/[pkg-listmaster]/trunk/spamassassin_config/common/url_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/url_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 50 by zobel, Thu Oct 4 08:00:15 2007 UTC revision 108 by don, Thu Nov 22 03:50:41 2007 UTC
# Line 66  describe CANDYHOS      spams from korea, host Line 66  describe CANDYHOS      spams from korea, host
66  score CANDYHOS          5  score CANDYHOS          5
67    
68  # blarson 2005-12-08  # blarson 2005-12-08
69    # don 2007-11-21 -- combine other rule; increment score
70  body GEOCITIES          /http\:\/\/.*geocities/i  body GEOCITIES          /http\:\/\/.*geocities/i
71  describe GEOCITIES      geocities url  describe GEOCITIES      geocities url
72  score GEOCITIES         1.6  score GEOCITIES         2.5
73    
74  # blarson 2005-12-24  # blarson 2005-12-24
75  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i
# Line 116  describe BESTLOANS     Best loans url Line 117  describe BESTLOANS     Best loans url
117  score BESTLOANS         2  score BESTLOANS         2
118    
119  # blarson 2007-07-22 2007-09-12  # blarson 2007-07-22 2007-09-12
120  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset)\.info\b/i  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
121  describe PENPRO         penmailpro spam  describe PENPRO         penmailpro spam
122  score PENPRO            3.5  score PENPRO            3.5
123    
# Line 168  tflags URIBL_CNKR      net Line 169  tflags URIBL_CNKR      net
169  score URIBL_CNKR        2.5  score URIBL_CNKR        2.5
170    
171  # blarson 2007-09-14  # blarson 2007-09-14
172  uridnsbl_skip_domain    debian.org debian.net  uridnsbl_skip_domain    debian.org debian.net yahoo.com google.com
173    
174  # blarson 2007-09-14  # blarson 2007-09-14
175  uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A  uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A
# Line 179  tflags          URIBL_SBL       net Line 180  tflags          URIBL_SBL       net
180  score           URIBL_SBL       3.5  score           URIBL_SBL       3.5
181    
182  # blarson 2007-09-17  # blarson 2007-09-17
183  body MYCHEAP            /\b(?:my)?cheap(?:oem|soft)(?:now)?\s*\.\s*com\b/i  body MYCHEAP            /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
184  describe MYCHEAP        software spam  describe MYCHEAP        software spam
185  score MYCHEAP           4  score MYCHEAP           4
186    
# Line 198  header MAKEUP          subject =~ /makeup\.com/i Line 199  header MAKEUP          subject =~ /makeup\.com/i
199  describe MAKEUP         makeup.com url  describe MAKEUP         makeup.com url
200  score MAKEUP            3  score MAKEUP            3
201    
202    # blarson 2007-10-04
203    body SUBT               /\bsubtracthold\.com\b/i
204    describe SUBT           subtracthold.com
205    score SUBT              4
206    
207  body GRAPHICMAIL        /\bhttp\:\/\/www\.graphicmail\.de\b/i  body GRAPHICMAIL        /\bhttp\:\/\/www\.graphicmail\.de\b/i
208  describe GRAPHICMAIL    graphicmail.de  describe GRAPHICMAIL    graphicmail.de
209  score                   4  score   GRAPHICMAIL     4
210    
211    
212  body WWWRO              /\b(?:www\.|https?\:.*)\w+\.ro\b/i  body WWWRO              /\b(?:www\.|https?\:.*)\w+\.ro\b/i
213  describe WWWRO          romanian web site  describe WWWRO          romanian web site
214  score WWWRO             2  score WWWRO             2
215    
216    # blarson 2007-10-10
217    body CLEANDOM           /http\:\/\/\{_clean_domains\}/
218    describe CLEANDOM       broken spamware
219    score CLEANDOM          4
220    
221    # blarson 2007-10-11
222    body SOFTNLSE           /\bsoftnlse\s*\.\s*com\b/i
223    describe SOFTNLSE       softnlse.com
224    score SOFTNLSE          4
225    
226    # blarson 2007-10-13
227    body MUSVID             /\b(?:MusicAndVideoWorld|usa-bestsellers)\.com/i
228    describe MUSVID         MusicAndVideoWorld.com
229    score MUSVID            4
230    
231    # blarson 2007-10-16
232    body PLATSOFT           /\btheplatinumsoft\.com\b/i
233    describe PLATSOFT       theplatinumsoft.com
234    score PLATSOFT          4
235    
236    # blarson 2007-10-22
237    body BLOGSPOT           /\bblogspot\.com\b/i
238    describe BLOGSPOT       spammers are hosting on blogspot
239    score BLOGSPOT          2
240    
241    # blarson 2007-10-25
242    body PILLUS             /PILL-US\.COM\b/i
243    describe PILLUS         PILL-US spam
244    score PILLUS            4
245    
246    # blarson 2007-10-25
247    body BETWEENTO          /\bhttp\:\/\/betweento\.com\b/i
248    describe BETWEENTO      betweento.com
249    score BETWEENTO         4
250    
251    # don 2007-10-25
252    body MASZON             /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
253    describe MASZON         pron spam
254    score MASZON            4
255    
256    
257    # blarson 2007-10-27
258    body GMAIL              /\@gmail\.com\b/i
259    describe GMAIL          @gmail.com
260    score GMAIL             1
261    
262    # blarson 2007-10-28
263    body MAILRU             /\@mail\.ru\b/i
264    describe MAILRU         @mail.ru
265    score MAILRU            3
266    
267    # blarson 2007-10-31
268    body ADOBE4LESS         /\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
269    describe ADOBE4LESS     adobe4less . com
270    score ADOBE4LESS        4
271    
272    # blarson 2007-11-01
273    body RMAPPLY            /http\:\/\/rmapply\.com\b/i
274    describe RMAPPLY        http://rmapply.com
275    score RMAPPLY           4
276    
277    # blarson 2007-11-04
278    header HANOIFASH        subject =~ /WWW\.HANOI-FASHION\.COM/i
279    describe HANOIFASH      WWW.HANOI-FASHION.COM
280    score HANOIFASH         4
281    
282    # blarson 2007-11-06
283    body ONLINEMED          /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
284    describe ONLINEMED      onlinemedicalkey.com
285    score ONLINEMED         4
286    
287    # blarson 2007-11-15
288    body GETUP              /\bgetupgradednow\.com\b/i
289    describe GETUP          getupgradednow.com
290    score GETUP             4
291    
292    # blarson (pusling's idea) 2007-11-16
293    body SPACECOM           /^[\w\d]+\s\.\scom\b/
294    describe SPACECOM       whatever . com
295    score SPACECOM          3
296    
297    # blarson 2007-11-20
298    uridnsbl URIBL_FLO      flowgoaway.com. A
299    body    URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
300    describe URIBL_FLO      web site in flowgoaway.com
301    tflags  URIBL_FLO       net
302    score URIBL_FLO         1
303    
304    # blarson 2007-11-20
305    body SOFTROU            /\bwww\.softrou\.com\b/i
306    describe SOFTROU        www.softrou.com
307    score SOFTROU           3
308    
309    # blarson 2007-11-20
310    body GOOGLEPAGES        /\bgooglepages\.com\b/i
311    describe GOOGLEPAGES    spammers use googlepages
312    score GOOGLEPAGES       2
Legend:
Removed from v.50  
changed lines
  Added in v.108
  ViewVC Help
Powered by ViewVC 1.1.5