/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 2 by don, Sat Sep 8 17:39:45 2007 UTC revision 314 by zobel, Mon Aug 31 11:30:18 2009 UTC
# Line 1  Line 1 
1    # -*- mode: spamassassin -*-
2  # Added some rules from Rule du Jour that I've been testing for a while  # Added some rules from Rule du Jour that I've been testing for a while
3    
4  #Monotone (from airmax.cf)  #Monotone (from airmax.cf)
# Line 39  score  MDO_AUTORESP7   0.1 Line 40  score  MDO_AUTORESP7   0.1
40  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1
41  score   MDO_AUTORESP_META1      2.0  score   MDO_AUTORESP_META1      2.0
42    
43  body MURPHY_DIPLOMA     /Diploma/  body MURPHY_DIPLOMA     /dip[l1]omas?/i
44  describe MURPHY_DIPLOMA No Diploma  describe MURPHY_DIPLOMA No Diploma
45  score MURPHY_DIPLOMA    1  score MURPHY_DIPLOMA    1
46    
# Line 79  body AFFILIATEID        /affiliate.?id/i Line 80  body AFFILIATEID        /affiliate.?id/i
80  describe AFFILIATEID    affiliate id  describe AFFILIATEID    affiliate id
81  score AFFILIATEID       3  score AFFILIATEID       3
82    
 # joy, 2003-08-30, 2003-09-21  
 header FW               Subject =~ /^Fw: /  
 describe FW             Sounds like a Fw: spam  
 score FW                3  
   
83  # blarson 2007-07-13  # blarson 2007-07-13
84  header REFWD            subject =~ /\b(?:RE|FWD)\:\s*$/i  header REFWD            subject =~ /\b(?:RE|FWD?|AW)(?:\[\d+\])?\:\s*$/i
85  describe REFWD          re or fwd nothing  describe REFWD          re or fwd nothing
86  score REFWD             3  score REFWD             3.5
87    
88  # blarson 2005-11-11  # blarson 2005-11-11
89  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\w+\s*$/i  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
90  describe ONEWORD        one word subject  describe ONEWORD        one word subject
91  score ONEWORD           1  score ONEWORD           2
92    
93  # robot101, 2003-09-22  # robot101, 2003-09-22
94  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/
# Line 169  score TEDIOUS_WITTER   2 Line 165  score TEDIOUS_WITTER   2
165    
166  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
167  # blarson 2004-06-09  # blarson 2004-06-09
168  header UNI_DIPLOMA      Subject =~ /\b(university|college)\s+(diploma|cert|degree)/i  header UNI_DIPLOMA      subject =~ /\b(?:university|college|doctora+te|bache+lor|maste+rs?)[\/\s]+(?:(dip[l1][o0]ma|cert|degree)|(?:university|college|doctora+te|bache+lor|maste+rs?))/i
169  describe UNI_DIPLOMA    Got one, thanks  describe UNI_DIPLOMA    Got a diploma, thanks
170  score UNI_DIPLOMA       4  score UNI_DIPLOMA       4
171    
172  # blarson 2004-04-27  # blarson 2004-04-27
# Line 178  body UNI2      /university\s+(diploma|cert|de Line 174  body UNI2      /university\s+(diploma|cert|de
174  describe UNI2   Got one, thanks  describe UNI2   Got one, thanks
175  score UNI2      4  score UNI2      4
176    
177    # don 2007-11-03
178    body UNI3               /(?:(?:maste+rs|batche+lor|m\s*b\s*a\s*|ph\.?\s*d|doctora+te)\s*[,.\/]?\s*){2,}/i
179    describe UNI3           multiple types of degrees
180    score UNI3              2
181    
182  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
183  header JOB_CONFIRM      Subject =~ /Job confirmation/  header JOB_CONFIRM      Subject =~ /Job confirmation/
184  describe JOB_CONFIRM    Got one of these too, thanks  describe JOB_CONFIRM    Got one of these too, thanks
# Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes Line 189  header MESSAGESUB      subject =~ /^\s*\(?mes
189  describe MESSAGESUB     really descriptive subject  describe MESSAGESUB     really descriptive subject
190  score MESSAGESUB        3  score MESSAGESUB        3
191    
192  # blarson 2006-03-16 2007-08-28  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
193  body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|Yo|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon)|what.?i?s\s+up|greetings|Salutations|(Mail|News)\s+to|how.?s?\s*(?:(?:it)?\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?)\,?\s+(?:Account\s+\#?|\=?3d|)\d{3,}/i  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
194    body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
195  describe DEARDIGIT      Dear number  describe DEARDIGIT      Dear number
196  score DEARDIGIT         3.9  score DEARDIGIT         3.9
197    
# Line 226  score DIRT             3 Line 228  score DIRT             3
228  # blarson 2005-04-17  # blarson 2005-04-17
229  body RNDWORD            /^RND_WORD\s*$/  body RNDWORD            /^RND_WORD\s*$/
230  describe RNDWORD        RND_WORD  describe RNDWORD        RND_WORD
231  score RND_WORD          3  score RNDWORD           3
232    
233  # blarson 2005-08-18  # blarson 2005-08-18
234  header D3GREE           subject =~ /\bd(?:3gres?|esgre|eerge|eeerg|reege|egres)e?s?\b/i  header D3GREE           subject =~ /\bd(?:3gres?|esgre|eerge|eeerg|reege|egres)e?s?\b/i
# Line 342  header ACRO8PR0                subject =~ /\bAcr[0o]ba Line 344  header ACRO8PR0                subject =~ /\bAcr[0o]ba
344  describe ACRO8PR0       sales spam  describe ACRO8PR0       sales spam
345  score ACRO8PR0          4  score ACRO8PR0          4
346    
347  # blarson 2007-08-31  # blarson 2007-10-05
348  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?)\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO|DCNM|mpix|MPIX|UCSO|TBCO)\b/
349  describe WBRS           stock spam  describe WBRS           stock spam
350  score BRS               4  score WBRS              4
351    
352    body FOURLA             /\b([A-Z]\s?){4}\b/
353    describe FOURLA         Four letter acronym (stock spam?)
354    score FOURLA            0.1
355    
356    meta STOCKLIKE          (FOURLA && (MONEY || SUBJMONEY))
357    describe STOCKLIKE      Four letter acronyms with money; stock scam
358    score STOCKLIKE         1
359    
360  # blarson 2007-01-26  # blarson 2007-01-26
361  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i
# Line 412  body DELAFT            /Please delete your private Line 422  body DELAFT            /Please delete your private
422  describe DELAFT         more pdf spam  describe DELAFT         more pdf spam
423  score DELAFT            3  score DELAFT            3
424    
425    # blarson 2007-09-13
426    header OFF1CE           subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
427    describe OFF1CE         off1ce spam
428    score OFF1CE            4
429    
430    # blarson 2007-09-13
431    header SOFTSALE         subject =~ /\bsoftware sales\b/i
432    describe SOFTSALE       software spam
433    score SOFTSALE          3
434    
435    # blarson 2007-09-18
436    body SUPERMACHO         /\bBe a supermacho/i
437    describe SUPERMACHO     supermacho
438    score SUPERMACHO        4
439    
440    # blarson 2007-09-19
441    body BIGINTER           /\bBig international commercial organization\b/i
442    describe BIGINTER       job spam
443    score BIGINTER          4
444    
445    # blarson 2007-09-20
446    header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note))\b/i
447    describe HASSENT        sent a message
448    score HASSENT           4
449    
450    # don 2008-04-19
451    header WANTTOCHAT       subject =~ /\b(?:(?:would like|wants|feels?) (?:to chat|like chatting|to keep up with you))\b/i
452    describe WANTTOCHAT     I want to chat/keep up with spam
453    score WANTTOCHAT        5.5
454    
455    # blarson 2007-09-20
456    header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i
457    describe ORDERNUM       order number
458    score ORDERNUM          3
459    
460    # don 2007-09-20
461    header DICTIONARYSEQ    subject =~ /\b(\w{3})\w*(?:\s+\1\w*){2}/i
462    describe DICTIONARYSEQ  Ventricular Vents Venting Ventures
463    score DICTIONARYSEQ     3.5
464    
465    # blarson 2007-09-21
466    header NOLET            subject =~ /^\W{4,}$/
467    describe NOLET          swearing subject
468    score NOLET             2
469    
470    # blarson 2007-09-21
471    body SSIST              /^ssistant Manager/
472    describe SSIST          ssistant Manager
473    score SSIST             4
474    
475    # blarson 2007-09-21
476    body GRADUATEUNDER      /\bgraduate in under\b/i
477    describe GRADUATEUNDER  graduate in under
478    score GRADUATEUNDER     3
479    
480    # blarson 2007-09-24
481    header NOINVEST         subject =~ /\b(?:no investment|high.paid)\b/i
482    describe NOINVEST       no investment
483    score NOINVEST          4
484    
485    # blarson 2007-09-25
486    header INTEXP           subject =~ /\b[I|]nternet Exp[l|]orer\b/i
487    describe INTEXP         |nternet Exp|orer
488    score INTEXP            2
489    
490    # don 2007-09-29
491    header WORKATHOME       subject =~ /work\Wat\Whome/i
492    describe WORKATHOME     Work at home
493    score WORKATHOME        4
494    
495    # don 2007-10-01
496    body PHONENUMBER        /\b1[\-\.\s]?8[07]+[\-\.\s]?\d+/
497    describe PHONENUMBER    Toll free phone number
498    score PHONENUMBER       1.5
499    
500    # don 2007-10-02
501    body GERMANSPAM         /Zerix Intern/i
502    describe GERMANSPAM     Um... no clue what that is.
503    score GERMANSPAM        3
504    
505    body URBANNEWS          /UrbaNNews\.ro/
506    describe URBANNEWS      URBANNEWS Newsletter
507    score URBANNEWS         3
508    
509    # blarson 2007-10-05
510    header JOBS             subject =~ /\b(?:job|Employ(?:ers|ment|ee))s?\b/i
511    describe JOBS           job spam
512    score JOBS              1
513    
514    # don 2007-10-09
515    header FREEPASSWORD     subject =~ /your\s*free\s*password/i
516    describe FREEPASSWORD   We don't need free password
517    score FREEPASSWORD      3
518    
519    # don 2007-10-11
520    header AFRICABYBIKE     subject =~ /africa\s*by\s*bike/i
521    describe AFRICABYBIKE   We don't care about africa by bike or car or bus or train
522    score AFRICABYBIKE      4
523    
524    # blarson 2007-10-14
525    header BRAKETDIGIT      subject =~ /\[\d+\]\:\s*$/
526    describe BRAKETDIGIT    braketed digit colon last in subject
527    score BRAKETDIGIT       2
528    
529    # blarson 2007-10-14
530    full WHATISOEM          /\bWhat\s*is\s*OEM\b/i
531    describe WHATISOEM      What is OEM
532    score WHATISOEM         4
533    
534    # blarson 2007-10-15
535    body WORKEXP            /\bwork\s+experience\s+degree\b/i
536    describe WORKEXP        work experience degree
537    score WORKEXP           3
538    
539    # blarson 2007-10-24
540    body NICEGIRL           /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
541    describe NICEGIRL       nice girl
542    score NICEGIRL          3
543    
544    # blarson 2007-10-18
545    header DFF1CE           subject =~ /UmU6INDSydfF1CE/i
546    describe DFF1CE         korean spam
547    score DFF1CE            4
548    
549    # blarson 2007-10-23
550    header FAILNOTE         subject =~ /\bFailure notice\:/i
551    describe FAILNOTE       bounced spam
552    score FAILNOTE          4
553    
554    # blarson 2007-10-25
555    full STILLSINGLE        /\bstill\s+single\b/i
556    describe STILLSINGLE    still single
557    score STILLSINGLE       2
558    
559    # blarson 2007-10-26
560    header PERSONALCRED     subject =~ /\bPersonal\s+Credit/i
561    describe PERSONALCRED   Personal Credit
562    score PERSONALCRED      2
563    
564    # blarson 2007-10-26
565    body XMASGIFT           /\b(?:christ|x)mas gift\b/
566    describe XMASGIFT       christmas gift
567    score XMASGIFT          2
568    
569    # blarson 2007-10-26
570    body RONPAUL            /\bRon Paul\b/
571    describe RONPAUL        Ron Paul
572    score RONPAUL           3
573    
574    # blarson 2007-10-27
575    body YOURJOB            /your Job Verification Number/
576    describe YOURJOB        your Job Verification Number
577    score YOURJOB           3
578    
579    # blason 2007-10-28
580    body PASTERESUME        /\bPASTE your resume\b/i
581    describe PASTERESUME    PASTE your resume
582    score PASTERESUME       3
583    
584    body LETHIHELO          /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
585    describe LETHIHELO      Hello, how are you
586    score LETHIHELO         4
587    
588    # blarson 2007-10-29
589    body DIREKTOR           /Direktor of Softline/i
590    describe DIREKTOR       Direktor of Softline
591    score DIREKTOR          3
592    
593    # blarson 2007-10-29
594    body THEDEG             /\bthe_degree\b/
595    describe THEDEG         the_degree
596    score THEDEG            3
597    
598    # blason 2007-10-29
599    body DYNMH              /D Y N A M I C  M EDIA HOLDIN/
600    describe DYNMH          D Y N A M I C  M EDIA HOLDIN
601    score DYNMH             4
602    
603    # blarson 2007-10-30
604    header LEGBUD           subject =~ /\b(?:Legal|smoking) Bud/i
605    describe LEGBUD         Legal Bud
606    score LEGBUD            4
607    
608    # blarson 2007-10-30
609    full LEGBUD2            /\b(?:Legal|smoking) Bud/i
610    describe LEGBUD2        Legal Bud
611    score LEGBUD2           4
612    
613    # blarson 2007-10-31
614    body SMOKING            /\b(?:beat|stop|quit|without)\s+(?:nicotine|smoking|cigarettes)\b/i
615    describe SMOKING        stop smoking
616    score SMOKING           3
617    
618    # blarson 2007-11-04
619    header WORKHOME         subject =~ /\bwork\b.*\bhome\b/i
620    describe WORKHOME       work from home
621    score WORKHOME          2
622    
623    # blarson 2007-11-04
624    header HOMEWORK         subject =~ /\bhome\b.*\b(?:work|business|job|based)\b/i
625    describe HOMEWORK       home business
626    score HOMEWORK          3
627    
628    # blarson 2007-11-04
629    header REPRESENT        subject =~ /\bRepresent(?:ative)?\b.*\b(?:Country|needed)\b/i
630    describe REPRESENT      represent your country
631    score REPRESENT         2
632    
633    # blarson 2007-11-06
634    header NOFEE            subject =~ /\bNo\s+fee\b/i
635    describe NOFEE          No fee
636    score NOFEE             2
637    
638    # blarson 2007-11-07
639    body NEEDED             /\b(?:manager|executive)\b.*\bneeded\b/i
640    describe NEEDED         manager needed
641    score NEEDED            2
642    
643    # blarson 2007-11-10
644    body CRETPROF           /\b(?:creative|perceptive)\b.*\bprofessionals?\b/i
645    describe CRETPROF       creative and perceptive professionals
646    score CRETPROF          2
647    
648    # blarson 2007-11-15
649    body REMOVEDOT          /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
650    describe REMOVEDOT      Remove the dot
651    score REMOVEDOT         3
652    
653    # blarson 2007-11-19
654    full VENTTRANS          /\bVent Transports\b/
655    describe VENTTRANS      Vent Transports
656    score VENTTRANS         4
657    
658    # blarson 2007-11-19
659    body HOLIDAYHERE        /\bHolidays are here\b/i
660    describe HOLIDAYHERE    Holidays are here
661    score HOLIDAYHERE       3
662    
663    # blarson 2007-11-22
664    header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-\']+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
665    describe CAPINIT        Capinit Every Word
666    score CAPINIT           3
667    
668    # blarson 2007-11-23
669    body REMOVESPACE        /\b(?:remove|w\/o|without|delete) spaces?\b/i
670    describe REMOVESPACE    w/o space
671    score REMOVESPACE       2
672    
673    # blason 2007-11-27
674    header BEAHERO          subject =~ /Be a hero/
675    describe BEAHERO        Be a hero
676    score BEAHERO           4
677    
678    # blarson 2007-11-28
679    header SOFTCHEAP        subject =~ /Soft and cheap/i
680    describe SOFTCHEAP      Soft and cheap
681    score SOFTCHEAP         3
682    
683    # blarson 2007-11-30
684    body CHEAPSOFT          /\bcheap (?:OEM)?\s*soft(?:ware)?/i
685    describe CHEAPSOFT      cheap OEM soft
686    score CHEAPSOFT         2
687    
688    # blarson 2007-11-30
689    header MAKEMONEY        subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
690    describe MAKEMONEY      Make Cash
691    score MAKEMONEY         3
692    
693    # blarson 2007-12-07
694    header PREVED           subject =~ /\bPreved\b/i
695    describe PREVED         Preved
696    score PREVED            3
697    
698    # blarson 2007-12-08
699    body YOURPROFILE        /\byour profile\b/i
700    describe YOURPROFILE    your profile
701    score YOURPROFILE       2
702    
703    # blarson 2007-12-09
704    body SEEKEMP            /\bseeking for employees\b/
705    describe SEEKEMP        seeking for employees
706    score SEEKEMP           3
707    
708    # blarson 2007-12-27
709    body PRICELIST          /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
710    describe PRICELIST      list of prices
711    score PRICELIST         1
712    
713    # blarson 2007-12-30
714    full OEMSOFT            /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
715    describe OEMSOFT        OEM software
716    score OEMSOFT           2
717    
718    # tviehmann 2008-07-20
719    full XORGBUGREPORTS     /\/usr\/lib\/xorg\/modules/
720    describe XORGBUGREPORTS ameliorate score of xorg bug reports matching OEMSOFT
721    score XORGBUGREPORTS    -5
722    
723    # don 2008-02-23
724    body MSSOFTWARE         /(?:Microsoft|Windows) (?:Office Enterprise|Vista Ultimate)/i
725    describe MSSOFTWARE     Microsoft Office Enterprise/Vista Ultimate
726    score MSSOFTWARE        3
727    
728    # blarson 2008-01-01
729    header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/
730    describe NIGHTGIRL      night ... girlfriend
731    score NIGHTGIRL         3
732    
733    body SITESUBJECT        /\bPlease see this site in Subject\b/i
734    describe SITESUBJECT    Pls check this new site
735    score SITESUBJECT       3
736    
737    # tomv 2008-01-01
738    header PLSCHECKSITE     from =~ /\bPls check this new site\b/i
739    describe PLSCHECKSITE   Pls check this new site
740    score PLSCHECKSITE      4
741    
742    # blarson 2008-01-03
743    header MARRYCH          subject =~ /\bMarry Christmas\b/
744    describe MARRYCH        Marry Christmas
745    score MARRYCH           3
746    
747    # don 2008-01-7
748    header BUYTHEPRODUCT    subject =~ /Buy the product/i
749    describe BUYTHEPRODUCT  Buy the product subject
750    score BUYTHEPRODUCT     3
751    
752    # blarson 2008-01-11
753    body IBERIS             /\bIberis Capital Group\b/
754    describe IBERIS         Iberis Capital Group
755    score IBERIS            4
756    
757    # blarson 2008-01-18
758    header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i
759    describe HIFROM         hello from
760    score HIFROM            3
761    
762    # blarson 2008-01-22
763    body INTCORP            /\bInternational\s+corporation\b/i
764    describe INTCORP        International corporation
765    score INTCORP           2
766    
767    # blarson 2008-01-23
768    header ISITYOU          subject =~ /\bis it you\b/i
769    describe ISITYOU        is it you
770    score ISITYOU           2
771    
772    # blarson 2008-01-27
773    header CUSTOMERALERT    subject =~ /\bCustomer alert\b/i
774    describe CUSTOMERALERT  Customer alert
775    score CUSTOMERALERT     3
776    
777    # blarson 2008-02-16
778    body SLASHITY           /^\s*\/\/\/.*\\\\\\\s*$/
779    describe SLASHITY       /// ... \\\
780    score SLASHITY          2
781    
782    # blarson 2008-02-20
783    full OPENPOS            /\bopen\s*position/i
784    describe OPENPOS        open positions
785    score OPENPOS           3
786    
787    # don 2008-02-23
788    header EBAYMEMBER       subject =~ /message from ebay member/i
789    describe EBAYMEMBER     Message from ebay member
790    score EBAYMEMBER        4
791    
792    # blarson 2008-02-25
793    header RESPONSERES      subject =~ /\bResponse to Resume\b/i
794    describe RESPONSERES    Response to Resume
795    score RESPONSERES       3
796    
797    # blarson 2008-02-29
798    body INTCOMP            /^International company/
799    describe INTCOMP        International company
800    score INTCOMP           3
801    
802    # blarson 2008-03-04
803    header VIAGPHRA         subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
804    describe VIAGPHRA       misc spam phrases
805    score VIAGPHRA          4
806    
807    # blarson 2008-03-05
808    body SEXHEALTH          /\bSexual Health/i
809    describe SEXHEALTH      Sexual Health
810    score SEXHEALTH         4
811    
812    # blarson 2008-03-12
813    header ADEGREE          subject =~ /\b(a|some|quick)\s+degree\b/i
814    describe ADEGREE        a degree
815    score ADEGREE           3
816    
817    # blarson 2008-03-12
818    rawbody PZIP            /\bfilename\=\"\w\w?\.zip\"/
819    describe PZIP           p.zip
820    score PZIP              3
821    
822    # blarson 2008-03-13
823    header RETWO            subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
824    describe RETWO          RE: bogus arbitrary
825    score RETWO             2
826    
827    # don 2008-03-17
828    full SUBBODYREP         /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/i
829    describe SUBBODYREP     Repeated word in subject and body without spaces
830    score SUBBODYREP        3
831    
832    # don 2008-03-19
833    full MYMSNNAMEIS        /(?:add\s+me\s+on|my)\s+(?:msn|(?:live|msn|)\s*mess?enger|aim|aol|screen)\s+(?:name\s+)?(?:is)?\s+\S+\@\S+/i
834    describe MYMSNNAMEIS    My screen name is foo@bar.com
835    score MYMSNNAMEIS       2.5
836    
837    # blarson 2008-03-20
838    body LONGWURL           /^[\w\-]{11,}\s+http\:\/\/[\w\.\-]{4,}\s*$/
839    describe LONGWURL       longWord URL
840    score LONGWURL          2
841    
842    # blarson 2008-03-20
843    header ITCSTORE         subject =~ /ITC Store/
844    describe ITCSTORE       ITC Store
845    score ITCSTORE          4
846    
847    # blarson 2008-03-26
848    header GENDER           subject =~ /\b(?:she|her|wom[ae]n|m[ae]n|girls?|males?|females?|herself|wife|ladies|lady|wives|(?:girl|boy)friends?)\b/i
849    describe GENDER         gender pronoun in subject
850    score GENDER            1
851    
852    # blarson 2008-03-28
853    body REBODY             /^re\:\s/
854    describe REBODY         re: in body
855    score REBODY            2
856    
857    # blarson 2008-04-01
858    header REREHI           subject =~ /^Re: Re: H(i|ello)\s*$/i
859    describe REREHI         Re: Re: Hi
860    score REREHI            3
861    
862    # blarson 2008-04-10
863    header PEROFF           subject =~ /\d+\%\s+off\b/i
864    describe PEROFF         xx% off
865    score PEROFF            3
866    
867    # blarson 2008-04-10
868    header SUMHERE          subject =~ /\b(?:summer|winter|fall|spring) is here\b/i
869    describe SUMHERE        summer is here
870    score SUMHERE           3
871    
872    # don 2008-04-24
873    header INVITATIONFROM   subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i
874    describe INVITATIONFROM Invitation from Spammer
875    score INVITATIONFROM    5
876    
877    # blarson 2008-04-28
878    header RERE             subject =~ /^Re\:\s+Re\:\s+/i
879    describe RERE           Re: Re:
880    score RERE                      1
881    
882    # don 2008-04-30
883    header CLAIMTICKETS     subject =~ /claim.+ticket/i
884    describe CLAIMTICKETS   Blah blah claim ticket
885    score CLAIMTICKETS      4
886    
887    # don 2008-05-05
888    header WAITINGREPLY     subject =~ /waiting for your? (reply|to repsond|response)/i
889    describe WAITINGREPLY   Waiting for your reply
890    score WAITINGREPLY      4
891    
892    # don 2008-05-15
893    body CONTACTUS          /contact us by email:/
894    score CONTACTUS         3
895    describe CONTACTUS      Don't contact us, we'll spam you
896    
897    # don 2008-06-18
898    header FASHION          subject =~ /(?:(?:armani|gucci|chanel|boss|versache|ugg|dsquared)(?:\,\s*|$)){2,}/i
899    describe FASHION        Fashion designers in subject
900    score FASHION           2
901    
902    # don 2008-07-30
903    header SCOUR            subject =~ /Scour(?:.com)? invite from/
904    describe SCOUR          Scour invite from some spammer
905    score SCOUR             3
906    
907    # don 2008-09-04
908    body  YOURNAME          /\d+\)\s*y+o+u+r+\s*n+a+m+e+/i
909    describe YOURNAME       1) your name is spam
910    score YOURNAME          3
911    
912    # blarson 2008-12-11
913    header TWITTER          subject =~ /you on Twitter/
914    describe TWITTER        Twitter invite spam
915    score TWITTER           4
916    
917    # don 2008-12-18
918    uri DOS_LIVE_SPACES_CID /cid-.{10,20}\.spaces\.live\.com/
919    describe DOS_LIVE_SPACES_CID    live spaces uri
920    score DOS_LIVE_SPACES_CID       3
921    
922    # don 2008-12-18
923    header CHRISTMAS        subject =~ /chris+tma+s (pleasure+|night)/i
924    describe CHRISTMAS      Does christmas really give you pleasure?
925    score CHRISTMAS         2
926    
927    # cord 2008-12-27 (transfered from rc.spam)
928    full AWARD_WINNING      /Award win/i
929    describe AWARD_WINNING  We don't believe it.
930    score AWARD_WINNING     4
931    
932    # don 2009-01-10
933    header LINKEDIN         from =~ /linkedin\.com/
934    describe LINKEDIN       Linked in spam
935    score LINKEDIN          4
936    
937    # don 2009-02-02
938    header  LIFECHANGERS    from =~ /lifechangers/
939    describe LIFECHANGERS   Life changers spam
940    score LIFECHANGERS      4
941    
942    # don 2009-02-05
943    header WINESEASON       subject =~ /Wine\s*Season\s*Promo/i
944    describe WINESEASON     Wine season spam
945    score WINESEASON        3
946    
947    # don 2009-02-05
948    header JOINMEON         subject =~ /(?:friend request|join me) on/i
949    describe JOINMEON       Lets not join you on anything
950    score JOINMEON          2
951    
952    # don 2009-02-09
953    header ABOUTAPARTMENT   subject =~/about\s*the\s*apartment/i
954    describe ABOUTAPARTMENT We don't care about apartments
955    score ABOUTAPARTMENT    2
956    
957    # don 2009-02-14
958    header YARISUBJECT      subject =~ /\byari\b/i
959    describe YARISUBJECT    Contains YARI in the subject
960    score YARISUBJECT       2
961    
962    # don 2009-03-03
963    body HTMLCOMPATIBLE     /html\s+compatible\s+(?:e-?mail)?\s*(?:viewer|client)/i
964    describe HTMLCOMPATIBLE If you want us to use an HTML compatible viewer, we don't want your mail.
965    score HTMLCOMPATIBLE    3
966    
967    # zobel 2009-08-31
968    header AYDA10KILO       subject =~ /Ayda 10 Kilo Vermek Istermisiniz/i
969    describe AYDA10KILO     We don't care about Ayda 10 Kilo Vermek
970    score AYDA10KILO        4
971    
Legend:
Removed from v.2  
changed lines
  Added in v.314
  ViewVC Help
Powered by ViewVC 1.1.5