From ae1e0bc72fd433be2419c13aa6b9aace1b9d3c08 Mon Sep 17 00:00:00 2001 From: Don Armstrong Date: Tue, 20 Nov 2007 20:02:40 +0000 Subject: [PATCH] * Add blars rules * Disable the XXXBODY rule git-svn-id: svn+ssh://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config@106 0b7a5b0c-1f2c-0410-bd74-c376f8064c91 --- common/bts_specific | 4 ++++ common/drug_spam | 2 +- common/phrase_spam | 14 ++++++++++++-- common/pron_spam | 7 ++++--- common/url_spam | 21 +++++++++++++++++++-- 5 files changed, 40 insertions(+), 8 deletions(-) diff --git a/common/bts_specific b/common/bts_specific index 87e4199..a616c29 100644 --- a/common/bts_specific +++ b/common/bts_specific @@ -80,3 +80,7 @@ header INFOLOOP subject =~ /Re: Bug\#\d+\: Info received \(Bug\#\d+: Info recei describe INFOLOOP Loopy autoresponder score INFOLOOP 7 +# blarson 2007-11-17 +header KOI8R Content-Type =~ /koi8-r/i +describe KOI8R korean content +score KOI8R 3 diff --git a/common/drug_spam b/common/drug_spam index 0263cb7..f49baf8 100644 --- a/common/drug_spam +++ b/common/drug_spam @@ -259,6 +259,6 @@ describe XTRASIZE more penis spam score XTRASIZE 2 # blarson 2007-11-14 -header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic)\s+(?:body part|member|phallus|fuckstick|shlong|dick|shaft|penis|erectile|organ|cock|rod)\b/i +header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|oversize)\s+(?:body part|member|phallus|fuckstick|shlong|dic.?k|shaft|penis|erectile|organ|cock|rods?)\b/i describe BIGORGAN big body part score BIGORGAN 3 diff --git a/common/phrase_spam b/common/phrase_spam index b62513d..dc35d64 100644 --- a/common/phrase_spam +++ b/common/phrase_spam @@ -348,7 +348,7 @@ describe ACRO8PR0 sales spam score ACRO8PR0 4 # blarson 2007-10-05 -body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n)\b/ +body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu])\b/ describe WBRS stock spam score WBRS 4 @@ -651,4 +651,14 @@ score CRETPROF 2 # blarson 2007-11-15 body REMOVEDOT /\b(?:Remove|erase) the dot\b/i describe REMOVEDOT Remove the dot -score REMOVEDOT 2 +score REMOVEDOT 3 + +# blarson 2007-11-19 +full VENTTRANS /\bVent Transports\b/ +describe VENTTRANS Vent Transports +score VENTTRANS 4 + +# blarson 2007-11-19 +body HOLIDAYHERE /\bHolidays are here\b/i +describe HOLIDAYHERE Holidays are here +score HOLIDAYHERE 3 diff --git a/common/pron_spam b/common/pron_spam index 6a44698..2823c00 100644 --- a/common/pron_spam +++ b/common/pron_spam @@ -219,10 +219,11 @@ body HAVESEX /\bhave\s+sex\b/i describe HAVESEX have sex score HAVESEX 3 +# don -- disabled for false positives # zobel 2007-10-14 -body XXXBODY /xxx/i -describe XXXBODY Body containing xxx -score XXXBODY 4 +# body XXXBODY /xxx/i +# describe XXXBODY Body containing xxx +# score XXXBODY 4 #zobel body __CNSITES1 /\bdot\s+cn\b/i diff --git a/common/url_spam b/common/url_spam index e938258..b7989d2 100644 --- a/common/url_spam +++ b/common/url_spam @@ -283,7 +283,7 @@ describe HANOIFASH WWW.HANOI-FASHION.COM score HANOIFASH 4 # blarson 2007-11-06 -body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i +body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i describe ONLINEMED onlinemedicalkey.com score ONLINEMED 4 @@ -295,4 +295,21 @@ score GETUP 4 # blarson (pusling's idea) 2007-11-16 body SPACECOM /^[\w\d]+\s\.\scom\b/ describe SPACECOM whatever . com -score SPACECOM 2 +score SPACECOM 3 + +# blarson 2007-11-20 +uridnsbl URIBL_FLO flogoaway.com. A +body URIBL_FLO eval:check_uridnsbl('URIBL_FLO') +describe URIBL_FLO web sit in flogoaway.com +tflags URIBL_FLO net +score URIBL_FLO 1 + +# blarson 2007-11-20 +body SOFTROU /\bwww\.softrou\.com\b/i +describe SOFTROU www.softrou.com +score SOFTROU 3 + +# blarson 2007-11-20 +body GOOGLEPAGES /\bgooglepages\.com\b/i +describe GOOGLEPAGES spammers use googlepages +score GOOGLEPAGES 2 -- 2.39.2