You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2008/11/27 07:37:01 UTC
svn commit: r721097 - /spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Author: jm
Date: Wed Nov 26 22:37:01 2008
New Revision: 721097
URL: http://svn.apache.org/viewvc?rev=721097&view=rev
Log:
auto-generated test rules
Modified:
spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_sought.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sought.cf?rev=721097&r1=721096&r2=721097&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_sought.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_sought.cf Wed Nov 26 22:37:01 2008
@@ -1,39 +1,42 @@
body __SEEK_HYBLP6 /discreetly packaged giving no /
+body __SEEK_VXJZWF /Vi\. 60p x 100 mg - \$158\.07 /
body __SEEK_2NHNJL / by healthcare professionals, doctors,/
body __SEEK_ORGQVD /nd the top 3 Men\'s Magazines; /
-body __SEEK_LMLABA / waiting for\. Amazing, incredible/
-body __SEEK_5Q0LOR /zing, incredible shooting volume\./
+body __SEEK_FCVDK4 /ting for\. Amazing, incredible.s/
+body __SEEK_VLBQRH /\. Amazing, incredible shooting/
+body __SEEK_PS2FRH /g, incredible shooting volume\./
body __SEEK_8DN7G3 /contents\.<br> <br> <strong><a href=/
body __SEEK_18BYVI /href=3D\"http:\/\/silverdistant\.com\">http:\/\/silverdistant\.com<\/a>= <\/strong> <\//
body __SEEK_RGNLHT /indication = of its contents\./
body __SEEK_B_MJ19 /<strong>\$114\.03<\/strong> - Your save: /
body __SEEK_0GNRGK /<strong>\$84\.84<\/strong> - Your save: \$/
body __SEEK_JJ_XO7 / - <strong>\$43\.81<\/strong><br>/
-body __SEEK_SBPDZY /<br> <strong>Ci\.<\/strong> .0p x 20 mg - <strong>\$/
+body __SEEK_OTD_LI /<strong>Ci\.<\/strong> 10p x 20 mg/
body __SEEK_XK3X6X /<strong>\$158\.07<\/strong> - Your save:/
-body __SEEK_BR8CYY /<strong>\$99\.89<\/strong> - Your save: /
+body __SEEK_IO8H3H / <strong>\$99\.89<\/strong> - Your save: /
body __SEEK_VKNNSP /- <strong>\$42\.57<\/strong><br>/
-body __SEEK_GTS_8Y /\+ <strong>Ci\.<\/strong> 10p x 20 mg/
+body __SEEK_OJ8VXH /<br> <strong>Vi\.<\/strong> .0p x 100 mg - <strong>\$/
+body __SEEK_ZJ140E /Vi\.<\/strong> 10p x 100 mg . <strong>/
body __SEEK_RFXYDM /100\% Effectively<\/strong><br>/
body __SEEK_RU2Y_Z /------=_NextPart_000_0006_01C94B34\.D888DB00--/
body __SEEK_FELU93 /As advertised on TV and FHM\. Rediscover/
body __SEEK_QWICCM /ale verve and virility, with the/
-body __SEEK_LZPIBQ /Recommended by leading Mens Magazines/
+body __SEEK_SY8Q4A /Recommended by leading Mens Magazines /
body __SEEK_3K8_ZG /------=_NextPart_000_0007_01C94B34\.D6BF1780--/
body __SEEK_CVPTVR /- <strong>\$69\.96<\/strong><br>/
-body __SEEK_1X6NCA / content=3D\"Microsoft Word 10\">/
+body __SEEK_Y_YEVL /tor content=3D\"Microsoft Word 10\">/
body __SEEK_PDYN45 /name=3DGenerator content=3D\"Microsoft Word 1/
-body __SEEK_IB235G /CONTENT=3D\"text\/html; charset=3Diso-885=/
+body __SEEK_OGFL74 /e\" CONTENT=3D\"text\/html; charset=3Diso-885=/
body __SEEK_ND6MNS /rd\" xmlns=3D\"http:\/\/www\.w3\.org\/TR\/REC-html40\">/
-body __SEEK_YZDKLL /------=_NextPart_000_0006_01C94B34\.D888DB00 Content-Type: text\/html; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_ZHEKP7 /Less than half the price for branded/
+body __SEEK_YZDKLL /------=_NextPart_000_0006_01C94B34\.D888DB00 Content-Type: text\/html; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_PAXHEN /http:\/\/silverdistant\.com Internet Dr\. - original quality - 100\% Effectively/
body __SEEK_BP01R2 / - <strong>\$69\.98<\/strong><br>/
body __SEEK_QYLWQK /Why pay hundreds of thousands for the/
-body __SEEK_IOXL7T /content=3D\"text\/html; charset=3Diso-8859-=/
+body __SEEK_CRO_HI / content=3D\"text\/html; charset=3Diso-8859-=/
body __SEEK_FFKNQO /------=_NextPart_000_0007_01C94B34\.D6BF1780 Content-Type: text\/html; charset=\"iso-8859-.\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_ALQNAA /http:\/\/silverdistant\.com ------=_NextPart_000_0007_01C94B34\.D6BF1780/
-body __SEEK_LXMKUN / 6\.00\.2800\.1106\" name=3DGENERATOR>/
+body __SEEK_G5GULI /t=3D\"MSHTML 6\.00\.2800\.1106\" name=3DGENERATOR>/
body __SEEK_3J2UD4 /Just in: the latest 2008 released/
body __SEEK_0QSMT4 /------=_NextPart_000_0006_01C94B34\.D888DB00 Content-Type: text\/plain; charset=\"iso-8859-1\" Content-Transfer-Encoding: 7bit/
body __SEEK_WH7TQG /V5\.50\.4133\.2400 Importance: Normal/
@@ -46,45 +49,37 @@
body __SEEK_D7C8_I /\+0000 From: \"Helena Green\" /
# passed hit-rate threshold: 1.0
-meta JM_SOUGHT_1 (__SEEK_HYBLP6 || __SEEK_2NHNJL || __SEEK_ORGQVD || __SEEK_LMLABA || __SEEK_5Q0LOR || __SEEK_8DN7G3 || __SEEK_18BYVI || __SEEK_RGNLHT || __SEEK_B_MJ19 || __SEEK_0GNRGK || __SEEK_JJ_XO7 || __SEEK_SBPDZY || __SEEK_XK3X6X || __SEEK_BR8CYY || __SEEK_VKNNSP || __SEEK_GTS_8Y || __SEEK_RFXYDM || __SEEK_RU2Y_Z || __SEEK_FELU93 || __SEEK_QWICCM || __SEEK_LZPIBQ || __SEEK_3K8_ZG || __SEEK_CVPTVR || __SEEK_1X6NCA || __SEEK_PDYN45 || __SEEK_IB235G || __SEEK_ND6MNS || __SEEK_YZDKLL || __SEEK_ZHEKP7 || __SEEK_PAXHEN || __SEEK_BP01R2 || __SEEK_QYLWQK || __SEEK_IOXL7T || __SEEK_FFKNQO || __SEEK_ALQNAA || __SEEK_LXMKUN || __SEEK_3J2UD4 || __SEEK_0QSMT4 || __SEEK_WH7TQG || __SEEK_CVG_NI || __SEEK_BPTRB3 || __SEEK_MYJDXE || __SEEK_U1YQMR || __SEEK_UJ0RLE || __SEEK_M98_GZ || __SEEK_D7C8_I)
+meta JM_SOUGHT_1 (__SEEK_HYBLP6 || __SEEK_VXJZWF || __SEEK_2NHNJL || __SEEK_ORGQVD || __SEEK_FCVDK4 || __SEEK_VLBQRH || __SEEK_PS2FRH || __SEEK_8DN7G3 || __SEEK_18BYVI || __SEEK_RGNLHT || __SEEK_B_MJ19 || __SEEK_0GNRGK || __SEEK_JJ_XO7 || __SEEK_OTD_LI || __SEEK_XK3X6X || __SEEK_IO8H3H || __SEEK_VKNNSP || __SEEK_OJ8VXH || __SEEK_ZJ140E || __SEEK_RFXYDM || __SEEK_RU2Y_Z || __SEEK_FELU93 || __SEEK_QWICCM || __SEEK_SY8Q4A || __SEEK_3K8_ZG || __SEEK_CVPTVR || __SEEK_Y_YEVL || __SEEK_PDYN45 || __SEEK_OGFL74 || __SEEK_ND6MNS || __SEEK_ZHEKP7 || __SEEK_YZDKLL || __SEEK_PAXHEN || __SEEK_BP01R2 || __SEEK_QYLWQK || __SEEK_CRO_HI || __SEEK_FFKNQO || __SEEK_ALQNAA || __SEEK_G5GULI || __SEEK_3J2UD4 || __SEEK_0QSMT4 || __SEEK_WH7TQG || __SEEK_CVG_NI || __SEEK_BPTRB3 || __SEEK_MYJDXE || __SEEK_U1YQMR || __SEEK_UJ0RLE || __SEEK_M98_GZ || __SEEK_D7C8_I)
score JM_SOUGHT_1 4.0
describe JM_SOUGHT_1 Body contains frequently-spammed text patterns
+body __SEEK_NCJMEC /3D\"MSHTML 5\.50\.4807\.1700\" name=3DGENERATOR>/
body __SEEK_6RMH5J /0p x 100 mg \+ Ci\. 10p x 20 mg - \$69\.45/
-body __SEEK_G_8YGO /age in MIME format\. Internet Dr\. - original quality - 100\% Effectively/
-body __SEEK_UBUUQ6 /MSHTML 5\.50\.4807\.1700\" name=3DGENERATOR>/
+body __SEEK_HZH_GH /ssage in MIME format\. Internet Dr\. - original quality - 100\% Effectively/
body __SEEK_IQ2YV0 / mg - \$84\.84 - Your save: \$= 3\.30 Ci\. 30p x 20 mg - \$114\.03 - Your save: = \$17\.60/
-body __SEEK_VTVW06 / - Your save: = \$28\.05 Vi\. 60p x 100 mg - \$158\.07 - Your save:= \$97\.35/
body __SEEK_F879WA / charset=\"iso-8859-2\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_UNWQIU / its contents\. http:\/\/silverdistant\.com /
-body __SEEK_EQUNTT /<strong>Vi\.<\/strong> .0p x 100 mg - <strong>\$/
body __SEEK_RZA8FB /; boundary=\"----=_NextPart_000_0007_01C94B34\.D6BF1780\" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express .\..0\..80.\.1.0. X-MimeOLE: Produced By Microsoft MimeOLE V.\..0\..80.\.1.0/
body __SEEK_HQS_K_ /ESMTP ident=NXDOMAIN MAIL_FROM=/
body __SEEK_SPH0_P /g \(qpsmtpd\/0\.43rc1\) with ESMTP ident=/
-body __SEEK_S3YAIC / Nov 2008 19:22:59 -0200 From: /
# passed hit-rate threshold: 0.5
-meta JM_SOUGHT_2 (__SEEK_6RMH5J || __SEEK_G_8YGO || __SEEK_UBUUQ6 || __SEEK_IQ2YV0 || __SEEK_VTVW06 || __SEEK_F879WA || __SEEK_UNWQIU || __SEEK_EQUNTT || __SEEK_RZA8FB || __SEEK_HQS_K_ || __SEEK_SPH0_P || __SEEK_S3YAIC)
+meta JM_SOUGHT_2 (__SEEK_NCJMEC || __SEEK_6RMH5J || __SEEK_HZH_GH || __SEEK_IQ2YV0 || __SEEK_F879WA || __SEEK_UNWQIU || __SEEK_RZA8FB || __SEEK_HQS_K_ || __SEEK_SPH0_P)
score JM_SOUGHT_2 4.0
describe JM_SOUGHT_2 Body contains frequently-spammed text patterns
+body __SEEK_S3YAIC / Nov 2008 19:22:59 -0200 From: /
body __SEEK_KVLJQM /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg= - \$69\.96/
body __SEEK_U5A04I / quoted-printable Internet Dr\. - original quality - 100\% Effectively/
-body __SEEK_E70LTJ /L 6\.00\.2800\.1106\" name=GENERATOR> /
body __SEEK_8DPESL /------=_NextPart_000_0007_01C94B34\.D4F55400--/
+body __SEEK_E70LTJ /L 6\.00\.2800\.1106\" name=GENERATOR> /
body __SEEK_VECLP5 /META http-equiv=Content-Type content=\"text\/html; charset=iso-8859-1\"> /
body __SEEK_T_FO5B / 17:24:27 \+0000 Message-ID: <01c94b34\$d6bf1780\$1cfc155c\@/
body __SEEK_RXCRBH / <01...@sabrina> From: \"Carter Duffy\" /
-body __SEEK_MM1IPP /content=\"Microsoft Word 10\"> /
-body __SEEK_SBUO2C / with SMTP ident=NXDOMAIN MAIL_FROM=<..r/
body __SEEK_W4ZFJU /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg= - \$69\.98/
+body __SEEK_SBUO2C / with SMTP ident=NXDOMAIN MAIL_FROM=<..r/
+body __SEEK_MM1IPP /content=\"Microsoft Word 10\"> /
body __SEEK_XUZ3MY /e\" CONTENT=\"text\/html; charset=iso-8859-1\">/
-body __SEEK__G_WIS /\(qpsmtpd\/0\.43rc1\) with SMTP ident=/
-body __SEEK_MKPUHO /ink rel=File-List href=\"cid:filelist\.xml\@0C7215A8\.D348D3B4\"> /
-body __SEEK_CFOHFN /ta name=ProgId content=Word\.Document> /
-body __SEEK_UALZMF /rel=Edit-Time-Data href=\"cid:editdata\.mso\@0C7215A8\.D348D3B4\"> /
-body __SEEK_WPU1VI /<html xmlns:v=\"urn:schemas-microsoft-com:vml\" xmlns:o=\"urn:schemas-microsoft-com:office:office\" xmlns:w=\"urn:schemas-microsoft-com:office:word\" xmlns=\"http:\/\/www\.w3\.org\/TR\/REC-html40\">/
body __SEEK_CV_DQL /Trap-Metadata: s=incl_fwds n=redist t/
-body __SEEK_NHVI26 /1 00:00:00 2008 Trap-Metadata: s=inc/
-body __SEEK_WIJLQP /MimeOLE V6\.00\.2800\.1106 This is a multi-part message in MIME format\. /
+body __SEEK__G_WIS /\(qpsmtpd\/0\.43rc1\) with SMTP ident=/
body __SEEK_46ZJY7 / PayPal Email ID PP-19-322-187 /
body __SEEK_VBRYUW / https:\/\/www\.paypal\.com\/us\/cgi-bin\/webscr\?cmd=_login-run/
body __SEEK__L5RWM /If you choose not to complete the request, you give us no choice but to suspend your account temporary\./
@@ -95,10 +90,17 @@
body __SEEK_GWOSDO /PayPal Account Security Measures/
body __SEEK_Q1Z9IG /Thanks for your patience as we work together to protect your account\./
body __SEEK_XBH7DX /We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address\./
+body __SEEK_MKPUHO /ink rel=File-List href=\"cid:filelist\.xml\@0C7215A8\.D348D3B4\"> /
+body __SEEK_JLRULK /meta name=ProgId content=Word\.Document> /
+body __SEEK_WPU1VI /<html xmlns:v=\"urn:schemas-microsoft-com:vml\" xmlns:o=\"urn:schemas-microsoft-com:office:office\" xmlns:w=\"urn:schemas-microsoft-com:office:word\" xmlns=\"http:\/\/www\.w3\.org\/TR\/REC-html40\">/
+body __SEEK_F14W_A / Microsoft MimeOLE V6\.00\.2800\.1106 This is a multi-part message in MIME format\. /
+body __SEEK_UIRBZE / 00:00:00 2008 Trap-Metadata: s=inc/
body __SEEK_QBGJ8Y /Viagra 50mg x 60 pills \$119\.95 price/
body __SEEK_RJE7KG /0 mg - Internet Dr\. - original quality - 100\% Effectively/
+body __SEEK_SMVEFL /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg - \$69\.60/
body __SEEK_MRIAFE /\" xmlns=\"http:\/\/www\.w3\.org\/TR\/REC-html40\"> Internet Dr\. - original quality - 100\% Effectively/
+body __SEEK_I5AJ_M /wed; charset=\"Windows-1252\"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6\.00\.2900\.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6\.00\.2900\.3198/
-meta JM_SOUGHT_3 (__SEEK_KVLJQM || __SEEK_U5A04I || __SEEK_E70LTJ || __SEEK_8DPESL || __SEEK_VECLP5 || __SEEK_T_FO5B || __SEEK_RXCRBH || __SEEK_MM1IPP || __SEEK_SBUO2C || __SEEK_W4ZFJU || __SEEK_XUZ3MY || __SEEK__G_WIS || __SEEK_MKPUHO || __SEEK_CFOHFN || __SEEK_UALZMF || __SEEK_WPU1VI || __SEEK_CV_DQL || __SEEK_NHVI26 || __SEEK_WIJLQP || __SEEK_46ZJY7 || __SEEK_VBRYUW || __SEEK__L5RWM || __SEEK_17PEMV || __SEEK_HWBAXV || __SEEK_RH79QG || __SEEK_EXHR3L || __SEEK_GWOSDO || __SEEK_Q1Z9IG || __SEEK_XBH7DX || __SEEK_QBGJ8Y || __SEEK_RJE7KG || __SEEK_MRIAFE)
+meta JM_SOUGHT_3 (__SEEK_S3YAIC || __SEEK_KVLJQM || __SEEK_U5A04I || __SEEK_8DPESL || __SEEK_E70LTJ || __SEEK_VECLP5 || __SEEK_T_FO5B || __SEEK_RXCRBH || __SEEK_W4ZFJU || __SEEK_SBUO2C || __SEEK_MM1IPP || __SEEK_XUZ3MY || __SEEK_CV_DQL || __SEEK__G_WIS || __SEEK_46ZJY7 || __SEEK_VBRYUW || __SEEK__L5RWM || __SEEK_17PEMV || __SEEK_HWBAXV || __SEEK_RH79QG || __SEEK_EXHR3L || __SEEK_GWOSDO || __SEEK_Q1Z9IG || __SEEK_XBH7DX || __SEEK_MKPUHO || __SEEK_JLRULK || __SEEK_WPU1VI || __SEEK_F14W_A || __SEEK_UIRBZE || __SEEK_QBGJ8Y || __SEEK_RJE7KG || __SEEK_SMVEFL || __SEEK_MRIAFE || __SEEK_I5AJ_M)
score JM_SOUGHT_3 4.0
describe JM_SOUGHT_3 Body contains frequently-spammed text patterns