From 34d9d93ffe5629dd86e1fc168b1a6557a2c71a3d Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Mon, 6 Jul 2009 19:51:24 +0000 Subject: [PATCH] add changes from blarson git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@312 0b7a5b0c-1f2c-0410-bd74-c376f8064c91 --- bugs/user_prefs | 9 +++++++++ common/bts_specific | 5 +++++ common/drug_spam | 5 +++++ common/misc_spam | 29 +++++++++++++++++++++++++++-- common/url_spam | 8 ++++++-- lists/user_prefs | 1 + 6 files changed, 53 insertions(+), 4 deletions(-) diff --git a/bugs/user_prefs b/bugs/user_prefs index 17bba9a..31d23b5 100644 --- a/bugs/user_prefs +++ b/bugs/user_prefs @@ -48,6 +48,15 @@ bayes_ignore_header X-Spam-Checker-Version bayes_ignore_header X-Spam-Flag bayes_ignore_header X-Spam-Level bayes_ignore_header X-Spam-Status +# blarson 2009-04-09 +# if we can't use Ironport as spam sign, at least don't treat it as non-spam +bayes_ignore_header X-IronPort-Anti-Spam-Filtered +bayes_ignore_header X-IronPort-Anti-Spam-Result +bayes_ignore_header X-IronPort-AV +# blarson 2009-05-22 google spam +bayes_ignore_header DKIM-Signature +bayes_ignore_header DomainKey-Signature + include bayes_configuration diff --git a/common/bts_specific b/common/bts_specific index 47656f6..efc9b9b 100644 --- a/common/bts_specific +++ b/common/bts_specific @@ -124,3 +124,8 @@ score CREATETICK 4 body ONPHPDEV /onphp-dev-ru.lists.shadanakar.org/ describe ONPHPDEV keeps spamming owner, spamassassin autolearns as ham? score ONPHPDEV 3 + +# blarson 2009-07-03 +header FELIX X-BeenThere =~ /felix-impl\@lists\.sourceforge\.net/ +describe FELIX felix list bounces +score FELIX 4 diff --git a/common/drug_spam b/common/drug_spam index 523ebe9..135e239 100644 --- a/common/drug_spam +++ b/common/drug_spam @@ -398,3 +398,8 @@ score FDA 3 body CANADIANRX /\bCanadian(?:\s|_)+(?:Rx|med)/i describe CANADIANRX Canadian RxMedz score CANADIANRX 4 + +# blarson 2009-06-19 +body MEDS35 /\b(?:meds?|shop|pill|gen|ca|via)\d\d\b/ +describe MEDS35 meds35 +score MEDS35 4 diff --git a/common/misc_spam b/common/misc_spam index 7b174a4..93f0ce3 100644 --- a/common/misc_spam +++ b/common/misc_spam @@ -123,10 +123,10 @@ full NEXTPART /\-\=\_NextPart\_000\_/ describe NEXTPART spammer mime separator score NEXTPART 2.5 -# blarson 2006-10-17 +# blarson 2006-10-17 2009-04-30 full CT_IMAGE /Content\-Type\:\s*image/i describe CT_IMAGE Picture attached -score CT_IMAGE 1 +score CT_IMAGE 1.5 # blarson 2006-12-01 (score so low since it will also hit CT_IMAGE) header CT_IMAGE_HEAD content-type =~ /image/ @@ -399,6 +399,31 @@ header AOL_SPAM4 from =~ /[^a-zA-Z0-9]+.*\@([^\@]+\.)?aol\.com/i describe AOL_SPAM4 possible AOL-pretending spam, matching rule 4 score AOL_SPAM4 1 +# blarson 2009-04-15 +body WEBMAIL /\bwebmail\b/i +describe WEBMAIL webmail +score WEBMAIL 1 + +# blarson 2009-04-17 +header REFNO subject =~ /\bref no\b/i +describe REFNO Ref No +score REFNO 2 + +# blarson 2009-05-26 +header INFOCOUK to =~ /\b(?:info|winner|loan|lotto|grant|win)\@(?:info\.|winner\.|loan\.|lotto\.|hotmail\.|grant\.|win\.|yahoo\.|)(?:co\.uk|net|com|org)\b/ +describe INFOCOUK to info@co.uk +score INFOCOUK 3 + +# blarson 2009-05-27 +body EXITAT /\bexit\@(?:datalistsource|listsourcesworld)\.com\b/ +describe EXITAT exit@datalistsource.com +score EXITAT 3 + +# blarson 2009-06-05 +header TOINFO to =~ /\binfo\@/ +describe TOINFO to info@ +score TOINFO 1 + # don 2009-07-06 header CONSTCONTACT X-Mailer =~ /Constant Contact/i describe CONSTCONTACT Mail comming from constant contact, which doesn't require double opt-in diff --git a/common/url_spam b/common/url_spam index 6eb427e..38f72eb 100644 --- a/common/url_spam +++ b/common/url_spam @@ -123,8 +123,8 @@ body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medical describe PENPRO penmailpro spam score PENPRO 3.5 -# blarson 2007-09-05 2007-09-11 -body WWWCN /\b(?:www\.|https?\:.*)\w+\.cn\b/i +# blarson 2007-09-05 2007-09-11 2009-04-12 +body WWWCN /\b(?:www\.|https?\:.*)(\w|-|\.)+\.cn\b/i describe WWWCN chinese web site score WWWCN 3 @@ -548,3 +548,7 @@ uri DEBRICOLAJE /debricolaje/i describe DEBRICOLAJE Contains a debricolaje url score DEBRICOLAJE 6 +# blarson 2009-05-02 +uri ISUISSE /\bisuisse\.com/ +describe ISUISSE isuisse.com +score ISUISSE 4 diff --git a/lists/user_prefs b/lists/user_prefs index ce667da..0721417 100644 --- a/lists/user_prefs +++ b/lists/user_prefs @@ -1,3 +1,4 @@ +# -*- mode: spamassassin -*- # SpamAssassin user preferences file. See 'man Mail::SpamAssassin::Conf' for # details of what can be tweaked. ########################################################################### -- 2.39.2