/[pkg-listmaster]/trunk/spamassassin_config/common/drug_spam
ViewVC logotype

Contents of /trunk/spamassassin_config/common/drug_spam

Parent Directory Parent Directory | Revision Log Revision Log


Revision 231 - (hide annotations) (download)
Tue Jul 22 01:25:36 2008 UTC (4 years, 9 months ago) by don
File size: 13375 byte(s)
add blars patches
1 don 180
2 don 2 # various drugs match these rules
3    
4     # blarson, 2004-05-10 -> lists --pasc 04/05/11
5 don 191 body DRUGSPAM /(\b|_|\d)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed|l).?(?:a|\@|\/\\).?g.?r.?(?:a|\@|\/\\)|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|hgh)(\b|_\d)/i
6 don 2 describe DRUGSPAM drug spam
7 don 13 score DRUGSPAM 3
8    
9 don 2 # blarson, 2004-05-10 -> lists --pasc 04/05/11
10 don 191 header DRUGSPAM2 subject =~ /(\b|_|\d)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?(?:a|\@|\/\\).?g.?r.?(?:a|\/\\)|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|hgh)(\d|\b|_)/i
11 don 2 describe DRUGSPAM2 more drug spam
12     score DRUGSPAM2 3
13    
14 don 13 # More drugs! --pasc 2003-05-13 blarson 2007-09-12
15     body DRUGSPAM3 /\b(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i
16 don 2 describe DRUGSPAM3 yet more drugs
17 don 13 score DRUGSPAM3 1.5
18 don 2
19 don 16 # blarson 2007-09-13
20 don 129 full MURPHY_DRUGS1 /\bv.?i.?a+.?[gdk]+.?r+.?a+\b/i
21 don 2 describe MURPHY_DRUGS1 Viagra
22 don 16 score MURPHY_DRUGS1 1.5
23 don 2
24     body MURPHY_DRUGS2 /v.?i.?o.?x/i
25     describe MURPHY_DRUGS2 Viox
26     score MURPHY_DRUGS2 0.5
27    
28     body MURPHY_DRUGS3 /F.?i.?o.?r.?i.?c.?e.?e.?t/i
29     describe MURPHY_DRUGS3 Fioriceet
30     score MURPHY_DRUGS3 0.5
31    
32     body MURPHY_DRUGS4 /P.?h.?e.?n.?t.?(r.?e|e.?r).?m.?i.?n.?e/i
33     describe MURPHY_DRUGS4 Phentremine
34     score MURPHY_DRUGS4 0.5
35    
36     body MURPHY_DRUGS5 /v.?a.?l.?i.?u.?m/i
37     describe MURPHY_DRUGS5 Valium
38     score MURPHY_DRUGS5 0.5
39    
40     body MURPHY_DRUGS6 /x.?(a|@).?n.?a.?x/i
41     describe MURPHY_DRUGS6 Xanax
42     score MURPHY_DRUGS6 0.5
43    
44     body MURPHY_DRUGS7 /v.?i.?c.?o.?d.?i.?n/i
45     describe MURPHY_DRUGS7 Vicodin
46     score MURPHY_DRUGS7 0.5
47    
48     body MURPHY_DRUGS8 /h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e/i
49     describe MURPHY_DRUGS8 Hydrocodone
50     score MURPHY_DRUGS8 0.5
51    
52     body MURPHY_DRUGS_REL1 /medication/i
53     score MURPHY_DRUGS_REL1 0.5
54    
55     body MURPHY_DRUGS_REL2 /P.?r.?e.?s.?c.?r.?i.?p.?t.?i.?o.?n/i
56     score MURPHY_DRUGS_REL2 0.5
57    
58     body MURPHY_DRUGS_REL3 /health product/i
59     score MURPHY_DRUGS_REL3 0.5
60    
61     body MURPHY_DRUGS_REL4 /drug.*expensive/i
62     score MURPHY_DRUGS_REL4 0.5
63    
64     body MURPHY_DRUGS_REL5 /p.?h.?a.?r.?m.?a.?c.?e.?u.?t.?i.?c.?a.?l/i
65     score MURPHY_DRUGS_REL5 0.5
66    
67     body MURPHY_DRUGS_REL6 /formula/i
68     score MURPHY_DRUGS_REL6 0.2
69    
70     body MURPHY_DRUGS_REL7 /dosing/i
71     score MURPHY_DRUGS_REL7 0.2
72    
73     body MURPHY_DRUGS_REL8 /patch/i
74     score MURPHY_DRUGS_REL8 0.02
75    
76 don 125 body MURPHY_DRUGS_REL9 /\bpills?\b/i
77     score MURPHY_DRUGS_REL9 1
78 don 2
79     body MURPHY_DRUGS_REL10 /bacteria/i
80     score MURPHY_DRUGS_REL10 0.1
81    
82     body MURPHY_DRUGS_REL11 /antidote/i
83     score MURPHY_DRUGS_REL11 0.1
84    
85     meta MURPHY_DRUGS_META1 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL9 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL11) > 1
86     score MURPHY_DRUGS_META1 3.0
87    
88     meta MURPHY_DRUGS_META2 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL11 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL9) > 2
89     score MURPHY_DRUGS_META2 4.0
90    
91    
92     meta MURPHY_DRUGS_META3 (MURPHY_DRUGS_REL6 + MURPHY_DRUGS_REL7 + MURPHY_DRUGS_REL8 + MURPHY_DRUGS_REL9) > 1
93     score MURPHY_DRUGS_META3 2.0
94    
95     meta DRUGS_STOCK_MIMEOLE (__MIMEOLE_1106 && __MAILER_OL_5510)
96     header __MIMEOLE_1106 X-MimeOLE =~ /^Produced By Microsoft MimeOLE V6.00.2800.1106$/
97     header __MAILER_OL_5510 X-Mailer =~ /^Microsoft Office Outlook, Build 11.0.5510$/
98     describe DRUGS_STOCK_MIMEOLE Stock-spam forged headers found (5510)
99     score DRUGS_STOCK_MIMEOLE 3
100    
101     # More penis enlargement --pasc 061012
102     body M_BIGGER1 /gain \d inches/i
103     score M_BIGGER1 5
104    
105     # cjwatson, 2003/02/26
106     body AMAZINGHEALTHGROUP /www\.amazinghealthgroup\.com/
107     describe AMAZINGHEALTHGROUP Amazing Spam Group
108     score AMAZINGHEALTHGROUP 4.0
109    
110     # joy, 2003-09-16
111     body PHARMACYSPAM1 /http:\/\/www.pharmacy[^\.]+.biz/i
112     describe PHARMACYSPAM1 pharmacy spam 1
113     score PHARMACYSPAM1 4
114    
115     header PHARMACYSPAM2 Subject =~ /Best Discount Online Drugs/i
116     describe PHARMACYSPAM2 pharmacy spam 2
117     score PHARMACYSPAM2 4
118    
119     # joy, 2003-11-09
120     body PRESCRIPTION /prescription/i
121     describe PRESCRIPTION pharmacy spam
122     score PRESCRIPTION 2
123    
124     body PHARMACY /pharmacy/i
125     describe PHARMACY pharmacy spam
126     score PHARMACY 1
127    
128     body FDAAPPROVEDB /(USA?|FDA)( official)?[ -]approved/
129     describe FDAAPPROVEDB US FDA approved pharmacy spam
130     score FDAAPPROVEDB 2
131    
132     header FDAAPPROVEDS Subject =~ /(USA?|FDA)( official)?[ -]approved/
133     describe FDAAPPROVEDS US FDA approved pharmacy spam
134     score FDAAPPROVEDS 3
135    
136     # cjwatson, 2004-01-16
137     body MYPILLSOURCE /mypillsource\.com/
138     describe MYPILLSOURCE mypillsource.com spam
139     score MYPILLSOURCE 4
140    
141     # cjwatson, 2004-02-18
142     body HGH_PROVEN /HGH is proven to help/
143     describe HGH_PROVEN Yeah, sure
144     score HGH_PROVEN 3
145    
146     # cjwatson, 2004-02-22
147     header CIALGS Subject =~ /sug?per viagrga/
148     describe CIALGS Viagra derivative spam
149     score CIALGS 4
150    
151     # cjwatson, 2004-03-01, 2004-03-05
152     body LAY_THE_PIPE /the next (chick|girl) you (screw|bang)/
153     describe LAY_THE_PIPE Viagra spam
154     score LAY_THE_PIPE 4
155    
156     # blarson 2004-04-13
157     body SPERM /\bsperm/i
158     describe SPERM fertility spam
159     score SPERM 3
160    
161     # blarson 2005-06-04
162     header MED subject =~ /\b(?:doctor|health|medic(?:al|ine))$/
163     describe MED medical spam
164     score MED 2
165    
166 don 16 # blarson 2006-09-25 2007-09-18
167     body HOODIA /\bh.?oo+dia/i
168 don 2 describe HOODIA weight loss scam
169     score HOODIA 3
170    
171     # dla 2007-02-27
172     header PHARRMACY subject =~ /Can+adian\s+Fami+ly\s+Phar+macy/i
173     describe PHARRMACY pharrmacy can't spell
174     score PHARRMACY 3
175    
176     # don 2007-05-20
177     body MALEENHANCE /male\s+enhan[c\(]e/i
178     describe MALEENHANCE Enhanced males
179     score MALEENHANCE 2
180    
181     # blarson 2007-05-20
182     body SIZEMAT /\b(?:Does Size|size does) Matter\b/i
183     describe SIZEMAT size matters spam
184     score SIZEMAT 2
185    
186     # blarson 2007-08-30
187     body SIZEMAT /\bsizematters\.cn\b/i
188     describe SIZEMAT size matters
189     score SIZEMAT 4
190    
191     # blarson 2007-06-19
192     body ENLARGEPL /\benlargeplus\b/
193     describe ENLARGEPL more penis spam
194     score ENLARGEPL 3
195    
196     # blarson 2007-07-19
197     body PHYSCONS /^After this we will require a physician consultation/
198     describe PHYSCONS more php spam
199     score PHYSCONS 3
200    
201    
202     # blarson 2007-08-12
203     body GETABIG /\bwww\.getabiggercock\.net\b/i
204     describe GETABIG cock spam
205     score GETABIG 4
206    
207 don 13 # blarson 2007-09-11
208     body PHYLET /\bphysician (?:letter|questions?)\b/i
209     describe PHYLET physician letter
210     score PHYLET 3.5
211 don 2
212 don 13 # blarson 2007-09-11
213     body PEN1S /\bpen1s\b/i
214     describe PEN1S pen1s
215     score PEN1S 3
216    
217     # blarson 2007-09-12
218     body PILLS /\bx\s+\d+\s+pills\b/
219     describe PILLS pills spam
220 don 16 score PILLS 3.5
221    
222     # blarson 2007-09-13
223 don 24 body PFIZER /\bP\W?f\W?i\W?z\W?e\W?r\b/i
224 don 16 describe PFIZER Pfizer
225 don 24 score PFIZER 3
226 don 16
227     # blarson 2007-09-19
228     body WONDERCUM /\bwondercum\b/i
229     describe WONDERCUM more drug spam
230     score WONDERCUM 4
231    
232     # blarson 2007-09-21
233     body DRUGSTORE /\bdrug store\b/i
234     describe DRUGSTORE drug store
235     score DRUGSTORE 3
236 zobel 59
237     # zobel 2007-10-11
238 don 65 header LETACCOUNT subject =~ /LET\:account,password,shop/i
239 don 64 describe LETACCOUNT Random Let:account spam
240 zobel 59 score LETACCOUNT 7
241 don 74
242     # blarson 2007-10-16
243     body HGH /\bh(?:uman)?g(?:rowth)?h(?:ormone)?\b/i
244     describe HGH hgh
245     score HGH 2
246 don 81
247     # blarson 2007-10-23
248     body BRACKVIAG /\b\[V(?:\]\w\[)?I(?:\]\w\[)?A(?:\]\w\[)?G(?:\]\w\[)?R(?:]\w\[)?A\]\b/i
249     describe BRACKVIAG [viagra]
250     score BRACKVIAG 4
251 don 93
252     # blarson 2007-11-09
253     header PHARMORD subject =~ /\bPharmacy\b.*\border\b/i
254     describe PHARMORD Pharmacy order
255     score PHARMORD 4
256 don 100
257     # blarson 2007-11-12
258     body XTRASIZE /\bXtra\s*Size\b/i
259     describe XTRASIZE more penis spam
260     score XTRASIZE 2
261 don 102
262     # blarson 2007-11-14
263 don 180 header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized?|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic|bigger|muscular|obvious|overlarge|enlarged|super|larger|increase|stronger|sized?|your|great|longest|true|harder|tiny|small|gaining|ultimate|amazing|long|huge)\s+(?:body part|member|phallus|fuckstick|sc?hlong|d[il]c?\W?k|shaft|p\W?e\W?n[i!l]s|erectile|organ|c[o0]ck[s5]?|rods?|ejaculation|erections?|in\sgirth|one-eyed|penile|w[i1][l1]+y|magic wand|masculinity|PE|pleasure machine|herbal|stick|male|d\Wi\Wc\Wk|boner|pecker)\b/i
264 don 102 describe BIGORGAN big body part
265     score BIGORGAN 3
266 don 125
267     # blarson 2007-12-02
268     header BKWORD subject =~ /\b\{word\}\b/
269     describe BKWORD {word}
270     score BKWORD 3
271    
272     # blarson 2007-12-10
273 don 155 header MEDS subject =~ /\bmed(?:ication)?s?\b/i
274 don 125 describe MEDS meds
275     score MEDS 2
276    
277     # blarson 2007-12-10
278     header STEROIDS subject =~ /\bsteroids?\b/i
279     describe STEROIDS steroids
280     score STEROIDS 3
281    
282     # blarson 2007-12-11
283     header HEALTH subject =~ /\bhealth\b/i
284     describe HEALTH health
285     score HEALTH 0.2
286    
287     # blarson 2007-12-18
288     body MEDS2 /\bmed\W?s?\b/
289     describe MEDS2 meds
290     score MEDS2 2
291    
292     # blarson 2007-12-21
293     full VPXL /\bVPXL\b/
294     describe VPXL VPXL
295     score VPXL 3
296    
297     # blarson 2007-12-22
298     full TRIBULUS /\b(?:Tribulus terrestris|Albizzia lebbeck|Argyrerin speciosa|Valeriana wallichii|Soya protein)\b/i
299     describe TRIBULUS Tribulus terrestris|Albizzia lebbeck
300     score TRIBULUS 3
301    
302     # blarson 2007-12-24
303     body VITAMINE /\bVitamin E\b/
304     describe VITAMINE Vitamin E
305     score VITAMINE 3
306    
307     # blarson 2007-12-24
308     full PENISSIZE /\b(?:penis|dick|cock)\s+(?:size|enlargement|width|girth)\b/i
309     describe PENISSIZE penis size
310     score PENISSIZE 3
311    
312     # blarson 2007-12-24
313     full INVOICE /\bPharmacy Invoice\b/i
314     describe INVOICE Pharmacy Invoice
315     score INVOICE 3
316 don 127
317     # blarson 2008-01-01
318     header S_E_X subject =~ /\bs\W?e\W?(?:x|[>)]\W?[<(])(?:\b|u)/i
319     describe S_E_X s.e.x
320     score S_E_X 3
321 don 129
322     # blarson 2008-01-11
323     header EDSET subject =~ /\bEDSET\b/
324     describe EDSET EDSET
325     score EDSET 4
326    
327     # blarson 2008-01-12
328     full CANADIAN /\bCanadian.*pharmacy\b/i
329     describe CANADIAN Canadian pharmacy
330     score CANADIAN 3
331    
332     # blarson 2008-01-14
333 don 155 header INVOICE subject =~ /\b(?:Invoice|order)\s+.?\s*\d+/i
334 don 129 describe INVOICE invoice number
335     score INVOICE 3
336 don 155
337     # blarson 2008-02-02
338     header PHARMA subject =~ /\bpharm/i
339     describe PHARMA pharma
340     score PHARMA 2
341    
342     # blarson 2008-02-18
343     full UITRAM /\bUItram\b/i
344     describe UITRAM UItram
345     score UITRAM 3
346    
347     # blarson 2008-02-19
348 don 160 full ANTIED /\banti(?:-|\s*)EDs?\b/i
349 don 155 describe ANTIED anti-ED
350     score ANTIED 4
351    
352     # blarson 2008-02-19
353     full BUYDRUGS /\bbuydrugs\b/i
354     describe BUYDRUGS buydrugs
355     score BUYDRUGS 4
356    
357     # blarson 2008-02-21
358     body POPTHIS /\bpop\s+this\b/i
359     describe POPTHIS pop this
360 don 160 score POPTHIS 3
361    
362     # blarson 2008-02-24
363 don 190 full BLUEPILL /\bblue?.?(?:pil+|med)/i
364 don 160 describe BLUEPILL blue pill
365     score BLUEPILL 3
366    
367 don 166 # blarson 2008-02-26
368 don 160 full NAKEDWOM /\bNaked\s*Wom[ae]n/i
369     describe NAKEDWOM Naked Woman
370     score NAKEDWOM 2
371 don 166
372     # blarson 2008-02-26
373     full HERBALSUP /\bherbal supplement/i
374     describe HERBALSUP herbal supplement
375     score HERBALSUP 3
376 don 168
377     # blarson 2008-02-06
378     full VIA4 /viagra/i
379     describe VIA4 viagra in the middle of a word
380     score VIA4 3
381    
382     # blarson 2008-03-14
383     full LEGALWEED /\bLegal WEED\b/
384     describe LEGALWEED Legal WEED
385     score LEGALWEED 4
386 don 178
387     # blarson 2008-03-21
388 don 231 header PUSSY subject =~ /\b\_?(?:pussy|cum|naked|g(?:-|\s*)?spot|nipple|manhood|one(?:-|\s+)eyed\s+monster|orgasm|breast|vibrator|p[e3]n[il]s|porno|Tittie|flaccid|shagging|stripping|hottie|orgasmic|capsule|climax|lace|horny|Pink|wet|foreplay|Playboy|playmate|bares|blowing|sucking|Embrace|courtship|love|bosom|exposed|freaky|motel|credit card|pleasure|Ejaculation|herba[l1]|dosage|\d+\s+mg|escort|Penetration|orgie|pecker|crotch|Pocket Rocket|Sports Illustrated|RAMBO|bees|Corpora Cavernosa|rod|luv|see-through|College|jetsetting|Shaven|1\d and|inches|lovemaking|bedroom|Purchase|kung fu|saucy|Buy|laid|Obama|dementia|No weight|pill|Pacify|screening|regret|brad pitt|undressed|freebie|Discount|wonderdrug|Rock|diet|racy|boob|ramming|Loving|bang|coming|tablet|customer|highs|limited edition|Shock attack|topless|CS\s*3|babe|kinky|clothes|bed(?:ding)?|fame|hurt her|LOTTERY|year old|hot action|Ladies man|\d+ inche?|creamy|Click Here|wicked|Shy|touch herself|Shopping|timepiece|Shop|Dealer|watches|luxury|flaunting|dressed|brand|Popular|bling|luxuries|order processing|hobbies|wealth|lucky|draw|thi\b|flesh|Bacheelor|Doctoraate|Exquisite|bottle|money|millionaire|price|famous|branded|Affordable|bucks|Grape Seed|Antioxidant|fashion|Antiox|Free Radical|wonder power|Paris Hilton|wrist|Pamper|Red hot|Nicolas Cage|sale|blood|scientist|sin|Steve Jobs|hot girl|Lordly|dosage|Prada|shoes|pilz|che+ap|babymaker|pornstar|chixx|shed|pound|Investment|E-gold|swagger|LNH|weener|shipping|billing|oem|PhD|university|accredited|degree|hi|from me|monster\.com|discreet|hey|Maxim|Erection|Webmaster|sell|Career|xxx\w*|medicine|medication|health|buying|Rx|pharm|medicinal|Perscription|debt|Cam|Medical|foto|Narcotic|meddiscount|crazy|japanese|Chat|babe|winner|sure cure|European|agency|vocanc(?:ie|y)|CareerBuilder|pilule|CorelDRAW)s?\_?\b/i
389 don 180 describe PUSSY various spammy words in subject
390 don 178 score PUSSY 2
391 don 180
392     # blarson 2008-03-25
393     header FDA subject =~ /\bFDA\b/
394     describe FDA FDA
395     score FDA 3

  ViewVC Help
Powered by ViewVC 1.1.5