/[pkg-listmaster]/trunk/spamassassin_config/common/drug_spam
ViewVC logotype

Contents of /trunk/spamassassin_config/common/drug_spam

Parent Directory Parent Directory | Revision Log Revision Log


Revision 129 - (hide annotations) (download)
Tue Jan 15 22:07:52 2008 UTC (5 years, 4 months ago) by don
File size: 10298 byte(s)
add blars changes to rules
1 don 2 # various drugs match these rules
2    
3     # blarson, 2004-05-10 -> lists --pasc 04/05/11
4 don 121 body DRUGSPAM /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed|l).?(?:a|\@|\/\\).?g.?r.?(?:a|\@|\/\\)|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|hgh)(\b|_)/i
5 don 2 describe DRUGSPAM drug spam
6 don 13 score DRUGSPAM 3
7    
8 don 2 # blarson, 2004-05-10 -> lists --pasc 04/05/11
9 don 121 header DRUGSPAM2 subject =~ /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?(?:a|\@|\/\\).?g.?r.?(?:a|\/\\)|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|hgh)(\b|_)/i
10 don 2 describe DRUGSPAM2 more drug spam
11     score DRUGSPAM2 3
12    
13 don 13 # More drugs! --pasc 2003-05-13 blarson 2007-09-12
14     body DRUGSPAM3 /\b(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i
15 don 2 describe DRUGSPAM3 yet more drugs
16 don 13 score DRUGSPAM3 1.5
17 don 2
18 don 16 # blarson 2007-09-13
19 don 129 full MURPHY_DRUGS1 /\bv.?i.?a+.?[gdk]+.?r+.?a+\b/i
20 don 2 describe MURPHY_DRUGS1 Viagra
21 don 16 score MURPHY_DRUGS1 1.5
22 don 2
23     body MURPHY_DRUGS2 /v.?i.?o.?x/i
24     describe MURPHY_DRUGS2 Viox
25     score MURPHY_DRUGS2 0.5
26    
27     body MURPHY_DRUGS3 /F.?i.?o.?r.?i.?c.?e.?e.?t/i
28     describe MURPHY_DRUGS3 Fioriceet
29     score MURPHY_DRUGS3 0.5
30    
31     body MURPHY_DRUGS4 /P.?h.?e.?n.?t.?(r.?e|e.?r).?m.?i.?n.?e/i
32     describe MURPHY_DRUGS4 Phentremine
33     score MURPHY_DRUGS4 0.5
34    
35     body MURPHY_DRUGS5 /v.?a.?l.?i.?u.?m/i
36     describe MURPHY_DRUGS5 Valium
37     score MURPHY_DRUGS5 0.5
38    
39     body MURPHY_DRUGS6 /x.?(a|@).?n.?a.?x/i
40     describe MURPHY_DRUGS6 Xanax
41     score MURPHY_DRUGS6 0.5
42    
43     body MURPHY_DRUGS7 /v.?i.?c.?o.?d.?i.?n/i
44     describe MURPHY_DRUGS7 Vicodin
45     score MURPHY_DRUGS7 0.5
46    
47     body MURPHY_DRUGS8 /h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e/i
48     describe MURPHY_DRUGS8 Hydrocodone
49     score MURPHY_DRUGS8 0.5
50    
51     body MURPHY_DRUGS_REL1 /medication/i
52     score MURPHY_DRUGS_REL1 0.5
53    
54     body MURPHY_DRUGS_REL2 /P.?r.?e.?s.?c.?r.?i.?p.?t.?i.?o.?n/i
55     score MURPHY_DRUGS_REL2 0.5
56    
57     body MURPHY_DRUGS_REL3 /health product/i
58     score MURPHY_DRUGS_REL3 0.5
59    
60     body MURPHY_DRUGS_REL4 /drug.*expensive/i
61     score MURPHY_DRUGS_REL4 0.5
62    
63     body MURPHY_DRUGS_REL5 /p.?h.?a.?r.?m.?a.?c.?e.?u.?t.?i.?c.?a.?l/i
64     score MURPHY_DRUGS_REL5 0.5
65    
66     body MURPHY_DRUGS_REL6 /formula/i
67     score MURPHY_DRUGS_REL6 0.2
68    
69     body MURPHY_DRUGS_REL7 /dosing/i
70     score MURPHY_DRUGS_REL7 0.2
71    
72     body MURPHY_DRUGS_REL8 /patch/i
73     score MURPHY_DRUGS_REL8 0.02
74    
75 don 125 body MURPHY_DRUGS_REL9 /\bpills?\b/i
76     score MURPHY_DRUGS_REL9 1
77 don 2
78     body MURPHY_DRUGS_REL10 /bacteria/i
79     score MURPHY_DRUGS_REL10 0.1
80    
81     body MURPHY_DRUGS_REL11 /antidote/i
82     score MURPHY_DRUGS_REL11 0.1
83    
84     meta MURPHY_DRUGS_META1 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL9 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL11) > 1
85     score MURPHY_DRUGS_META1 3.0
86    
87     meta MURPHY_DRUGS_META2 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL11 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL9) > 2
88     score MURPHY_DRUGS_META2 4.0
89    
90    
91     meta MURPHY_DRUGS_META3 (MURPHY_DRUGS_REL6 + MURPHY_DRUGS_REL7 + MURPHY_DRUGS_REL8 + MURPHY_DRUGS_REL9) > 1
92     score MURPHY_DRUGS_META3 2.0
93    
94     meta DRUGS_STOCK_MIMEOLE (__MIMEOLE_1106 && __MAILER_OL_5510)
95     header __MIMEOLE_1106 X-MimeOLE =~ /^Produced By Microsoft MimeOLE V6.00.2800.1106$/
96     header __MAILER_OL_5510 X-Mailer =~ /^Microsoft Office Outlook, Build 11.0.5510$/
97     describe DRUGS_STOCK_MIMEOLE Stock-spam forged headers found (5510)
98     score DRUGS_STOCK_MIMEOLE 3
99    
100     # More penis enlargement --pasc 061012
101     body M_BIGGER1 /gain \d inches/i
102     score M_BIGGER1 5
103    
104     # cjwatson, 2003/02/26
105     body AMAZINGHEALTHGROUP /www\.amazinghealthgroup\.com/
106     describe AMAZINGHEALTHGROUP Amazing Spam Group
107     score AMAZINGHEALTHGROUP 4.0
108    
109     # joy, 2003-09-16
110     body PHARMACYSPAM1 /http:\/\/www.pharmacy[^\.]+.biz/i
111     describe PHARMACYSPAM1 pharmacy spam 1
112     score PHARMACYSPAM1 4
113    
114     header PHARMACYSPAM2 Subject =~ /Best Discount Online Drugs/i
115     describe PHARMACYSPAM2 pharmacy spam 2
116     score PHARMACYSPAM2 4
117    
118     # joy, 2003-11-09
119     body PRESCRIPTION /prescription/i
120     describe PRESCRIPTION pharmacy spam
121     score PRESCRIPTION 2
122    
123     body PHARMACY /pharmacy/i
124     describe PHARMACY pharmacy spam
125     score PHARMACY 1
126    
127     body FDAAPPROVEDB /(USA?|FDA)( official)?[ -]approved/
128     describe FDAAPPROVEDB US FDA approved pharmacy spam
129     score FDAAPPROVEDB 2
130    
131     header FDAAPPROVEDS Subject =~ /(USA?|FDA)( official)?[ -]approved/
132     describe FDAAPPROVEDS US FDA approved pharmacy spam
133     score FDAAPPROVEDS 3
134    
135     # cjwatson, 2004-01-16
136     body MYPILLSOURCE /mypillsource\.com/
137     describe MYPILLSOURCE mypillsource.com spam
138     score MYPILLSOURCE 4
139    
140     # cjwatson, 2004-02-18
141     body HGH_PROVEN /HGH is proven to help/
142     describe HGH_PROVEN Yeah, sure
143     score HGH_PROVEN 3
144    
145     # cjwatson, 2004-02-22
146     header CIALGS Subject =~ /sug?per viagrga/
147     describe CIALGS Viagra derivative spam
148     score CIALGS 4
149    
150     # cjwatson, 2004-03-01, 2004-03-05
151     body LAY_THE_PIPE /the next (chick|girl) you (screw|bang)/
152     describe LAY_THE_PIPE Viagra spam
153     score LAY_THE_PIPE 4
154    
155     # blarson 2004-04-13
156     body SPERM /\bsperm/i
157     describe SPERM fertility spam
158     score SPERM 3
159    
160     # blarson 2005-06-04
161     header MED subject =~ /\b(?:doctor|health|medic(?:al|ine))$/
162     describe MED medical spam
163     score MED 2
164    
165 don 16 # blarson 2006-09-25 2007-09-18
166     body HOODIA /\bh.?oo+dia/i
167 don 2 describe HOODIA weight loss scam
168     score HOODIA 3
169    
170     # dla 2007-02-27
171     header PHARRMACY subject =~ /Can+adian\s+Fami+ly\s+Phar+macy/i
172     describe PHARRMACY pharrmacy can't spell
173     score PHARRMACY 3
174    
175     # don 2007-05-20
176     body MALEENHANCE /male\s+enhan[c\(]e/i
177     describe MALEENHANCE Enhanced males
178     score MALEENHANCE 2
179    
180     # blarson 2007-05-20
181     body SIZEMAT /\b(?:Does Size|size does) Matter\b/i
182     describe SIZEMAT size matters spam
183     score SIZEMAT 2
184    
185     # blarson 2007-08-30
186     body SIZEMAT /\bsizematters\.cn\b/i
187     describe SIZEMAT size matters
188     score SIZEMAT 4
189    
190     # blarson 2007-06-19
191     body ENLARGEPL /\benlargeplus\b/
192     describe ENLARGEPL more penis spam
193     score ENLARGEPL 3
194    
195     # blarson 2007-07-19
196     body PHYSCONS /^After this we will require a physician consultation/
197     describe PHYSCONS more php spam
198     score PHYSCONS 3
199    
200    
201     # blarson 2007-08-12
202     body GETABIG /\bwww\.getabiggercock\.net\b/i
203     describe GETABIG cock spam
204     score GETABIG 4
205    
206 don 13 # blarson 2007-09-11
207     body PHYLET /\bphysician (?:letter|questions?)\b/i
208     describe PHYLET physician letter
209     score PHYLET 3.5
210 don 2
211 don 13 # blarson 2007-09-11
212     body PEN1S /\bpen1s\b/i
213     describe PEN1S pen1s
214     score PEN1S 3
215    
216     # blarson 2007-09-12
217     body PILLS /\bx\s+\d+\s+pills\b/
218     describe PILLS pills spam
219 don 16 score PILLS 3.5
220    
221     # blarson 2007-09-13
222 don 24 body PFIZER /\bP\W?f\W?i\W?z\W?e\W?r\b/i
223 don 16 describe PFIZER Pfizer
224 don 24 score PFIZER 3
225 don 16
226     # blarson 2007-09-19
227     body WONDERCUM /\bwondercum\b/i
228     describe WONDERCUM more drug spam
229     score WONDERCUM 4
230    
231     # blarson 2007-09-21
232     body DRUGSTORE /\bdrug store\b/i
233     describe DRUGSTORE drug store
234     score DRUGSTORE 3
235 zobel 59
236     # zobel 2007-10-11
237 don 65 header LETACCOUNT subject =~ /LET\:account,password,shop/i
238 don 64 describe LETACCOUNT Random Let:account spam
239 zobel 59 score LETACCOUNT 7
240 don 74
241     # blarson 2007-10-16
242     body HGH /\bh(?:uman)?g(?:rowth)?h(?:ormone)?\b/i
243     describe HGH hgh
244     score HGH 2
245 don 81
246     # blarson 2007-10-23
247     body BRACKVIAG /\b\[V(?:\]\w\[)?I(?:\]\w\[)?A(?:\]\w\[)?G(?:\]\w\[)?R(?:]\w\[)?A\]\b/i
248     describe BRACKVIAG [viagra]
249     score BRACKVIAG 4
250 don 93
251     # blarson 2007-11-09
252     header PHARMORD subject =~ /\bPharmacy\b.*\border\b/i
253     describe PHARMORD Pharmacy order
254     score PHARMORD 4
255 don 100
256     # blarson 2007-11-12
257     body XTRASIZE /\bXtra\s*Size\b/i
258     describe XTRASIZE more penis spam
259     score XTRASIZE 2
260 don 102
261     # blarson 2007-11-14
262 don 129 header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining|ultimate|amazing)\s+(?:body part|member|phallus|fuckstick|sc?hlong|d[il]c?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|cock|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE|pleasure machine|herbal|stick|male|d\Wi\Wc\Wk)\b/i
263 don 102 describe BIGORGAN big body part
264     score BIGORGAN 3
265 don 125
266     # blarson 2007-12-02
267     header BKWORD subject =~ /\b\{word\}\b/
268     describe BKWORD {word}
269     score BKWORD 3
270    
271     # blarson 2007-12-10
272     header MEDS subject =~ /\bmed(?:ication)?s?\b/
273     describe MEDS meds
274     score MEDS 2
275    
276     # blarson 2007-12-10
277     header STEROIDS subject =~ /\bsteroids?\b/i
278     describe STEROIDS steroids
279     score STEROIDS 3
280    
281     # blarson 2007-12-11
282     header HEALTH subject =~ /\bhealth\b/i
283     describe HEALTH health
284     score HEALTH 0.2
285    
286     # blarson 2007-12-18
287     body MEDS2 /\bmed\W?s?\b/
288     describe MEDS2 meds
289     score MEDS2 2
290    
291     # blarson 2007-12-21
292     full VPXL /\bVPXL\b/
293     describe VPXL VPXL
294     score VPXL 3
295    
296     # blarson 2007-12-22
297     full TRIBULUS /\b(?:Tribulus terrestris|Albizzia lebbeck|Argyrerin speciosa|Valeriana wallichii|Soya protein)\b/i
298     describe TRIBULUS Tribulus terrestris|Albizzia lebbeck
299     score TRIBULUS 3
300    
301     # blarson 2007-12-24
302     body VITAMINE /\bVitamin E\b/
303     describe VITAMINE Vitamin E
304     score VITAMINE 3
305    
306     # blarson 2007-12-24
307     full PENISSIZE /\b(?:penis|dick|cock)\s+(?:size|enlargement|width|girth)\b/i
308     describe PENISSIZE penis size
309     score PENISSIZE 3
310    
311     # blarson 2007-12-24
312     full INVOICE /\bPharmacy Invoice\b/i
313     describe INVOICE Pharmacy Invoice
314     score INVOICE 3
315 don 127
316     # blarson 2008-01-01
317     header S_E_X subject =~ /\bs\W?e\W?(?:x|[>)]\W?[<(])(?:\b|u)/i
318     describe S_E_X s.e.x
319     score S_E_X 3
320 don 129
321     # blarson 2008-01-11
322     header EDSET subject =~ /\bEDSET\b/
323     describe EDSET EDSET
324     score EDSET 4
325    
326     # blarson 2008-01-12
327     full CANADIAN /\bCanadian.*pharmacy\b/i
328     describe CANADIAN Canadian pharmacy
329     score CANADIAN 3
330    
331     # blarson 2008-01-14
332     header INVOICE subject =~ /\bInvoice\s+.?\d+/i
333     describe INVOICE invoice number
334     score INVOICE 3

  ViewVC Help
Powered by ViewVC 1.1.5