You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2009/05/12 23:53:46 UTC
svn commit: r774105 - /spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Author: jm
Date: Tue May 12 21:53:45 2009
New Revision: 774105
URL: http://svn.apache.org/viewvc?rev=774105&view=rev
Log:
auto-generated test rules
Modified:
spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_sought.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sought.cf?rev=774105&r1=774104&r2=774105&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_sought.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_sought.cf Tue May 12 21:53:45 2009
@@ -28,8 +28,8 @@
body __SEEK_Q24Q1A /Helvetica, sans-serif;\"> <tr>/
body __SEEK_CMT_R2 /width=\"50\%\" valign=\"top\"> /
body __SEEK_AFG9Q3 / height=\"320\" alt=\"\" border=\"0\">/
-body __SEEK_XKQ06P /\+0100<\/a><\/td> <\/td> <div align/
body __SEEK_NBBJPV /Women will beg you to walk naked and shak/
+body __SEEK_XKQ06P /\+0100<\/a><\/td> <\/td> <div align/
body __SEEK_PZTW8X / font-weight: bold; font-size: 10pt;\"> \x{95} /
body __SEEK_VPNRHE /style=\"padding: 4px 10px 4px 0px;\">/
body __SEEK_HIMPBT / cellspacing=\"0\" width=\"100\%;\" >/
@@ -43,7 +43,7 @@
body __SEEK_7DRGYL /style=\"padding: 9px 12px 0px 12px;\"> /
# passed hit-rate threshold: 1.0
-meta JM_SOUGHT_1 (__SEEK_FFY_VE || __SEEK_PRSQ9N || __SEEK_HSKIIB || __SEEK_JX_0VU || __SEEK_UVKFML || __SEEK_AU8P1H || __SEEK_OHIT_B || __SEEK_1CRX_I || __SEEK_TXESYF || __SEEK_ORJS1F || __SEEK_G8LKII || __SEEK_MFSIEC || __SEEK_4C4JEY || __SEEK_JVM1SY || __SEEK_KLHXZP || __SEEK_IH6DPF || __SEEK_G4QJ3J || __SEEK_ENZSFP || __SEEK_6THWPU || __SEEK_1ZOIMW || __SEEK_CJDCEA || __SEEK_LBCCJQ || __SEEK_L0SWO1 || __SEEK_PJ6BN8 || __SEEK_V6D9OK || __SEEK_JXD_O_ || __SEEK_Q24Q1A || __SEEK_CMT_R2 || __SEEK_AFG9Q3 || __SEEK_XKQ06P || __SEEK_NBBJPV || __SEEK_PZTW8X || __SEEK_VPNRHE || __SEEK_HIMPBT || __SEEK_JSJ1AS || __SEEK_8Y1GUU || __SEEK_ZOF0SY || __SEEK_TIXRHC || __SEEK_MGNJ0K || __SEEK_ST19ZC || __SEEK_DWJLQD || __SEEK_7DRGYL)
+meta JM_SOUGHT_1 (__SEEK_FFY_VE || __SEEK_PRSQ9N || __SEEK_HSKIIB || __SEEK_JX_0VU || __SEEK_UVKFML || __SEEK_AU8P1H || __SEEK_OHIT_B || __SEEK_1CRX_I || __SEEK_TXESYF || __SEEK_ORJS1F || __SEEK_G8LKII || __SEEK_MFSIEC || __SEEK_4C4JEY || __SEEK_JVM1SY || __SEEK_KLHXZP || __SEEK_IH6DPF || __SEEK_G4QJ3J || __SEEK_ENZSFP || __SEEK_6THWPU || __SEEK_1ZOIMW || __SEEK_CJDCEA || __SEEK_LBCCJQ || __SEEK_L0SWO1 || __SEEK_PJ6BN8 || __SEEK_V6D9OK || __SEEK_JXD_O_ || __SEEK_Q24Q1A || __SEEK_CMT_R2 || __SEEK_AFG9Q3 || __SEEK_NBBJPV || __SEEK_XKQ06P || __SEEK_PZTW8X || __SEEK_VPNRHE || __SEEK_HIMPBT || __SEEK_JSJ1AS || __SEEK_8Y1GUU || __SEEK_ZOF0SY || __SEEK_TIXRHC || __SEEK_MGNJ0K || __SEEK_ST19ZC || __SEEK_DWJLQD || __SEEK_7DRGYL)
score JM_SOUGHT_1 4.0
describe JM_SOUGHT_1 Body contains frequently-spammed text patterns
body __SEEK_J_UHMX / alt=\"Welcome to WebMD\" border=\"0\">/
@@ -55,55 +55,53 @@
body __SEEK_SYSORR /\" style=\"background-color: \#2280b2;\" width=\"556\">/
body __SEEK_29JTR2 / serving si= ze of your meat much larger\./
body __SEEK_IZDLLS / From: VIAGRA . Official Site /
-body __SEEK_OAUWX3 /ome to WebMD<\/title> <\/head>/
# passed hit-rate threshold: 0.5
-meta JM_SOUGHT_2 (__SEEK_J_UHMX || __SEEK_R14KDD || __SEEK_WSOZN3 || __SEEK_QXSKNS || __SEEK_TDPBXC || __SEEK_SHXL_X || __SEEK_SYSORR || __SEEK_29JTR2 || __SEEK_IZDLLS || __SEEK_OAUWX3)
+meta JM_SOUGHT_2 (__SEEK_J_UHMX || __SEEK_R14KDD || __SEEK_WSOZN3 || __SEEK_QXSKNS || __SEEK_TDPBXC || __SEEK_SHXL_X || __SEEK_SYSORR || __SEEK_29JTR2 || __SEEK_IZDLLS)
score JM_SOUGHT_2 4.0
describe JM_SOUGHT_2 Body contains frequently-spammed text patterns
+body __SEEK_OAUWX3 /ome to WebMD<\/title> <\/head>/
body __SEEK_EPRYKT /------=_NextPart_000_0007_01C9C2CC\.F5D34370--/
body __SEEK_UTLQ2X /rg \(qpsmtpd\/0\.43rc1\) with ESMTP ident/
-body __SEEK_MCBU2T /To Unsubscribe Write: P\.O\.BOX 105603 21283 Atlanta Georgia, 30348-5603 United States/
-body __SEEK_AU09DO /Transitional\/\/EN\" \"http:\/\/w3\.org\/TR\/html4\/loose\.dtd\">/
body __SEEK_QUAW10 / Only reliable and approved manufacturers\! /
+body __SEEK_AU09DO /Transitional\/\/EN\" \"http:\/\/w3\.org\/TR\/html4\/loose\.dtd\">/
+body __SEEK_MCBU2T /To Unsubscribe Write: P\.O\.BOX 105603 21283 Atlanta Georgia, 30348-5603 United States/
body __SEEK__WFCFC / \"http:\/\/w3\.org\/TR\/html4\/loose\.dtd\"> <html>/
-body __SEEK_CBJMO7 / of your meat much larger\.<\/FONT><\/DIV>/
body __SEEK_MQ37DZ /------=_NextPart_000_0007_01C9C2CC\.F5D34370 Content-Type: text\/html; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
+body __SEEK_CBJMO7 / of your meat much larger\.<\/FONT><\/DIV>/
body __SEEK_IAGY_U /ve to click ------=_NextPart_000_0007_01C9C2CC\.F5D34370/
-body __SEEK_TZKXB9 / to click<\/A><\/FONT><= \/DIV><\/BODY><\/HTML>/
body __SEEK_DMBJXR /g-IP: \[10\.713\.579\.7\] X-Originating-Email: \[cebkl/
-body __SEEK_QMI5UM /<DIV align=3Dcenter><FONT face=3DArial size=3D2> <A href=3D\"http:\/\//
+body __SEEK_TZKXB9 / to click<\/A><\/FONT><= \/DIV><\/BODY><\/HTML>/
body __SEEK_OPPRUK /Just one move to click New from WebMD: Dear cebkl/
+body __SEEK_QMI5UM /<DIV align=3Dcenter><FONT face=3DArial size=3D2> <A href=3D\"http:\/\//
body __SEEK_UYUUC_ /ng: 7bit You can either suffer, or use natural and safe packs for manhood improving\. /
body __SEEK_6_20MI /oo for hifjqjcqeto Ecuc jsiwin<\/style> <\/body><\/html>/
body __SEEK_FNRQNI /------=_NextPart_000_0007_01C9C2CC\.F5D34370 Content-Type: text\/plain; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
-body __SEEK_INS4TM /<BODY bgColor=3D\#ffffff> <DIV align=3Dcenter><FONT face=3DArial size=3D2>/
body __SEEK_1BXJ3A /icrosoft MimeOLE V6\.00\.2900\.2180/
body __SEEK_QBWB1I /soft Outlook Express 6\.00\.2900\.2180/
+body __SEEK_INS4TM /<BODY bgColor=3D\#ffffff> <DIV align=3Dcenter><FONT face=3DArial size=3D2>/
body __SEEK_8ILECC / You can either suffer, or use natural and safe packs for manhood improving\. Ulyda/
body __SEEK_DP5QLC /L 6\.00\.2900\.2180\" name=3DGENERATOR> /
body __SEEK_GXFMCY /9:03:11 -0300 MIME-Version: 1\.0 Content-Type: multipart\/alternative; boundary=\"----=_NextPart_000_0007_01C9C2CC\.F5/
-body __SEEK_ON_ZIV /e content=3D\"text\/html; charset=3Diso-8859-1\"= > /
body __SEEK_MO6GLB / You can either suffer, or use natural and safe packs for manhood improving\. Jfyufe/
-body __SEEK_ZYU5ID / with ESMTP ident=32\.Red-80-38-221\.staticIP\.rima-tde\.net MAIL_FROM=/
+body __SEEK_ON_ZIV /e content=3D\"text\/html; charset=3Diso-8859-1\"= > /
body __SEEK_B_KECQ / You can either suffer, or use natural and safe packs for manhood improving\. Ojbovyli/
-body __SEEK_LCSVFA / \"Qwen\" <Atle-shibakur\@Herbasway\.com> Mime-Version: 1\.0 Content-Type: text\/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit/
+body __SEEK_ZYU5ID / with ESMTP ident=32\.Red-80-38-221\.staticIP\.rima-tde\.net MAIL_FROM=/
+body __SEEK_M6DGPV /\"Qwen\" <Atle-shibakur\@Herbasway\.com> Mime-Version: 1\.0 Content-Type: text\/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit/
body __SEEK_GC8A74 / border=\"0\"> New from WebMD: Dear cebkl/
body __SEEK_4UERPF /coding: quoted-printable We will make the serving si/
+body __SEEK_LC0PEP /much larger\. Just one move to click/
body __SEEK_CV_DQL /Trap-Metadata: s=incl_fwds n=redist t/
body __SEEK_UUI1ZP / 0px\"> New from WebMD: Dear cebkl/
-body __SEEK_LC0PEP /much larger\. Just one move to click/
body __SEEK_ABXZQS / ESMTP ident=NXDOMAIN MAIL_FROM=/
body __SEEK_KJJBTS /700 Message-ID: <00...@subtitling799> From: \"Brittney Gilmore\" /
body __SEEK_9VSHJM /n=redist t=1240351415 Received: from /
body __SEEK_EHFJGY / from this email distribution list /
-body __SEEK_CTJIJ0 / is automatically enforced by our email delivery system\. Please .{0,20} to start the process for email deletion\. /
+body __SEEK_QJGLQB / is automatically enforced by our email delivery system\. Please .{0,40} to start the process for email deletion\. /
+body __SEEK_59_EMS /0px 30px;\"> You are subscribed as cebkl/
body __SEEK_XYFMJV / to start the process for email deletion\. or write to /
body __SEEK_WM5V3Q / You can either suffer, or use natural and safe packs for manhood improving\. Our site is: /
-body __SEEK_ETHD3L /g \(qpsmtpd\/0\.43rc1\) with SMTP ident/
-body __SEEK_59_EMS /0px 30px;\"> You are subscribed as cebkl/
-body __SEEK_ASKR7S / If you can\"t read or see this email, /
-meta JM_SOUGHT_3 (__SEEK_EPRYKT || __SEEK_UTLQ2X || __SEEK_MCBU2T || __SEEK_AU09DO || __SEEK_QUAW10 || __SEEK__WFCFC || __SEEK_CBJMO7 || __SEEK_MQ37DZ || __SEEK_IAGY_U || __SEEK_TZKXB9 || __SEEK_DMBJXR || __SEEK_QMI5UM || __SEEK_OPPRUK || __SEEK_UYUUC_ || __SEEK_6_20MI || __SEEK_FNRQNI || __SEEK_INS4TM || __SEEK_1BXJ3A || __SEEK_QBWB1I || __SEEK_8ILECC || __SEEK_DP5QLC || __SEEK_GXFMCY || __SEEK_ON_ZIV || __SEEK_MO6GLB || __SEEK_ZYU5ID || __SEEK_B_KECQ || __SEEK_LCSVFA || __SEEK_GC8A74 || __SEEK_4UERPF || __SEEK_CV_DQL || __SEEK_UUI1ZP || __SEEK_LC0PEP || __SEEK_ABXZQS || __SEEK_KJJBTS || __SEEK_9VSHJM || __SEEK_EHFJGY || __SEEK_CTJIJ0 || __SEEK_XYFMJV || __SEEK_WM5V3Q || __SEEK_ETHD3L || __SEEK_59_EMS || __SEEK_ASKR7S)
+meta JM_SOUGHT_3 (__SEEK_OAUWX3 || __SEEK_EPRYKT || __SEEK_UTLQ2X || __SEEK_QUAW10 || __SEEK_AU09DO || __SEEK_MCBU2T || __SEEK__WFCFC || __SEEK_MQ37DZ || __SEEK_CBJMO7 || __SEEK_IAGY_U || __SEEK_DMBJXR || __SEEK_TZKXB9 || __SEEK_OPPRUK || __SEEK_QMI5UM || __SEEK_UYUUC_ || __SEEK_6_20MI || __SEEK_FNRQNI || __SEEK_1BXJ3A || __SEEK_QBWB1I || __SEEK_INS4TM || __SEEK_8ILECC || __SEEK_DP5QLC || __SEEK_GXFMCY || __SEEK_MO6GLB || __SEEK_ON_ZIV || __SEEK_B_KECQ || __SEEK_ZYU5ID || __SEEK_M6DGPV || __SEEK_GC8A74 || __SEEK_4UERPF || __SEEK_LC0PEP || __SEEK_CV_DQL || __SEEK_UUI1ZP || __SEEK_ABXZQS || __SEEK_KJJBTS || __SEEK_9VSHJM || __SEEK_EHFJGY || __SEEK_QJGLQB || __SEEK_59_EMS || __SEEK_XYFMJV || __SEEK_WM5V3Q)
score JM_SOUGHT_3 4.0
describe JM_SOUGHT_3 Body contains frequently-spammed text patterns