You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by km...@apache.org on 2007/05/02 22:04:05 UTC
svn commit: r534607 - /spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf
Author: kmcgrail
Date: Wed May 2 13:04:05 2007
New Revision: 534607
URL: http://svn.apache.org/viewvc?view=rev&rev=534607
Log:
Latest version of more testing rules
Modified:
spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf
Modified: spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf?view=diff&rev=534607&r1=534606&r2=534607
==============================================================================
--- spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf (original)
+++ spamassassin/rules/trunk/sandbox/kmcgrail/20_test.cf Wed May 2 13:04:05 2007
@@ -23,23 +23,24 @@
#
###########################################################################
-#LOTTO CRUD
-body __KAM_LOTTO1 /e-mail address (has won|attached to (ticket|reference))/is
-body __KAM_LOTTO2 /((ticket|serial|lucky) number|secret pin ?code)/is
+#LOTTO CRUD
+body __KAM_LOTTO1 /(e-?mail address (have emerged a winner|has won|attached to (ticket|reference)|was one of the ten winners)|random selection in our computerized email selection system)/is
+body __KAM_LOTTO2 /((ticket|serial|lucky) number|secret pin ?code|batch number|reference number|promotion date)/is
body __KAM_LOTTO3 /(won|claim|cash prize|pounds? sterling)/is
-body __KAM_LOTTO4 /(claims (officer|agent)|lottery coordinator|fiduciary (officer|agent))/is
-body __KAM_LOTTO5 /(freelotto group|Royal Heritage Lottery|UK National (Online)? Lottery|U\.?K\.? Grand Promotions)/is
-body __KAM_LOTTO6 /(Dear Lucky Winner|Winning Notification)/is
+body __KAM_LOTTO4 /(claims (officer|agent)|lottery coordinator|fiduciary (officer|agent)|fiduaciary claims)/is
+body __KAM_LOTTO5 /(freelotto group|Royal Heritage Lottery|UK National (Online)? Lottery|U\.?K\.? Grand Promotions|Lottery Department UK|Euromillion Loteria|Luckyday International Lottery|International Lottery)/is
+body __KAM_LOTTO6 /(Dear Lucky Winner|Winning Notification|Attention:Winner|Dear Winner)/is
+header __KAM_LOTTO7 Subject =~ /(Your Lucky Day|(Attention:|ONLINE) WINNER)/i
-meta KAM_LOTTO1 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 >= 3)
+meta KAM_LOTTO1 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 + __KAM_LOTTO7 >= 3)
describe KAM_LOTTO1 Likely to be a e-Lotto Scam Email
score KAM_LOTTO1 0.5
-meta KAM_LOTTO2 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 >= 4)
+meta KAM_LOTTO2 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 + __KAM_LOTTO7 >= 4)
describe KAM_LOTTO2 Highly Likely to be a e-Lotto Scam Email
score KAM_LOTTO2 1.0
-meta KAM_LOTTO3 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 >= 5)
+meta KAM_LOTTO3 (__KAM_LOTTO1 + __KAM_LOTTO2 + __KAM_LOTTO3 + __KAM_LOTTO4 + __KAM_LOTTO5 + __KAM_LOTTO6 + __KAM_LOTTO7 >= 5)
describe KAM_LOTTO3 Almost certain to be a e-Lotto Scam Email
score KAM_LOTTO3 2.0
@@ -55,15 +56,23 @@
body __KAM_ADVERT1 /email advertising/is
body __KAM_ADVERT2 /instant traffic and sales/is
body __KAM_ADVERT3 /Email Ad Broadcast/is
-header __KAM_ADVERT4 Subject =~ /instant traffic, leads and sales/i
+header __KAM_ADVERT4 Subject =~ /(get instant sales|get more business|instant traffic, leads and sales|within 24 hours)/i
meta KAM_ADVERT (__KAM_ADVERT1 + __KAM_ADVERT2 + __KAM_ADVERT3 + __KAM_ADVERT4 >= 4)
describe KAM_ADVERT Mailing List Scammers Hawking Their Lists / Services
-score KAM_ADVERT 1.0
+score KAM_ADVERT 2.0
#ADVERTISEMENT
-body KAM_ADVERT2 /This is an Advertisement/is
+body KAM_ADVERT2 /(This is an Advertisement|Continue in your Secure Web Browser|Can't see the images below)/is
describe KAM_ADVERT2 This is probably an unwanted commercial email...
-score KAM_ADVERT2 0.4
+score KAM_ADVERT2 0.55
+
+#ONE LINE ADVERTISEMENTS
+body __KAM_1LINE1 /Did you overpay?/is
+header __KAM_1LINE2 Subject =~ /I need tax savings? tip/i
+
+meta KAM_1LINE (__KAM_1LINE1 + __KAM_1LINE2 >= 2)
+describe KAM_1LINE One liner spams
+score KAM_1LINE 2.5
#CAN SPAM
body KAM_CANSPAM /(full compliance with the U.S. Federal-?Can-?Spam-Act|provides CAN-SPAM compliant email)/is
@@ -71,8 +80,8 @@
score KAM_CANSPAM 1.0
#GIFT CARDS
-body __KAM_GIFT1 /Claim your free \$500 Target Gift Card/is
-body __KAM_GIFT2 /unsubscribe from this advertisemetn/is
+body __KAM_GIFT1 /(Claim your free \$500 Target Gift Card|complimentary gift-?card|received a Victoria's Secret Giftcard)/is
+body __KAM_GIFT2 /(unsubscribe from this advertiseme(tn|nt)|exit future communications)/is
meta KAM_GIFT (__KAM_GIFT1 + __KAM_GIFT2 >= 2)
describe KAM_GIFT Gift Card Scams
score KAM_GIFT 1.5
@@ -98,4 +107,25 @@
meta KAM_BIZ (__KAM_BIZ1 + __KAM_BIZ2 >= 1)
describe KAM_BIZ Free Business Card Emails
score KAM_BIZ 1.5
+
+#WEIGHT LOSS
+body __KAM_WEIGHT1 /(extra weight|glutting)/is
+body __KAM_WEIGHT2 /\d pounds/is
+header __KAM_WEIGHT3 Subject =~ /(leaner|slimmer)/i
+
+#ANATRIM
+body __KAM_ANA1 /anatrim/i
+
+meta KAM_ANA (__KAM_ANA1 + __KAM_WEIGHT1 + __KAM_WEIGHT2 + __KAM_WEIGHT3 > 3)
+describe KAM_ANA Likely Anatrim Weightloss Spam
+score KAM_ANA 1.5
+
+#REPLACE
+body __KAM_REP1 /Replace [-!] with \./is
+body __KAM_REP2 /www\s*[-!]/i
+
+meta KAM_REPLACE (__KAM_REP1 + __KAM_REP2 >= 1)
+describe KAM_REPLACE Spams that use obfuscated URLs with instructions
+score KAM_REPLACE 2.0
+
#EOF