svn commit: r829299 - in /spamassassin/trunk/rulesrc/sandbox/wtogami: 20_misc.cf 20_vanity.cf

[wt...@apache.org]

Author: wtogami
Date: Sat Oct 24 02:54:05 2009
New Revision: 829299

URL: http://svn.apache.org/viewvc?rev=829299&view=rev
Log:
Vanity and fake award rules.
Easy for the spammer to evade, but proper spelling and grammar along with certain keywords are necessary to have any success in fooling anyone.

Added:
    spamassassin/trunk/rulesrc/sandbox/wtogami/20_vanity.cf
Modified:
    spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf

Modified: spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf?rev=829299&r1=829298&r2=829299&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/wtogami/20_misc.cf Sat Oct 24 02:54:05 2009
@@ -1,5 +0,0 @@
-header __WHOWHO1  Subject =~ /Who's Who/
-header __WHOWHO2  From    =~ /Who's Who/
-meta WT_VANITY_WHOWHO    __WHOWHO1 || __WHOWHO2
-describe WT_VANITY_WHOWHO Vanity: Who's Who
-# score WT_VANITY_WHOWHO 2.0

Added: spamassassin/trunk/rulesrc/sandbox/wtogami/20_vanity.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/wtogami/20_vanity.cf?rev=829299&view=auto
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/wtogami/20_vanity.cf (added)
+++ spamassassin/trunk/rulesrc/sandbox/wtogami/20_vanity.cf Sat Oct 24 02:54:05 2009
@@ -0,0 +1,30 @@
+# VANTIY SPAM
+# Who's Who and other types of fake or vanity awards.
+# TODO: Simplify to fewer patterns after some nightly masscheck results.
+meta VANITY		(__KNOWN_VANITY && (__NO_COST + __INFORM_YOU + __INNERCIRCLE + __SHMUCK + __EXECS_PROS + __PUB_DEADLINE + __REGISTRY + __NOMINATION + __BIOGRAPHY + __ACCOLADES + __RECOGNITION + __DISTINGUISHED + __EXCELLENCE + __ACHIEVEMENT > 3)) || (__SBCAVANITY && __BESTOFBIZ)
+
+# Known Vanity Spammers
+meta __KNOWN_VANITY	__PRINCETONPRE || __WHOSWHO
+body __PRINCETONPRE	/\bPrinceton Premier/
+body __WHOSWHO		/\bWho.s Who\b/
+# Typical Patterns
+body __NO_COST		/\b(?:no costs?|cost-? *free|free of costs?|no fees?)\b/i
+body __INFORM_YOU	/\b(?:pleased?|pleasure) to inform you\b/
+body __INNERCIRCLE	/\bInner Circle\b/
+# Honored People
+body __SHMUCK		/\b(?:accomplished|distinguished|exceptional|talented) +(?:professionals?|individuals?)\b/i
+body __EXECS_PROS	/\bexecutives? and professionals?\b/i
+# Registry Application
+body __PUB_DEADLINE	/\bpublication deadlines?\b/i
+body __REGISTRY	/\bregistry\b/i
+body __NOMINATION	/\b(?:nominated|nomination)\b/i
+body __BIOGRAPHY	/\b(?:biography|biographies|biographical)\b/i
+# Flattery
+body __ACCOLADES	/\baccolades?\b/i
+body __RECOGNITION	/\brecognition\b/i
+body __DISTINGUISHED	/\bdistinguished\b/i
+body __EXCELLENCE	/\bdemonstrated excellence\b/i
+body __ACHIEVEMENT	/\bbenchmark of achievement\b/i
+# SBCA 20091023
+body __SBCAVANITY	/\bSmall Business Commerce Association/
+body __BESTOFBIZ	/\bBest of Business Award\b/