007-10-05

-body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/
+body WBRS              /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO)\b/

 describe WBRS          stock spam
 score WBRS             4
 
 describe WBRS          stock spam
 score WBRS             4
 


@@ -650,7 +650,7 @@ describe CRETPROF   creative and perceptive professionals
 score CRETPROF         2
 
 # blarson 2007-11-15
 score CRETPROF         2
 
 # blarson 2007-11-15

-body REMOVEDOT         /\b(?:Remove|erase) the dot\b/i
+body REMOVEDOT         /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i

 describe REMOVEDOT     Remove the dot
 score REMOVEDOT                3
 
 describe REMOVEDOT     Remove the dot
 score REMOVEDOT                3
 


@@ -799,6 +799,26 @@ describe INTCOMP   International company
 score INTCOMP          3
 
 # blarson 2008-03-04
 score INTCOMP          3
 
 # blarson 2008-03-04

-header VIAGPHRA                subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person)\b/i
+header VIAGPHRA                subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i

 describe VIAGPHRA      misc spam phrases
 score VIAGPHRA         4
 describe VIAGPHRA      misc spam phrases
 score VIAGPHRA         4

+
+# blarson 2008-03-05
+body SEXHEALTH         /\bSexual Health/i
+describe SEXHEALTH     Sexual Health
+score SEXHEALTH                4
+
+# blarson 2008-03-12
+header ADEGREE         subject =~ /\b(a|some|quick)\s+degree\b/i
+describe ADEGREE       a degree
+score ADEGREE          3
+
+# blarson 2008-03-12
+rawbody PZIP           /\bfilename\=\"\w\.zip\"/
+describe PZIP          p.zip
+score PZIP             3
+
+# blarson 2008-03-13
+header RETWO           subject =~ /RE\: [ab][a-z]{2,} [ab][a-z]{2,}\s*$/
+describe RETWO         RE: bogus arbitrary
+score RETWO            2

diff --git a/common/url_spam b/common/url_spam
index 957fa414f3a8dd72161be40002738cb94cc2d3a4..4cb97f0edc0502e85f4993eae345c0b45b1def98 100644 (file)
--- a/common/url_spam
+++ b/common/url_spam
@@ -318,7 +318,7 @@ describe SOFTBESTGRAND      softbestgrand.com
 score SOFTBESTGRAND    4
 
 # blarson 2007-12-10
 score SOFTBESTGRAND    4
 
 # blarson 2007-12-10

-body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast)\s?\.\s?(?:com|net)\b/
+body PCSOFTCHEAP       /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less))\s?\.\s?(?:com|net)\b/

 describe PCSOFTCHEAP   pcsoftcheap. com
 score PCSOFTCHEAP      4
 
 describe PCSOFTCHEAP   pcsoftcheap. com
 score PCSOFTCHEAP      4
 


@@ -423,7 +423,26 @@ describe ILVE              www.ilveant.net
 score ILVE             4
 
 # don 2008-03-04
 score ILVE             4
 
 # don 2008-03-04

-body  VIDEOFILBMS      /www.videofilbms.cn/i
+body  VIDEOFILBMS      /www\.videofilbms\.cn/i

 describe VIDEOFILBMS   video filbms url
 score   VIDEOFILBMS    4
 
 describe VIDEOFILBMS   video filbms url
 score   VIDEOFILBMS    4
 

+# blarson 2008-03-05
+body ABESOFT           /\bca.abesoft\.com\b/i
+describe ABESOFT       www.cazabesoft.com etc.
+score ABESOFT          4
+
+# blarson 2008-03-06
+body STARLEYT          /\bstarleyt\.com\b/i
+describe STARLEYT      starleyt.com
+score STARLEYT         4
+
+# blarson 2008-03-07
+body URLOEM            /\bhttp\:\/\/\{/
+describe URLOEM                http://{urloem2}
+score URLOEM           3
+
+# blarson 2008-03-12
+body WILDERGO          /\b(?:WilderGoLovan|golovable)\.com\b/i
+describe WILDERGO      WilderGoLovan.com
+score WILDERGO         4