/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 156 by don, Sat Feb 23 23:35:11 2008 UTC revision 260 by don, Sat Dec 13 13:45:07 2008 UTC
# Line 39  score  MDO_AUTORESP7   0.1 Line 39  score  MDO_AUTORESP7   0.1
39  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1
40  score   MDO_AUTORESP_META1      2.0  score   MDO_AUTORESP_META1      2.0
41    
42  body MURPHY_DIPLOMA     /Diploma/  body MURPHY_DIPLOMA     /dip[l1]omas?/i
43  describe MURPHY_DIPLOMA No Diploma  describe MURPHY_DIPLOMA No Diploma
44  score MURPHY_DIPLOMA    1  score MURPHY_DIPLOMA    1
45    
# Line 164  score TEDIOUS_WITTER   2 Line 164  score TEDIOUS_WITTER   2
164    
165  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
166  # blarson 2004-06-09  # blarson 2004-06-09
167  header UNI_DIPLOMA      Subject =~ /\b(university|college)\s+(diploma|cert|degree)/i  header UNI_DIPLOMA      subject =~ /\b(?:university|college|doctora+te|bache+lor|maste+rs?)[\/\s]+(?:(dip[l1][o0]ma|cert|degree)|(?:university|college|doctora+te|bache+lor|maste+rs?))/i
168  describe UNI_DIPLOMA    Got one, thanks  describe UNI_DIPLOMA    Got a diploma, thanks
169  score UNI_DIPLOMA       4  score UNI_DIPLOMA       4
170    
171  # blarson 2004-04-27  # blarson 2004-04-27
# Line 174  describe UNI2  Got one, thanks Line 174  describe UNI2  Got one, thanks
174  score UNI2      4  score UNI2      4
175    
176  # don 2007-11-03  # don 2007-11-03
177  body UNI3               /(?:(?:masters|batchelor|m\s*b\s*a\s*|ph\.?\s*d)\s*[,.]?\s*){2,}/i  body UNI3               /(?:(?:maste+rs|batche+lor|m\s*b\s*a\s*|ph\.?\s*d|doctora+te)\s*[,.\/]?\s*){2,}/i
178  describe UNI3           multiple types of degrees  describe UNI3           multiple types of degrees
179  score UNI3              2  score UNI3              2
180    
# Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes
188  describe MESSAGESUB     really descriptive subject  describe MESSAGESUB     really descriptive subject
189  score MESSAGESUB        3  score MESSAGESUB        3
190    
 # don 2007-09-20  
 header SENTMESSAGE      subject =~ /(sent you a( personal|) message|would like to chat)/i  
 describe SENTMESSAGE    Sent you a message (like duh?)  
 score SENTMESSAGE       2  
   
191  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
192  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
193  body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i  body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
# Line 349  describe ACRO8PR0      sales spam Line 344  describe ACRO8PR0      sales spam
344  score ACRO8PR0          4  score ACRO8PR0          4
345    
346  # blarson 2007-10-05  # blarson 2007-10-05
347  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO|DCNM|mpix|MPIX|UCSO|TBCO)\b/
348  describe WBRS           stock spam  describe WBRS           stock spam
349  score WBRS              4  score WBRS              4
350    
# Line 447  describe BIGINTER      job spam Line 442  describe BIGINTER      job spam
442  score BIGINTER          4  score BIGINTER          4
443    
444  # blarson 2007-09-20  # blarson 2007-09-20
445  header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note)|would like to chat)\b/i  header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note))\b/i
446  describe HASSENT        sent a message  describe HASSENT        sent a message
447  score HASSENT           4  score HASSENT           4
448    
449    # don 2008-04-19
450    header WANTTOCHAT       subject =~ /\b(?:(?:would like|wants|feels?) (?:to chat|like chatting|to keep up with you))\b/i
451    describe WANTTOCHAT     I want to chat/keep up with spam
452    score WANTTOCHAT        5.5
453    
454  # blarson 2007-09-20  # blarson 2007-09-20
455  header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i  header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i
456  describe ORDERNUM       order number  describe ORDERNUM       order number
# Line 538  score WORKEXP          3 Line 538  score WORKEXP          3
538  # blarson 2007-10-24  # blarson 2007-10-24
539  body NICEGIRL           /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i  body NICEGIRL           /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
540  describe NICEGIRL       nice girl  describe NICEGIRL       nice girl
541  score NICEGIRL          2  score NICEGIRL          3
   
 # blarson 2007-10-16  
 header FEALCHAT         subject =~ /\bFeel Like Chatting\b/i  
 describe FEALCHAT       Feel Like Chatting  
 score FEALCHAT          3  
542    
543  # blarson 2007-10-18  # blarson 2007-10-18
544  header DFF1CE           subject =~ /UmU6INDSydfF1CE/i  header DFF1CE           subject =~ /UmU6INDSydfF1CE/i
# Line 650  describe CRETPROF      creative and perceptiv Line 645  describe CRETPROF      creative and perceptiv
645  score CRETPROF          2  score CRETPROF          2
646    
647  # blarson 2007-11-15  # blarson 2007-11-15
648  body REMOVEDOT          /\b(?:Remove|erase) the dot\b/i  body REMOVEDOT          /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
649  describe REMOVEDOT      Remove the dot  describe REMOVEDOT      Remove the dot
650  score REMOVEDOT         3  score REMOVEDOT         3
651    
# Line 665  describe HOLIDAYHERE   Holidays are here Line 660  describe HOLIDAYHERE   Holidays are here
660  score HOLIDAYHERE       3  score HOLIDAYHERE       3
661    
662  # blarson 2007-11-22  # blarson 2007-11-22
663  header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/  header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-\']+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
664  describe CAPINIT        Capinit Every Word  describe CAPINIT        Capinit Every Word
665  score CAPINIT           3  score CAPINIT           3
666    
# Line 719  full OEMSOFT           /\b[O0]EM\s+s[o0][\W_]?ft_ Line 714  full OEMSOFT           /\b[O0]EM\s+s[o0][\W_]?ft_
714  describe OEMSOFT        OEM software  describe OEMSOFT        OEM software
715  score OEMSOFT           2  score OEMSOFT           2
716    
717    # tviehmann 2008-07-20
718    full XORGBUGREPORTS     /\/usr\/lib\/xorg\/modules/
719    describe XORGBUGREPORTS ameliorate score of xorg bug reports matching OEMSOFT
720    score XORGBUGREPORTS    -5
721    
722    # don 2008-02-23
723    body MSSOFTWARE         /(?:Microsoft|Windows) (?:Office Enterprise|Vista Ultimate)/i
724    describe MSSOFTWARE     Microsoft Office Enterprise/Vista Ultimate
725    score MSSOFTWARE        3
726    
727  # blarson 2008-01-01  # blarson 2008-01-01
728  header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/  header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/
729  describe NIGHTGIRL      night ... girlfriend  describe NIGHTGIRL      night ... girlfriend
# Line 751  score IBERIS           4 Line 756  score IBERIS           4
756  # blarson 2008-01-18  # blarson 2008-01-18
757  header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i  header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i
758  describe HIFROM         hello from  describe HIFROM         hello from
759  score HIFROM            2  score HIFROM            3
760    
761  # blarson 2008-01-22  # blarson 2008-01-22
762  body INTCORP            /\bInternational\s+corporation\b/i  body INTCORP            /\bInternational\s+corporation\b/i
# Line 782  score OPENPOS          3 Line 787  score OPENPOS          3
787  header EBAYMEMBER       subject =~ /message from ebay member/i  header EBAYMEMBER       subject =~ /message from ebay member/i
788  describe EBAYMEMBER     Message from ebay member  describe EBAYMEMBER     Message from ebay member
789  score EBAYMEMBER        4  score EBAYMEMBER        4
790    
791    # blarson 2008-02-25
792    header RESPONSERES      subject =~ /\bResponse to Resume\b/i
793    describe RESPONSERES    Response to Resume
794    score RESPONSERES       3
795    
796    # blarson 2008-02-29
797    body INTCOMP            /^International company/
798    describe INTCOMP        International company
799    score INTCOMP           3
800    
801    # blarson 2008-03-04
802    header VIAGPHRA         subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
803    describe VIAGPHRA       misc spam phrases
804    score VIAGPHRA          4
805    
806    # blarson 2008-03-05
807    body SEXHEALTH          /\bSexual Health/i
808    describe SEXHEALTH      Sexual Health
809    score SEXHEALTH         4
810    
811    # blarson 2008-03-12
812    header ADEGREE          subject =~ /\b(a|some|quick)\s+degree\b/i
813    describe ADEGREE        a degree
814    score ADEGREE           3
815    
816    # blarson 2008-03-12
817    rawbody PZIP            /\bfilename\=\"\w\w?\.zip\"/
818    describe PZIP           p.zip
819    score PZIP              3
820    
821    # blarson 2008-03-13
822    header RETWO            subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
823    describe RETWO          RE: bogus arbitrary
824    score RETWO             2
825    
826    # don 2008-03-17
827    full SUBBODYREP         /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/i
828    describe SUBBODYREP     Repeated word in subject and body without spaces
829    score SUBBODYREP        3
830    
831    # don 2008-03-19
832    full MYMSNNAMEIS        /(?:add\s+me\s+on|my)\s+(?:msn|(?:live|msn|)\s*mess?enger|aim|aol|screen)\s+(?:name\s+)?(?:is)?\s+\S+\@\S+/i
833    describe MYMSNNAMEIS    My screen name is foo@bar.com
834    score MYMSNNAMEIS       2.5
835    
836    # blarson 2008-03-20
837    body LONGWURL           /^[\w\-]{11,}\s+http\:\/\/[\w\.\-]{4,}\s*$/
838    describe LONGWURL       longWord URL
839    score LONGWURL          2
840    
841    # blarson 2008-03-20
842    header ITCSTORE         subject =~ /ITC Store/
843    describe ITCSTORE       ITC Store
844    score ITCSTORE          4
845    
846    # blarson 2008-03-26
847    header GENDER           subject =~ /\b(?:she|her|wom[ae]n|m[ae]n|girls?|males?|females?|herself|wife|ladies|lady|wives|(?:girl|boy)friends?)\b/i
848    describe GENDER         gender pronoun in subject
849    score GENDER            1
850    
851    # blarson 2008-03-28
852    body REBODY             /^re\:\s/
853    describe REBODY         re: in body
854    score REBODY            2
855    
856    # blarson 2008-04-01
857    header REREHI           subject =~ /^Re: Re: H(i|ello)\s*$/i
858    describe REREHI         Re: Re: Hi
859    score REREHI            3
860    
861    # blarson 2008-04-10
862    header PEROFF           subject =~ /\d+\%\s+off\b/i
863    describe PEROFF         xx% off
864    score PEROFF            3
865    
866    # blarson 2008-04-10
867    header SUMHERE          subject =~ /\b(?:summer|winter|fall|spring) is here\b/i
868    describe SUMHERE        summer is here
869    score SUMHERE           3
870    
871    # don 2008-04-24
872    header INVITATIONFROM   subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i
873    describe INVITATIONFROM Invitation from Spammer
874    score INVITATIONFROM    5
875    
876    # blarson 2008-04-28
877    header RERE             subject =~ /^Re\:\s+Re\:\s+/i
878    describe RERE           Re: Re:
879    score RERE                      1
880    
881    # don 2008-04-30
882    header CLAIMTICKETS     subject =~ /claim.+ticket/i
883    describe CLAIMTICKETS   Blah blah claim ticket
884    score CLAIMTICKETS      4
885    
886    # don 2008-05-05
887    header WAITINGREPLY     subject =~ /waiting for your? (reply|to repsond|response)/i
888    describe WAITINGREPLY   Waiting for your reply
889    score WAITINGREPLY      4
890    
891    # don 2008-05-15
892    body CONTACTUS          /contact us by email:/
893    score CONTACTUS         3
894    describe CONTACTUS      Don't contact us, we'll spam you
895    
896    # don 2008-06-18
897    header FASHION          subject =~ /(?:(?:armani|gucci|chanel|boss|versache|ugg|dsquared)(?:\,\s*|$)){2,}/i
898    describe FASHION        Fashion designers in subject
899    score FASHION           2
900    
901    # don 2008-07-30
902    header SCOUR            subject =~ /Scour(?:.com)? invite from/
903    describe SCOUR          Scour invite from some spammer
904    score SCOUR             3
905    
906    # don 2008-09-04
907    body  YOURNAME          /\d+\)\s*y+o+u+r+\s*n+a+m+e+/i
908    describe YOURNAME       1) your name is spam
909    score YOURNAME          3
910    
911    # blarson 2008-12-11
912    header TWITTER          subject =~ /you on Twitter/
913    describe TWITTER        Twitter invite spam
914    score TWITTER           4
Legend:
Removed from v.156  
changed lines
  Added in v.260
  ViewVC Help
Powered by ViewVC 1.1.5