From e96b6ecd64a7771071a27d256f685232010823ce Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Sun, 16 Mar 2008 03:07:39 +0000 Subject: [PATCH] update rules for blars changes git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@168 0b7a5b0c-1f2c-0410-bd74-c376f8064c91 --- common/drug_spam | 10 ++++++++++ common/phrase_spam | 26 +++++++++++++++++++++++--- common/url_spam | 23 +++++++++++++++++++++-- 3 files changed, 54 insertions(+), 5 deletions(-) diff --git a/common/drug_spam b/common/drug_spam index c7ffda5..7b9dc09 100644 --- a/common/drug_spam +++ b/common/drug_spam @@ -372,3 +372,13 @@ score NAKEDWOM 2 full HERBALSUP /\bherbal supplement/i describe HERBALSUP herbal supplement score HERBALSUP 3 + +# blarson 2008-02-06 +full VIA4 /viagra/i +describe VIA4 viagra in the middle of a word +score VIA4 3 + +# blarson 2008-03-14 +full LEGALWEED /\bLegal WEED\b/ +describe LEGALWEED Legal WEED +score LEGALWEED 4 diff --git a/common/phrase_spam b/common/phrase_spam index 89c6bf9..6a64f68 100644 --- a/common/phrase_spam +++ b/common/phrase_spam @@ -349,7 +349,7 @@ describe ACRO8PR0 sales spam score ACRO8PR0 4 # blarson 2007-10-05 -body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/ +body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO)\b/ describe WBRS stock spam score WBRS 4 @@ -650,7 +650,7 @@ describe CRETPROF creative and perceptive professionals score CRETPROF 2 # blarson 2007-11-15 -body REMOVEDOT /\b(?:Remove|erase) the dot\b/i +body REMOVEDOT /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i describe REMOVEDOT Remove the dot score REMOVEDOT 3 @@ -799,6 +799,26 @@ describe INTCOMP International company score INTCOMP 3 # blarson 2008-03-04 -header VIAGPHRA subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person)\b/i +header VIAGPHRA subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i describe VIAGPHRA misc spam phrases score VIAGPHRA 4 + +# blarson 2008-03-05 +body SEXHEALTH /\bSexual Health/i +describe SEXHEALTH Sexual Health +score SEXHEALTH 4 + +# blarson 2008-03-12 +header ADEGREE subject =~ /\b(a|some|quick)\s+degree\b/i +describe ADEGREE a degree +score ADEGREE 3 + +# blarson 2008-03-12 +rawbody PZIP /\bfilename\=\"\w\.zip\"/ +describe PZIP p.zip +score PZIP 3 + +# blarson 2008-03-13 +header RETWO subject =~ /RE\: [ab][a-z]{2,} [ab][a-z]{2,}\s*$/ +describe RETWO RE: bogus arbitrary +score RETWO 2 diff --git a/common/url_spam b/common/url_spam index 957fa41..4cb97f0 100644 --- a/common/url_spam +++ b/common/url_spam @@ -318,7 +318,7 @@ describe SOFTBESTGRAND softbestgrand.com score SOFTBESTGRAND 4 # blarson 2007-12-10 -body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast)\s?\.\s?(?:com|net)\b/ +body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less))\s?\.\s?(?:com|net)\b/ describe PCSOFTCHEAP pcsoftcheap. com score PCSOFTCHEAP 4 @@ -423,7 +423,26 @@ describe ILVE www.ilveant.net score ILVE 4 # don 2008-03-04 -body VIDEOFILBMS /www.videofilbms.cn/i +body VIDEOFILBMS /www\.videofilbms\.cn/i describe VIDEOFILBMS video filbms url score VIDEOFILBMS 4 +# blarson 2008-03-05 +body ABESOFT /\bca.abesoft\.com\b/i +describe ABESOFT www.cazabesoft.com etc. +score ABESOFT 4 + +# blarson 2008-03-06 +body STARLEYT /\bstarleyt\.com\b/i +describe STARLEYT starleyt.com +score STARLEYT 4 + +# blarson 2008-03-07 +body URLOEM /\bhttp\:\/\/\{/ +describe URLOEM http://{urloem2} +score URLOEM 3 + +# blarson 2008-03-12 +body WILDERGO /\b(?:WilderGoLovan|golovable)\.com\b/i +describe WILDERGO WilderGoLovan.com +score WILDERGO 4 -- 2.39.2