/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 13 by don, Wed Sep 12 04:54:45 2007 UTC revision 38 by don, Tue Oct 2 18:48:25 2007 UTC
# Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes
188  describe MESSAGESUB     really descriptive subject  describe MESSAGESUB     really descriptive subject
189  score MESSAGESUB        3  score MESSAGESUB        3
190    
191  # blarson 2006-03-16 2007-09-11  # don 2007-09-20
192  body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro\s+)?\d{3,}/i  header SENTMESSAGE      subject =~ /(sent you a( personal|) message|would like to chat)/i
193    describe SENTMESSAGE    Sent you a message (like duh?)
194    score SENTMESSAGE       2
195    
196    # blarson 2006-03-16 2007-09-18
197    body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
198  describe DEARDIGIT      Dear number  describe DEARDIGIT      Dear number
199  score DEARDIGIT         3.9  score DEARDIGIT         3.9
200    
# Line 342  header ACRO8PR0                subject =~ /\bAcr[0o]ba Line 347  header ACRO8PR0                subject =~ /\bAcr[0o]ba
347  describe ACRO8PR0       sales spam  describe ACRO8PR0       sales spam
348  score ACRO8PR0          4  score ACRO8PR0          4
349    
350  # blarson 2007-09-11  # blarson 2007-09-15
351  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG)\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E)\b/
352  describe WBRS           stock spam  describe WBRS           stock spam
353  score WBRS              4  score WBRS              4
354    
355    body FOURLA             /\b([A-Z]\s?){4}\b/
356    describe FOURLA         Four letter acronym (stock spam?)
357    score FOURLA            1
358    
359    full WORDMONEY          /^\w+\s*:\s*(?:\$\s*[\d\.]+|[\d\.]+\s*USD)/mi
360    describe WORDMONEY      Word Colon Money
361    score WORDMONEY         1
362    
363    meta STOCKLIKE          (FOURLA && WORDMONEY)
364    describe STOCKLIKE      Four letter acronyms with money; stock scam
365    score STOCKLIKE         2
366    
367  # blarson 2007-01-26  # blarson 2007-01-26
368  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i
369  describe ACROBAT8       more sales spam  describe ACROBAT8       more sales spam
# Line 412  body DELAFT            /Please delete your private Line 429  body DELAFT            /Please delete your private
429  describe DELAFT         more pdf spam  describe DELAFT         more pdf spam
430  score DELAFT            3  score DELAFT            3
431    
432    # blarson 2007-09-13
433    header OFF1CE           subject =~ /\b[O0]ff[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
434    describe OFF1CE         off1ce spam
435    score OFF1CE            4
436    
437    # blarson 2007-09-13
438    header SOFTSALE         subject =~ /\bsoftware sales\b/i
439    describe SOFTSALE       software spam
440    score SOFTSALE          3
441    
442    # blarson 2007-09-18
443    body SUPERMACHO         /\bBe a supermacho/i
444    describe SUPERMACHO     supermacho
445    score SUPERMACHO        4
446    
447    # blarson 2007-09-19
448    body BIGINTER           /\bBig international commercial organization\b/i
449    describe BIGINTER       job spam
450    score BIGINTER          4
451    
452    # blarson 2007-09-20
453    header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note)|would like to chat)\b/i
454    describe HASSENT        sent a message
455    score HASSENT           4
456    
457    # blarson 2007-09-20
458    header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i
459    describe ORDERNUM       order number
460    score ORDERNUM          3
461    
462    # don 2007-09-20
463    header DICTIONARYSEQ    subject =~ /\b(\w{3})\w*(?:\s+\1\w*){2}/i
464    describe DICTIONARYSEQ  Ventricular Vents Venting Ventures
465    score DICTIONARYSEQ     3.5
466    
467    # blarson 2007-09-21
468    header NOLET            subject =~ /^\W{4,}$/
469    describe NOLET          swearing subject
470    score NOLET             2
471    
472    # blarson 2007-09-21
473    body SSIST              /^ssistant Manager/
474    describe SSIST          ssistant Manager
475    score SSIST             4
476    
477    # blarson 2007-09-21
478    body GRADUATEUNDER      /\bgraduate in under\b/i
479    describe GRADUATEUNDER  graduate in under
480    score GRADUATEUNDER     3
481    
482    # blarson 2007-09-24
483    header NOINVEST         subject =~ /\b(?:no investment|high.paid)\b/i
484    describe NOINVEST       no investment
485    score NOINVEST          4
486    
487    # blarson 2007-09-25
488    header INTEXP           subject =~ /\b[I|]nternet Exp[l|]orer\b/i
489    describe INTEXP         |nternet Exp|orer
490    score INTEXP            2
491    
492    # don 2007-09-29
493    header WORKATHOME       subject =~ /work\Wat\Whome/i
494    describe WORKATHOME     Work at home
495    score WORKATHOME        4
496    
497    # don 2007-10-01
498    body PHONENUMBER        /\b1[\-\.\s]?8[07]+[\-\.\s]?\d+/
499    describe PHONENUMBER    Toll free phone number
500    score PHONENUMBER       1.5
501    
502    # don 2007-10-02
503    header GERMANSPAM       subject =~ /Stellangebot/i
504    describe GERMANSPAM     Um... no clue what that is.
505    score GERMANSPAM        3
Legend:
Removed from v.13  
changed lines
  Added in v.38
  ViewVC Help
Powered by ViewVC 1.1.5