From 65b354005272d76afbee32edfb17e97db8a54fe8 Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Wed, 12 Sep 2007 04:54:45 +0000 Subject: [PATCH] * add changes to rules by blars git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@13 0b7a5b0c-1f2c-0410-bd74-c376f8064c91 --- common/drug_spam | 23 ++++++++++++++++++----- common/money_spam | 4 ++-- common/phrase_spam | 8 ++++---- common/url_spam | 17 +++++++++++++---- 4 files changed, 37 insertions(+), 15 deletions(-) diff --git a/common/drug_spam b/common/drug_spam index 4a2af62..ce13021 100644 --- a/common/drug_spam +++ b/common/drug_spam @@ -3,17 +3,17 @@ # blarson, 2004-05-10 -> lists --pasc 04/05/11 body DRUGSPAM /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed).?[\a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i describe DRUGSPAM drug spam -score DRUGSPAM 3 - +score DRUGSPAM 3 + # blarson, 2004-05-10 -> lists --pasc 04/05/11 header DRUGSPAM2 subject =~ /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?[a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i describe DRUGSPAM2 more drug spam score DRUGSPAM2 3 -# More drugs! --pasc 2003-05-13 -body DRUGSPAM3 /(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i +# More drugs! --pasc 2003-05-13 blarson 2007-09-12 +body DRUGSPAM3 /\b(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i describe DRUGSPAM3 yet more drugs -score DRUGSPAM3 1 +score DRUGSPAM3 1.5 body MURPHY_DRUGS1 /v.?i.?a.?g.?r.?a/i describe MURPHY_DRUGS1 Viagra @@ -202,4 +202,17 @@ body GETABIG /\bwww\.getabiggercock\.net\b/i describe GETABIG cock spam score GETABIG 4 +# blarson 2007-09-11 +body PHYLET /\bphysician (?:letter|questions?)\b/i +describe PHYLET physician letter +score PHYLET 3.5 + +# blarson 2007-09-11 +body PEN1S /\bpen1s\b/i +describe PEN1S pen1s +score PEN1S 3 +# blarson 2007-09-12 +body PILLS /\bx\s+\d+\s+pills\b/ +describe PILLS pills spam +score PILLS 3 diff --git a/common/money_spam b/common/money_spam index 2527d36..32cc87d 100644 --- a/common/money_spam +++ b/common/money_spam @@ -218,10 +218,10 @@ body ANALLE /\bAN ALLE FINANZINVESTOREN\b/ describe ANALLE stock spam in german score ANALLE 3 -# blarson 2007-06-17 +# blarson 2007-06-17 2007-09-10 body REPWATCH2 /\breplica watch/i describe REPWATCH2 still pushing fake watches -score REPWATCH2 2 +score REPWATCH2 3.5 # blarson 2007-07-19 header WEEKLYNEWS subject =~ /\bWeekly (:?Sales? )(Newsletter|Special)\b/i diff --git a/common/phrase_spam b/common/phrase_spam index 7a3d9ae..de3de0e 100644 --- a/common/phrase_spam +++ b/common/phrase_spam @@ -188,8 +188,8 @@ header MESSAGESUB subject =~ /^\s*\(?message\s*(subject)?\)?$/i describe MESSAGESUB really descriptive subject score MESSAGESUB 3 -# blarson 2006-03-16 2007-08-28 -body DEARDIGIT /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon)|what.?i?s\s+up|greetings|Salutations|(Mail|News)\s+to|how.?s?\s*(?:(?:it)?\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)\d{3,}/i +# blarson 2006-03-16 2007-09-11 +body DEARDIGIT /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro\s+)?\d{3,}/i describe DEARDIGIT Dear number score DEARDIGIT 3.9 @@ -342,8 +342,8 @@ header ACRO8PR0 subject =~ /\bAcr[0o]bat\s*[78]\s+(?:PR[0O]\b|\$?\d+\$?)/i describe ACRO8PR0 sales spam score ACRO8PR0 4 -# blarson 2007-08-31 -body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?)\b/ +# blarson 2007-09-11 +body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG)\b/ describe WBRS stock spam score WBRS 4 diff --git a/common/url_spam b/common/url_spam index 57c233b..961f110 100644 --- a/common/url_spam +++ b/common/url_spam @@ -115,13 +115,13 @@ body BESTLOANS /www.bestmortloans.com/i describe BESTLOANS Best loans url score BESTLOANS 2 -# blarson 2007-07-22 -body PENPRO /\@penmailpro\.info\b/i +# blarson 2007-07-22 2007-09-11 +body PENPRO /\@(?:penmailpro|OnsetIng|openprotection)\.info\b/i describe PENPRO penmailpro spam score PENPRO 3.5 -# blarson 2007-09-05 -body WWWCN /\bwww\.\w+\.cn\b/i +# blarson 2007-09-05 2007-09-11 +body WWWCN /\b(?:www\.|https?\:.*)\w+\.cn\b/i describe WWWCN chinese web site score WWWCN 3 @@ -135,3 +135,12 @@ body JUSTYAK /www\.JustYak\.com/ describe JUSTYAK JustSpam score JUSTYAK 4.0 +# blarson 2007-09-10 +body SIZMATZ /\bsize-matterz\.com\b/i +describe SIZMATZ size matterz +score SIZMATZ 3 + +# blarson 2007-09-10 +body EMAGX /\bhttp\:\/\/emagx\.net\b/i +describe EMAGX wondercum spammer +score EMAGX 3.5 -- 2.39.2