From ac4891522d27c06ae7f27d0869c2ef8b9886312a Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Tue, 15 Jan 2008 22:07:52 +0000 Subject: [PATCH] add blars changes to rules git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@129 0b7a5b0c-1f2c-0410-bd74-c376f8064c91 --- common/drug_spam | 19 +++++++++++++++++-- common/money_spam | 4 ++-- common/phrase_spam | 8 ++++++-- common/url_spam | 20 +++++++++++++++----- 4 files changed, 40 insertions(+), 11 deletions(-) diff --git a/common/drug_spam b/common/drug_spam index a26de30..eaa027d 100644 --- a/common/drug_spam +++ b/common/drug_spam @@ -16,7 +16,7 @@ describe DRUGSPAM3 yet more drugs score DRUGSPAM3 1.5 # blarson 2007-09-13 -body MURPHY_DRUGS1 /\bv.?i.?a.?[gdk].?r.?a\b/i +full MURPHY_DRUGS1 /\bv.?i.?a+.?[gdk]+.?r+.?a+\b/i describe MURPHY_DRUGS1 Viagra score MURPHY_DRUGS1 1.5 @@ -259,7 +259,7 @@ describe XTRASIZE more penis spam score XTRASIZE 2 # blarson 2007-11-14 -header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining)\s+(?:body part|member|phallus|fuckstick|sc?hlong|dic?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE)\b/i +header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining|ultimate|amazing)\s+(?:body part|member|phallus|fuckstick|sc?hlong|d[il]c?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE|pleasure machine|herbal|stick|male|d\Wi\Wc\Wk)\b/i describe BIGORGAN big body part score BIGORGAN 3 @@ -317,3 +317,18 @@ score INVOICE 3 header S_E_X subject =~ /\bs\W?e\W?(?:x|[>)]\W?[<(])(?:\b|u)/i describe S_E_X s.e.x score S_E_X 3 + +# blarson 2008-01-11 +header EDSET subject =~ /\bEDSET\b/ +describe EDSET EDSET +score EDSET 4 + +# blarson 2008-01-12 +full CANADIAN /\bCanadian.*pharmacy\b/i +describe CANADIAN Canadian pharmacy +score CANADIAN 3 + +# blarson 2008-01-14 +header INVOICE subject =~ /\bInvoice\s+.?\d+/i +describe INVOICE invoice number +score INVOICE 3 diff --git a/common/money_spam b/common/money_spam index cfb44dd..a89019a 100644 --- a/common/money_spam +++ b/common/money_spam @@ -257,9 +257,9 @@ body DMXC /Look at D-M-X-C!/ describe DMXC stock spam score DMXC 4 -body MONEY /((usd|yen|eur?o?|dollar|\$)\s*[\d\.\, ]+|[\d\.\, ]+\s*(usd|yen|eur?o?|dollar|\$))/i +body MONEY /((usd|yen|eur?o?|dollar|\$)\s*\d[\d\.\,]+|\d[\d\.\,]+\s*(usd|yen|eur?o?|dollar|\$))/i describe MONEY Some amount of money in body -score MONEY 1.5 +score MONEY 0.5 header SUBJMONEY subject =~ /((usd|yen|eur?o?|dollar|\$)\s*[\d\.\, ]+|[\d\.\, ]+\s*(usd|yen|eur?o?|dollar|\$))/i describe SUBJMONEY Some amount of money in subject diff --git a/common/phrase_spam b/common/phrase_spam index 16d1f7b..b2864ef 100644 --- a/common/phrase_spam +++ b/common/phrase_spam @@ -359,7 +359,7 @@ score FOURLA 0.1 meta STOCKLIKE (FOURLA && (MONEY || SUBJMONEY)) describe STOCKLIKE Four letter acronyms with money; stock scam -score STOCKLIKE 2 +score STOCKLIKE 1 # blarson 2007-01-26 header ACROBAT8 subject =~ /\badobe acr[o0]bat 8\b/i @@ -710,7 +710,7 @@ describe SEEKEMP seeking for employees score SEEKEMP 3 # blarson 2007-12-27 -body PRICELIST /(?:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i +body PRICELIST /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i describe PRICELIST list of prices score PRICELIST 1 @@ -743,3 +743,7 @@ header BUYTHEPRODUCT subject =~ /Buy the product/i describe BUYTHEPRODUCT Buy the product subject score BUYTHEPRODUCT 3 +# blarson 2008-01-11 +body IBERIS /\bIberis Capital Group\b/ +describe IBERIS Iberis Capital Group +score IBERIS 4 diff --git a/common/url_spam b/common/url_spam index fb1c7bc..bfe6dc4 100644 --- a/common/url_spam +++ b/common/url_spam @@ -318,7 +318,7 @@ describe SOFTBESTGRAND softbestgrand.com score SOFTBESTGRAND 4 # blarson 2007-12-10 -body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload)\s?\.\s?(?:com|net)\b/ +body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow)\s?\.\s?(?:com|net)\b/ describe PCSOFTCHEAP pcsoftcheap. com score PCSOFTCHEAP 4 @@ -343,7 +343,7 @@ describe UHAVE uhavepostcard.com score UHAVE 4 # blarson 2007-12-26 -body RUSSWIFE /\byour(?:russian?|address)(?:wife|bride)\.info\b/ +body RUSSWIFE /\b(?:your|best|new|the)(?:russian?|address)(?:wife|bride)\.info\b/ describe RUSSWIFE yourrussianwife.info score RUSSWIFE 4 @@ -358,16 +358,26 @@ describe BONGHIT beaverbonghits.com score BONGHIT 4 # blarson 2008-01-02 -body GOOGLESEARCH /http\:\/\/google\.(com|tw|co\.uk)\/+search/i +body GOOGLESEARCH /\bgoo+gle\.(com|\w\w|com?\.\w\w)\/+search/i describe GOOGLESEARCH google search URL score GOOGLESEARCH 2 # blarson 2008-01-02 -body SIGAS /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo)(?:\.|\=2E)com\b/ +body SIGAS /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo|clitoriseries|clitorina)(?:\.|\=2E)com\b/ describe SIGAS www.Sigashash.com score SIGAS 4 # blarson 2008-01-05 -body RUSSIABRIDE /\brussian?(bride|wife)(?:home|live)\.info\b/ +body RUSSIABRIDE /\brussian?(bride|wife)(?:home|live|blog)\.info\b/ describe RUSSIABRIDE russiabridehome.info score RUSSIABRIDE 4 + +# blarson 2008-01-14 +body REDMEHS /\bwww\.redmehs\b/ +describe REDMEHS www.redmehs +score REDMEHS 4 + +# blarson 2008-01-15 +body MYURL /\bmyurl\.com\.tw\b/i +describe MYURL myurl.com.tw +score MYURL 3 -- 2.39.2