You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by do...@apache.org on 2007/11/19 12:26:37 UTC
svn commit: r596272 - /spamassassin/rules/trunk/sandbox/dos/70_other.cf
Author: dos
Date: Mon Nov 19 03:26:32 2007
New Revision: 596272
URL: http://svn.apache.org/viewvc?rev=596272&view=rev
Log:
sandbox: DOS_MED_CAN_PHARM_NOV07
Modified:
spamassassin/rules/trunk/sandbox/dos/70_other.cf
Modified: spamassassin/rules/trunk/sandbox/dos/70_other.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/dos/70_other.cf?rev=596272&r1=596271&r2=596272&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/dos/70_other.cf (original)
+++ spamassassin/rules/trunk/sandbox/dos/70_other.cf Mon Nov 19 03:26:32 2007
@@ -242,3 +242,10 @@
body DOS_REMOVE_DOMAIN_DOT /e(?:mov|let)e the (?:dot|period|point) from the end/
meta DOS_REMOVE_DOMAIN_DOT_YAHOO DOS_REMOVE_DOMAIN_DOT && FORGED_YAHOO_RCVD
+# 20071118 - web pharmacy spam
+body __DOS_MED_WHAT_COULD /\bwhat (?:more|else) could you /i
+body __DOS_MED_NO_DIRECTION /\bN0 (?:(?:medicinal|doctor) (?:directions|instructions|recommendations)|prescriptions needed)\b/
+body __DOS_MED_CAN_WEB_PHARM /\b(?:Web-Based Canadian|Canadian On-Line) Pharmacy\b/i
+body __DOS_MED_MARK_DOWN /\d{2}% (?:mark down|reduction)/i
+meta DOS_MED_CAN_PHARM_NOV07 __OE_MSGID_2 && __DOS_HAS_ANY_URI && ((__DOS_MED_WHAT_COULD && __DOS_MED_NO_DIRECTION) || ( __DOS_MED_CAN_WEB_PHARM && __DOS_MED_MARK_DOWN))
+