/[pkg-listmaster]/trunk/spamassassin_config/common/url_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/url_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 63 by don, Thu Oct 11 19:36:43 2007 UTC revision 166 by don, Wed Mar 5 21:53:51 2008 UTC
# Line 66  describe CANDYHOS      spams from korea, host Line 66  describe CANDYHOS      spams from korea, host
66  score CANDYHOS          5  score CANDYHOS          5
67    
68  # blarson 2005-12-08  # blarson 2005-12-08
69    # don 2007-11-21 -- combine other rule; increment score
70  body GEOCITIES          /http\:\/\/.*geocities/i  body GEOCITIES          /http\:\/\/.*geocities/i
71  describe GEOCITIES      geocities url  describe GEOCITIES      geocities url
72  score GEOCITIES         1.6  score GEOCITIES         2.5
73    
74  # blarson 2005-12-24  # blarson 2005-12-24
75  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i
# Line 116  describe BESTLOANS     Best loans url Line 117  describe BESTLOANS     Best loans url
117  score BESTLOANS         2  score BESTLOANS         2
118    
119  # blarson 2007-07-22 2007-09-12  # blarson 2007-07-22 2007-09-12
120  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline)\.info\b/i  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld|NaturalImprove|charmshine|healthinsweb)\.info\b/i
121  describe PENPRO         penmailpro spam  describe PENPRO         penmailpro spam
122  score PENPRO            3.5  score PENPRO            3.5
123    
# Line 168  tflags URIBL_CNKR      net Line 169  tflags URIBL_CNKR      net
169  score URIBL_CNKR        2.5  score URIBL_CNKR        2.5
170    
171  # blarson 2007-09-14  # blarson 2007-09-14
172  uridnsbl_skip_domain    debian.org debian.net  uridnsbl_skip_domain    debian.org debian.net yahoo.com google.com
173    
174  # blarson 2007-09-14  # blarson 2007-09-14
175  uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A  uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
# Line 179  tflags          URIBL_SBL       net Line 180  tflags          URIBL_SBL       net
180  score           URIBL_SBL       3.5  score           URIBL_SBL       3.5
181    
182  # blarson 2007-09-17  # blarson 2007-09-17
183  body MYCHEAP            /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now)?\s*\.\s*com\b/i  body MYCHEAP            /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
184  describe MYCHEAP        software spam  describe MYCHEAP        software spam
185  score MYCHEAP           4  score MYCHEAP           4
186    
# Line 216  score WWWRO            2 Line 217  score WWWRO            2
217  body CLEANDOM           /http\:\/\/\{_clean_domains\}/  body CLEANDOM           /http\:\/\/\{_clean_domains\}/
218  describe CLEANDOM       broken spamware  describe CLEANDOM       broken spamware
219  score CLEANDOM          4  score CLEANDOM          4
220    
221    # blarson 2007-10-11
222    body SOFTNLSE           /\bsoftnlse\s*\.\s*com\b/i
223    describe SOFTNLSE       softnlse.com
224    score SOFTNLSE          4
225    
226    # blarson 2007-10-13
227    body MUSVID             /\b(?:MusicAndVideoWorld|usa-bestsellers)\.com/i
228    describe MUSVID         MusicAndVideoWorld.com
229    score MUSVID            4
230    
231    # blarson 2007-10-16
232    body PLATSOFT           /\btheplatinumsoft\.com\b/i
233    describe PLATSOFT       theplatinumsoft.com
234    score PLATSOFT          4
235    
236    # blarson 2007-10-22
237    body BLOGSPOT           /\bblogspot\.com\b/i
238    describe BLOGSPOT       spammers are hosting on blogspot
239    score BLOGSPOT          3
240    
241    # blarson 2007-10-25
242    body PILLUS             /PILL-US\.COM\b/i
243    describe PILLUS         PILL-US spam
244    score PILLUS            4
245    
246    # blarson 2007-10-25
247    body BETWEENTO          /\bhttp\:\/\/betweento\.com\b/i
248    describe BETWEENTO      betweento.com
249    score BETWEENTO         4
250    
251    # don 2007-10-25
252    body MASZON             /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
253    describe MASZON         pron spam
254    score MASZON            4
255    
256    
257    # blarson 2007-10-27
258    body GMAIL              /\@gmail\.com\b/i
259    describe GMAIL          @gmail.com
260    score GMAIL             1
261    
262    # blarson 2007-10-28
263    body MAILRU             /\@mail\.ru\b/i
264    describe MAILRU         @mail.ru
265    score MAILRU            3
266    
267    # blarson 2007-10-31
268    body ADOBE4LESS         /\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
269    describe ADOBE4LESS     adobe4less . com
270    score ADOBE4LESS        4
271    
272    # blarson 2007-11-01
273    body RMAPPLY            /http\:\/\/rmapply\.com\b/i
274    describe RMAPPLY        http://rmapply.com
275    score RMAPPLY           4
276    
277    # blarson 2007-11-04
278    header HANOIFASH        subject =~ /WWW\.HANOI-FASHION\.COM/i
279    describe HANOIFASH      WWW.HANOI-FASHION.COM
280    score HANOIFASH         4
281    
282    # blarson 2007-11-06
283    body ONLINEMED          /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
284    describe ONLINEMED      onlinemedicalkey.com
285    score ONLINEMED         4
286    
287    # blarson 2007-11-15
288    body GETUP              /\bgetupgradednow\.com\b/i
289    describe GETUP          getupgradednow.com
290    score GETUP             4
291    
292    # blarson (pusling's idea) 2007-11-16
293    body SPACECOM           /^[\w\d]+\s\.\scom\b/
294    describe SPACECOM       whatever . com
295    score SPACECOM          3
296    
297    # don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
298    # blarson 2007-11-20
299    # uridnsbl URIBL_FLO    flowgoaway.com. A
300    # body  URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
301    # describe URIBL_FLO    web site in flowgoaway.com
302    # tflags        URIBL_FLO       net
303    # score URIBL_FLO               1
304    
305    # blarson 2007-11-20
306    body SOFTROU            /\bwww\.softrou\.com\b/i
307    describe SOFTROU        www.softrou.com
308    score SOFTROU           3
309    
310    # blarson 2007-11-20
311    body GOOGLEPAGES        /\bgooglepages\.com\b/i
312    describe GOOGLEPAGES    spammers use googlepages
313    score GOOGLEPAGES       2
314    
315    # blarson 2007-12-07
316    body SOFTBESTGRAND      /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
317    describe SOFTBESTGRAND  softbestgrand.com
318    score SOFTBESTGRAND     4
319    
320    # blarson 2007-12-10
321    body PCSOFTCHEAP        /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast)\s?\.\s?(?:com|net)\b/
322    describe PCSOFTCHEAP    pcsoftcheap. com
323    score PCSOFTCHEAP       4
324    
325    # blarson 2007-12-11
326    body GOLDGAME           /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
327    describe GOLDGAME       gambling sites
328    score GOLDGAME          4
329    
330    # blarson 2007-12-14
331    body ENLARGETW          /\b(?:enlarge|0rz)\.tw\b/
332    describe ENLARGETW      enlarge.tw
333    score ENLARGETW         4
334    
335    # blarson 2007-12-15
336    body POSTTHROUGH        /\b(?:postthrough|speedgrand|certaincoast)\.com\b/
337    describe POSTTHROUGH    postthrough.com
338    score POSTTHROUGH       4
339    
340    # blarson 2007-12-25
341    body UHAVE              /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh|post)cards?-?(?:2008)?\.com\b/
342    describe UHAVE          uhavepostcard.com
343    score UHAVE             4
344    
345    # blarson 2007-12-26
346    body RUSSWIFE           /\b(?:your|best|new|the|my)(?:russ[il]an?|address|russ)(?:wife|bride)\.info\b/
347    describe RUSSWIFE       yourrussianwife.info
348    score RUSSWIFE          4
349    
350    # blarson 2007-12-31
351    body HAPPY2008          /\b(?:happy2008toyou|hellosanta2008|hohoho2008|santawishes2008)\.com\b/
352    describe HAPPY2008      happy2008toyou.com
353    score HAPPY2008         4
354    
355    # blarson 2008-01-02
356    body BONGHIT            /\b(?:beaverbonghits|dobongworld)\.com\b/
357    describe BONGHIT        beaverbonghits.com
358    score BONGHIT           4
359    
360    # blarson 2008-01-02
361    body GOOGLESEARCH       /\bgoo+gle\.(com|\w\w|com?\.\w\w)\/+(?:search|pagead)/i
362    describe GOOGLESEARCH   google search URL
363    score GOOGLESEARCH      2
364    
365    # blarson 2008-01-02
366    body SIGAS              /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo|clitoriseries|clitorina|glueplot|crumbtost|ideaputs)(?:\.|\=2E)com\b/
367    describe SIGAS          www.Sigashash.com
368    score SIGAS             4
369    
370    # blarson 2008-01-05
371    body RUSSIABRIDE        /\bruss[il]an?(bride|wife)(?:home|live|blog|)\.info\b/
372    describe RUSSIABRIDE    russiabridehome.info
373    score RUSSIABRIDE       4
374    
375    # blarson 2008-01-14
376    body REDMEHS            /\bwww\.(?:redmehs|feltas|barataslo|quasibot|tageshes|flessimo|spendhope|instrumentstart)\b/
377    describe REDMEHS        www.redmehs
378    score REDMEHS           4
379    
380    # blarson 2008-01-15
381    body MYURL              /\bmyurl\.com\.tw\b/i
382    describe MYURL          myurl.com.tw
383    score MYURL             3
384    
385    # blarson 2008-01-28
386    body W0MEN              /w0men\.info\b/i
387    describe W0MEN          hotw0men.info ukrw0men.info
388    score W0MEN             3
389    
390    # blarson 2008-01-29
391    body ACEMST             /\bacemst\.com\b/
392    describe ACEMST         acemst.com
393    score ACEMST            3
394    
395    # blarson 2008-02-01
396    body GALSINFO           /\b(?:foreigngals|californiaimprove)\.info\b/i
397    describe GALSINFO       foreigngals.info
398    score GALSINFO          3
399    
400    # blarson 2008-02-06
401    body RIDGEST            /\bridgest\.com\b/
402    describe RIDGEST        ridgest.com
403    score RIDGEST           4
404    
405    # blarson 2008-02-16
406    body SOFTROI            /\bsoft(?:roi|ove)\.com\b/
407    describe SOFTROI        softroi.com
408    score SOFTROI           4
409    
410    # don 2008-02-23
411    body FILEZONE           /(file-zone.co.uk|File-Zone)/
412    describe FILEZONE       File-Zone
413    score FILEZONE          2
414    
415    # blarson 2008-02-28
416    body X2J1F              /\b2j1f\.com\b/i
417    descrIbe X2J1F          2j1f.com
418    score X2J1F             4
419    
420    # blarson 2008-02-28
421    body ILVE               /\bilveant\.net\b/i
422    describe ILVE           www.ilveant.net
423    score ILVE              4

Legend:
Removed from v.63  
changed lines
  Added in v.166

  ViewVC Help
Powered by ViewVC 1.1.5