/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 106 by don, Tue Nov 20 20:02:40 2007 UTC revision 175 by don, Wed Mar 19 22:23:11 2008 UTC
# Line 85  describe REFWD         re or fwd nothing Line 85  describe REFWD         re or fwd nothing
85  score REFWD             3.5  score REFWD             3.5
86    
87  # blarson 2005-11-11  # blarson 2005-11-11
88  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\w+\s*$/i  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
89  describe ONEWORD        one word subject  describe ONEWORD        one word subject
90  score ONEWORD           1  score ONEWORD           2
91    
92  # robot101, 2003-09-22  # robot101, 2003-09-22
93  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/
# Line 193  header SENTMESSAGE     subject =~ /(sent you Line 193  header SENTMESSAGE     subject =~ /(sent you
193  describe SENTMESSAGE    Sent you a message (like duh?)  describe SENTMESSAGE    Sent you a message (like duh?)
194  score SENTMESSAGE       2  score SENTMESSAGE       2
195    
196  # blarson 2006-03-16 2007-09-18  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
197  body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
198    body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
199  describe DEARDIGIT      Dear number  describe DEARDIGIT      Dear number
200  score DEARDIGIT         3.9  score DEARDIGIT         3.9
201    
# Line 348  describe ACRO8PR0      sales spam Line 349  describe ACRO8PR0      sales spam
349  score ACRO8PR0          4  score ACRO8PR0          4
350    
351  # blarson 2007-10-05  # blarson 2007-10-05
352  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu])\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO)\b/
353  describe WBRS           stock spam  describe WBRS           stock spam
354  score WBRS              4  score WBRS              4
355    
# Line 358  score FOURLA           0.1 Line 359  score FOURLA           0.1
359    
360  meta STOCKLIKE          (FOURLA && (MONEY || SUBJMONEY))  meta STOCKLIKE          (FOURLA && (MONEY || SUBJMONEY))
361  describe STOCKLIKE      Four letter acronyms with money; stock scam  describe STOCKLIKE      Four letter acronyms with money; stock scam
362  score STOCKLIKE         2  score STOCKLIKE         1
363    
364  # blarson 2007-01-26  # blarson 2007-01-26
365  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i
# Line 649  describe CRETPROF      creative and perceptiv Line 650  describe CRETPROF      creative and perceptiv
650  score CRETPROF          2  score CRETPROF          2
651    
652  # blarson 2007-11-15  # blarson 2007-11-15
653  body REMOVEDOT          /\b(?:Remove|erase) the dot\b/i  body REMOVEDOT          /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
654  describe REMOVEDOT      Remove the dot  describe REMOVEDOT      Remove the dot
655  score REMOVEDOT         3  score REMOVEDOT         3
656    
# Line 662  score VENTTRANS                4 Line 663  score VENTTRANS                4
663  body HOLIDAYHERE        /\bHolidays are here\b/i  body HOLIDAYHERE        /\bHolidays are here\b/i
664  describe HOLIDAYHERE    Holidays are here  describe HOLIDAYHERE    Holidays are here
665  score HOLIDAYHERE       3  score HOLIDAYHERE       3
666    
667    # blarson 2007-11-22
668    header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
669    describe CAPINIT        Capinit Every Word
670    score CAPINIT           3
671    
672    # blarson 2007-11-23
673    body REMOVESPACE        /\b(?:remove|w\/o|without|delete) spaces?\b/i
674    describe REMOVESPACE    w/o space
675    score REMOVESPACE       2
676    
677    # blason 2007-11-27
678    header BEAHERO          subject =~ /Be a hero/
679    describe BEAHERO        Be a hero
680    score BEAHERO           4
681    
682    # blarson 2007-11-28
683    header SOFTCHEAP        subject =~ /Soft and cheap/i
684    describe SOFTCHEAP      Soft and cheap
685    score SOFTCHEAP         3
686    
687    # blarson 2007-11-30
688    body CHEAPSOFT          /\bcheap (?:OEM)?\s*soft(?:ware)?/i
689    describe CHEAPSOFT      cheap OEM soft
690    score CHEAPSOFT         2
691    
692    # blarson 2007-11-30
693    header MAKEMONEY        subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
694    describe MAKEMONEY      Make Cash
695    score MAKEMONEY         3
696    
697    # blarson 2007-12-07
698    header PREVED           subject =~ /\bPreved\b/i
699    describe PREVED         Preved
700    score PREVED            3
701    
702    # blarson 2007-12-08
703    body YOURPROFILE        /\byour profile\b/i
704    describe YOURPROFILE    your profile
705    score YOURPROFILE       2
706    
707    # blarson 2007-12-09
708    body SEEKEMP            /\bseeking for employees\b/
709    describe SEEKEMP        seeking for employees
710    score SEEKEMP           3
711    
712    # blarson 2007-12-27
713    body PRICELIST          /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
714    describe PRICELIST      list of prices
715    score PRICELIST         1
716    
717    # blarson 2007-12-30
718    full OEMSOFT            /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
719    describe OEMSOFT        OEM software
720    score OEMSOFT           2
721    
722    # don 2008-02-23
723    body MSSOFTWARE         /(?:Microsoft|Windows) (?:Office Enterprise|Vista Ultimate)/i
724    describe MSSOFTWARE     Microsoft Office Enterprise/Vista Ultimate
725    score MSSOFTWARE        3
726    
727    # blarson 2008-01-01
728    header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/
729    describe NIGHTGIRL      night ... girlfriend
730    score NIGHTGIRL         3
731    
732    body SITESUBJECT        /\bPlease see this site in Subject\b/i
733    describe SITESUBJECT    Pls check this new site
734    score SITESUBJECT       3
735    
736    # tomv 2008-01-01
737    header PLSCHECKSITE     from =~ /\bPls check this new site\b/i
738    describe PLSCHECKSITE   Pls check this new site
739    score PLSCHECKSITE      4
740    
741    # blarson 2008-01-03
742    header MARRYCH          subject =~ /\bMarry Christmas\b/
743    describe MARRYCH        Marry Christmas
744    score MARRYCH           3
745    
746    # don 2008-01-7
747    header BUYTHEPRODUCT    subject =~ /Buy the product/i
748    describe BUYTHEPRODUCT  Buy the product subject
749    score BUYTHEPRODUCT     3
750    
751    # blarson 2008-01-11
752    body IBERIS             /\bIberis Capital Group\b/
753    describe IBERIS         Iberis Capital Group
754    score IBERIS            4
755    
756    # blarson 2008-01-18
757    header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i
758    describe HIFROM         hello from
759    score HIFROM            2
760    
761    # blarson 2008-01-22
762    body INTCORP            /\bInternational\s+corporation\b/i
763    describe INTCORP        International corporation
764    score INTCORP           2
765    
766    # blarson 2008-01-23
767    header ISITYOU          subject =~ /\bis it you\b/i
768    describe ISITYOU        is it you
769    score ISITYOU           2
770    
771    # blarson 2008-01-27
772    header CUSTOMERALERT    subject =~ /\bCustomer alert\b/i
773    describe CUSTOMERALERT  Customer alert
774    score CUSTOMERALERT     3
775    
776    # blarson 2008-02-16
777    body SLASHITY           /^\s*\/\/\/.*\\\\\\\s*$/
778    describe SLASHITY       /// ... \\\
779    score SLASHITY          2
780    
781    # blarson 2008-02-20
782    full OPENPOS            /\bopen\s*position/i
783    describe OPENPOS        open positions
784    score OPENPOS           3
785    
786    # don 2008-02-23
787    header EBAYMEMBER       subject =~ /message from ebay member/i
788    describe EBAYMEMBER     Message from ebay member
789    score EBAYMEMBER        4
790    
791    # blarson 2008-02-25
792    header RESPONSERES      subject =~ /\bResponse to Resume\b/i
793    describe RESPONSERES    Response to Resume
794    score RESPONSERES       3
795    
796    # blarson 2008-02-29
797    body INTCOMP            /^International company/
798    describe INTCOMP        International company
799    score INTCOMP           3
800    
801    # blarson 2008-03-04
802    header VIAGPHRA         subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
803    describe VIAGPHRA       misc spam phrases
804    score VIAGPHRA          4
805    
806    # blarson 2008-03-05
807    body SEXHEALTH          /\bSexual Health/i
808    describe SEXHEALTH      Sexual Health
809    score SEXHEALTH         4
810    
811    # blarson 2008-03-12
812    header ADEGREE          subject =~ /\b(a|some|quick)\s+degree\b/i
813    describe ADEGREE        a degree
814    score ADEGREE           3
815    
816    # blarson 2008-03-12
817    rawbody PZIP            /\bfilename\=\"\w\.zip\"/
818    describe PZIP           p.zip
819    score PZIP              3
820    
821    # blarson 2008-03-13
822    header RETWO            subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
823    describe RETWO          RE: bogus arbitrary
824    score RETWO             2
825    
826    # don 2008-03-17
827    full SUBBODYREP         /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/i
828    describe SUBBODYREP     Repeated word in subject and body without spaces
829    score SUBBODYREP        3
830    
831    # don 2008-03-19
832    full MYMSNNAMEIS        /my\s+(?:msn|messenger|msn mesenger|aim|aol|screen)\s+(?:name\s+)?is\s+\S+\@\S+/i
833    describe MYMSNAMEIS     My screen name is foo@bar.com
834    score MYMSNNAMEIS       2.5
Legend:
Removed from v.106  
changed lines
  Added in v.175
  ViewVC Help
Powered by ViewVC 1.1.5