You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2009/05/13 19:46:31 UTC
svn commit: r774445 - /spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Author: jm
Date: Wed May 13 17:46:29 2009
New Revision: 774445
URL: http://svn.apache.org/viewvc?rev=774445&view=rev
Log:
auto-generated test rules
Modified:
spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_sought.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sought.cf?rev=774445&r1=774444&r2=774445&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_sought.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_sought.cf Wed May 13 17:46:29 2009
@@ -4,7 +4,7 @@
body __SEEK_PRSQ9N / Street, Suite 2400, Atlanta, GA 30361/
body __SEEK_CATNM4 /u can forget about hearing the/
body __SEEK_HSKIIB /<IMG SRC=\"http:\/\/health\.webmd\.com\/cgi-bin21\/flosensing\?z=qdj0OJ3ch0A0Dr\"><\/html>/
-body __SEEK_VELHKO /rights reserved\.<\/td> <\/tr> <\/table>/
+body __SEEK_YGMWYX /reserved\.<\/td> <\/tr> <\/table>/
body __SEEK_UVKFML /\#CAE8A0; text-decoration: none;\">/
body __SEEK_OHIT_B /our meat much larger\. \ /
body __SEEK_1CRX_I /none;\"><strong>Change\/update<\/a><\/strong> your email address\./
@@ -26,11 +26,12 @@
body __SEEK_L0SWO1 /12px Arial, Helvetica, sans-serif;/
body __SEEK_2VCSMW / \#dfd8bf; padding: 5px 0px 0px 0px\"> /
body __SEEK_V6D9OK / style=\"padding-top: 10px;\"> /
-body __SEEK_JXD_O_ /Arial, Helvetica, sans-serif;\"> /
+body __SEEK_ZV26_X /Arial, Helvetica, sans-serif;\">/
body __SEEK_Q24Q1A /Helvetica, sans-serif;\"> <tr>/
body __SEEK_FNOEPE / width=\"50\%\" valign=\"top\"> /
body __SEEK_AFG9Q3 / height=\"320\" alt=\"\" border=\"0\">/
body __SEEK_NBBJPV /Women will beg you to walk naked and shak/
+body __SEEK_RKNB_1 /; text-decoration: none;\">Wed, .. /
body __SEEK_XKQ06P /\+0100<\/a><\/td> <\/td> <div align/
body __SEEK_EDJP_G /ht: bold; font-size: 10pt;\"> \x{95} /
body __SEEK_ESYE_E /t;\"> \x{95} <\/span><a href=\"http:\/\//
@@ -47,61 +48,98 @@
body __SEEK_P86T25 / style=\"padding: 9px 12px 0px 12px;\"> /
# passed hit-rate threshold: 1.0
-meta JM_SOUGHT_1 (__SEEK_41FAYP || __SEEK_FFY_VE || __SEEK_PRSQ9N || __SEEK_CATNM4 || __SEEK_HSKIIB || __SEEK_VELHKO || __SEEK_UVKFML || __SEEK_OHIT_B || __SEEK_1CRX_I || __SEEK_HIWF_L || __SEEK_7OVXD1 || __SEEK_HYRHOQ || __SEEK_MREQGE || __SEEK_ORJS1F || __SEEK_MFSIEC || __SEEK_4C4JEY || __SEEK_KLHXZP || __SEEK_IH6DPF || __SEEK_G4QJ3J || __SEEK_ENZSFP || __SEEK_PKTDFD || __SEEK_1ZOIMW || __SEEK_CJDCEA || __SEEK_LBCCJQ || __SEEK_L0SWO1 || __SEEK_2VCSMW || __SEEK_V6D9OK || __SEEK_JXD_O_ || __SEEK_Q24Q1A || __SEEK_FNOEPE || __SEEK_AFG9Q3 || __SEEK_NBBJPV || __SEEK_XKQ06P || __SEEK_EDJP_G || __SEEK_ESYE_E || __SEEK_DM9AR2 || __SEEK_JSJ1AS || __SEEK_HIMPBT || __SEEK_ZOF0SY || __SEEK_8Y1GUU || __SEEK_IGAKWT || __SEEK_22XDYA || __SEEK_OGWVDR || __SEEK_MGNJ0K || __SEEK_DWJLQD || __SEEK_P86T25)
+meta JM_SOUGHT_1 (__SEEK_41FAYP || __SEEK_FFY_VE || __SEEK_PRSQ9N || __SEEK_CATNM4 || __SEEK_HSKIIB || __SEEK_YGMWYX || __SEEK_UVKFML || __SEEK_OHIT_B || __SEEK_1CRX_I || __SEEK_HIWF_L || __SEEK_7OVXD1 || __SEEK_HYRHOQ || __SEEK_MREQGE || __SEEK_ORJS1F || __SEEK_MFSIEC || __SEEK_4C4JEY || __SEEK_KLHXZP || __SEEK_IH6DPF || __SEEK_G4QJ3J || __SEEK_ENZSFP || __SEEK_PKTDFD || __SEEK_1ZOIMW || __SEEK_CJDCEA || __SEEK_LBCCJQ || __SEEK_L0SWO1 || __SEEK_2VCSMW || __SEEK_V6D9OK || __SEEK_ZV26_X || __SEEK_Q24Q1A || __SEEK_FNOEPE || __SEEK_AFG9Q3 || __SEEK_NBBJPV || __SEEK_RKNB_1 || __SEEK_XKQ06P || __SEEK_EDJP_G || __SEEK_ESYE_E || __SEEK_DM9AR2 || __SEEK_JSJ1AS || __SEEK_HIMPBT || __SEEK_ZOF0SY || __SEEK_8Y1GUU || __SEEK_IGAKWT || __SEEK_22XDYA || __SEEK_OGWVDR || __SEEK_MGNJ0K || __SEEK_DWJLQD || __SEEK_P86T25)
score JM_SOUGHT_1 4.0
describe JM_SOUGHT_1 Body contains frequently-spammed text patterns
body __SEEK_J_UHMX / alt=\"Welcome to WebMD\" border=\"0\">/
body __SEEK_R14KDD /to WebMD\" border=\"0\"><\/td>/
-body __SEEK_DTCSEU /tml; charset=\"ISO-8859-1\" Content-Transfer-Encoding: 7bit/
+body __SEEK_WPMH6V /; charset=\"ISO-8859-1\" Content-Transfer-Encoding: /
body __SEEK_QXSKNS / text\/html; charset=\"ISO-8859-1\"/
+body __SEEK_VACUT9 /people, who don\'t want to overpay for illness managing g/
+body __SEEK_JA4DXW / http:\/\/www\.poztecum\.cn\/ The ..s/
body __SEEK_I3NIUX / style=\"padding: 16px 0px 0px 12px;\">/
body __SEEK_SHXL_X / Content-Transfer-Encoding: 7bit Our site is: /
body __SEEK_LHXJNK /ake the serving si= ze of your meat much larger\./
body __SEEK_SYSORR /\" style=\"background-color: \#2280b2;\" width=\"556\">/
body __SEEK_ZYHQF8 / From: VIAGRA \x{ae} Official Site /
-body __SEEK_EPRYKT /------=_NextPart_000_0007_01C9C2CC\.F5D34370--/
+body __SEEK_P7ODYA /: 7bit Welcome to WebMD \x{95} Wed, 2/
# passed hit-rate threshold: 0.5
-meta JM_SOUGHT_2 (__SEEK_J_UHMX || __SEEK_R14KDD || __SEEK_DTCSEU || __SEEK_QXSKNS || __SEEK_I3NIUX || __SEEK_SHXL_X || __SEEK_LHXJNK || __SEEK_SYSORR || __SEEK_ZYHQF8 || __SEEK_EPRYKT)
+meta JM_SOUGHT_2 (__SEEK_J_UHMX || __SEEK_R14KDD || __SEEK_WPMH6V || __SEEK_QXSKNS || __SEEK_VACUT9 || __SEEK_JA4DXW || __SEEK_I3NIUX || __SEEK_SHXL_X || __SEEK_LHXJNK || __SEEK_SYSORR || __SEEK_ZYHQF8 || __SEEK_P7ODYA)
score JM_SOUGHT_2 4.0
describe JM_SOUGHT_2 Body contains frequently-spammed text patterns
+body __SEEK_EPRYKT /------=_NextPart_000_0007_01C9C2CC\.F5D34370--/
body __SEEK_OAUWX3 /ome to WebMD<\/title> <\/head>/
body __SEEK_QUAW10 / Only reliable and approved manufacturers\! /
body __SEEK_P1HY8S /<title>Welcome to WebMD<\/title>/
+body __SEEK_PV5TMZ /g \(qpsmtpd\/0\.43rc1\) with ESMTP ident/
body __SEEK_AU09DO /Transitional\/\/EN\" \"http:\/\/w3\.org\/TR\/html4\/loose\.dtd\">/
+body __SEEK_9CQK5H /<DIV align=3Dcenter><FONT face=3DArial/
body __SEEK_MQ37DZ /------=_NextPart_000_0007_01C9C2CC\.F5D34370 Content-Type: text\/html; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
-body __SEEK_UTLQ2X /rg \(qpsmtpd\/0\.43rc1\) with ESMTP ident/
body __SEEK__WFCFC / \"http:\/\/w3\.org\/TR\/html4\/loose\.dtd\"> <html>/
body __SEEK_MCBU2T /To Unsubscribe Write: P\.O\.BOX 105603 21283 Atlanta Georgia, 30348-5603 United States/
-body __SEEK_GZGFAB /much larger\.<\/FONT><\/DIV> <DIV align=/
body __SEEK_CBJMO7 / of your meat much larger\.<\/FONT><\/DIV>/
+body __SEEK_GZGFAB /much larger\.<\/FONT><\/DIV> <DIV align=/
body __SEEK_IAGY_U /ve to click ------=_NextPart_000_0007_01C9C2CC\.F5D34370/
+body __SEEK_1BXJ3A /icrosoft MimeOLE V6\.00\.2900\.2180/
+body __SEEK_2O_IBI /k Express 6\.00\.2900\.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6\.00\.2900\./
+body __SEEK_QBWB1I /soft Outlook Express 6\.00\.2900\.2180/
body __SEEK_TZKXB9 / to click<\/A><\/FONT><= \/DIV><\/BODY><\/HTML>/
body __SEEK_DMBJXR /g-IP: \[10\.713\.579\.7\] X-Originating-Email: \[cebkl/
+body __SEEK_DP5QLC /L 6\.00\.2900\.2180\" name=3DGENERATOR> /
body __SEEK_FNRQNI /------=_NextPart_000_0007_01C9C2CC\.F5D34370 Content-Type: text\/plain; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_OPPRUK /Just one move to click New from WebMD: Dear cebkl/
-body __SEEK_1BXJ3A /icrosoft MimeOLE V6\.00\.2900\.2180/
-body __SEEK_QBWB1I /soft Outlook Express 6\.00\.2900\.2180/
body __SEEK_6_20MI /oo for hifjqjcqeto Ecuc jsiwin<\/style> <\/body><\/html>/
-body __SEEK_UY89_5 / Apr 2009 19:03:11 -0300 MIME-Version: 1\.0 Content-Type: multipart\/alternative; boundary=\"----=_NextPart_000_0007_01C9C2CC\.F5/
-body __SEEK_DP5QLC /L 6\.00\.2900\.2180\" name=3DGENERATOR> /
body __SEEK_MGI_7E /http-equiv=3DContent-Type content=3D\"text\/html; charset=3Diso-8859-1\"= > /
+body __SEEK_KSCDE1 /meOLE V6\.00\.2900\.2180 This is a multi-part message in MIME format\. /
+body __SEEK_8BM2RT / -0300 MIME-Version: 1\.0 Content-Type: multipart\//
+body __SEEK_S66GFA /Customer Service Department, 33 East Minor Street, Emmaus, PA 18098/
+body __SEEK_DQVEGQ /2008 Rodale Inc\., all rights reserved\./
+body __SEEK_BWN7SU /td> <\/tr> <\/table><\/BODY><\/HTML>/
+body __SEEK_SIGFE9 / Unsubscribe \| Your Privacy Rights/
+body __SEEK_GNRU9M /\"0\" \/> Receive as RSS <\/a> <\/font>/
+body __SEEK_6U6UMW / View this message in the iContact Community/
+body __SEEK_HGGZ_S /\. It was sent from: iContact AutoResp/
+body __SEEK_SVQHLJ /This message was sent from iContact to /
+body __SEEK_VTKK7D /\" border=3D\"0\" \/> Receive as RSS /
+body __SEEK_PYBPHM /an Pkwy Suite 200, Durham, NC 27/
+body __SEEK_OSG8XB /kwy Suite 200, Durham, NC 27713\. You can modify\/update you/
+body __SEEK_2OUGNV /ht=3D\"16\" border=3D\"0\" \/> /
+body __SEEK_NS__UA /Your immune system will fight well with our supplements to hel/
body __SEEK_M6DGPV /\"Qwen\" <Atle-shibakur\@Herbasway\.com> Mime-Version: 1\.0 Content-Type: text\/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit/
+body __SEEK_BTUPVK / Comment on this message <\/a>/
+body __SEEK_D9WUGM /\.html\" style=3D\"text-decoration: none;\"> /
+body __SEEK_8TS7UL /------=_NextPart_000_0007_01C9D3A1\.8B0EAD00--/
+body __SEEK_R1EVYR /border=\"0\"> New from WebMD: Dear /
body __SEEK_LJDTWB / ESMTP ident=32\.Red-80-38-221\.staticIP\.rima-tde\.net MAIL_FROM=/
-body __SEEK_YJ4LMN /border=\"0\"> New from WebMD: Dear cebkl/
+body __SEEK__IKQB3 / http:\/\/www\.poztecum\.cn\/ Your /
+body __SEEK_MU8HZC /<\/a> =20 <a href=3D\"http:\/\/a/
body __SEEK_4UERPF /coding: quoted-printable We will make the serving si/
body __SEEK_LC0PEP /much larger\. Just one move to click/
body __SEEK_HENJME /35 -0700 Message-ID: <00...@subtitling799> From: \"Brittney Gilmore\" /
-body __SEEK_UUI1ZP / 0px\"> New from WebMD: Dear cebkl/
body __SEEK_CV_DQL /Trap-Metadata: s=incl_fwds n=redist t/
+body __SEEK_UUI1ZP / 0px\"> New from WebMD: Dear cebkl/
+body __SEEK_9RYBUT / 0px 5px;\" width=\"100\%\"> \x{95} Wed, .. /
body __SEEK_ABXZQS / ESMTP ident=NXDOMAIN MAIL_FROM=/
+body __SEEK_SPWWBZ /m - http:\/\/www\.junkemailfilter\.com X-Mail-from: /
+body __SEEK_LTHCGH / X-Sender-Host-Name: X-Original-helo: /
+body __SEEK_UOZ9LQ / 00:00:00 2008 Trap-Metadata: s=/
body __SEEK_9VSHJM /n=redist t=1240351415 Received: from /
+body __SEEK_6LAVBI /A Great Canadian Pharmacy is here at your Fingertips\! No Doctor Needed\! Vis/
+body __SEEK_MXET7H / 601 E Street NW, Washington, DC 20049/
body __SEEK_ETHD3L /g \(qpsmtpd\/0\.43rc1\) with SMTP ident/
+body __SEEK__ATT6U /a, you can be rock hard all day l/
+body __SEEK_P9Y1TP /T face=Arial size=2> <A href=\"http:\/\//
+body __SEEK_LIMDUO /\. To ensure delivery to your inbox/
+body __SEEK_BJFVSD / size=3D\"1\" face=3D\"Verdana, Arial, Helvetica.. /
+body __SEEK_A_QURK /<\/STYLE> <\/HEAD> <BODY bgColor=\#ffffff> </
+body __SEEK_3AVR_G /> <DIV align=center><FONT face=Arial size=2>/
body __SEEK_EHFJGY / from this email distribution list /
body __SEEK_QJGLQB / is automatically enforced by our email delivery system\. Please .{0,40} to start the process for email deletion\. /
-body __SEEK_7_ZWI1 /A Great Canadian Pharmacy is here at your Fingertips\! No Doctor Needed\! Visit --> http:\/\//
-body __SEEK_XYFMJV / to start the process for email deletion\. or write to /
+body __SEEK_IGDRQ_ / <\/table><\/td> <\/tr> <\/table><br> <tr> <td bgcolor=/
+body __SEEK_QUWCBT /713\. You can modify\/update your subscription via the link b/
+body __SEEK_2MU0RW / ident=NXDOMAIN MAIL_FROM= RCPT_TO=; /
-meta JM_SOUGHT_3 (__SEEK_OAUWX3 || __SEEK_QUAW10 || __SEEK_P1HY8S || __SEEK_AU09DO || __SEEK_MQ37DZ || __SEEK_UTLQ2X || __SEEK__WFCFC || __SEEK_MCBU2T || __SEEK_GZGFAB || __SEEK_CBJMO7 || __SEEK_IAGY_U || __SEEK_TZKXB9 || __SEEK_DMBJXR || __SEEK_FNRQNI || __SEEK_OPPRUK || __SEEK_1BXJ3A || __SEEK_QBWB1I || __SEEK_6_20MI || __SEEK_UY89_5 || __SEEK_DP5QLC || __SEEK_MGI_7E || __SEEK_M6DGPV || __SEEK_LJDTWB || __SEEK_YJ4LMN || __SEEK_4UERPF || __SEEK_LC0PEP || __SEEK_HENJME || __SEEK_UUI1ZP || __SEEK_CV_DQL || __SEEK_ABXZQS || __SEEK_9VSHJM || __SEEK_ETHD3L || __SEEK_EHFJGY || __SEEK_QJGLQB || __SEEK_7_ZWI1 || __SEEK_XYFMJV)
+meta JM_SOUGHT_3 (__SEEK_EPRYKT || __SEEK_OAUWX3 || __SEEK_QUAW10 || __SEEK_P1HY8S || __SEEK_PV5TMZ || __SEEK_AU09DO || __SEEK_9CQK5H || __SEEK_MQ37DZ || __SEEK__WFCFC || __SEEK_MCBU2T || __SEEK_CBJMO7 || __SEEK_GZGFAB || __SEEK_IAGY_U || __SEEK_1BXJ3A || __SEEK_2O_IBI || __SEEK_QBWB1I || __SEEK_TZKXB9 || __SEEK_DMBJXR || __SEEK_DP5QLC || __SEEK_FNRQNI || __SEEK_OPPRUK || __SEEK_6_20MI || __SEEK_MGI_7E || __SEEK_KSCDE1 || __SEEK_8BM2RT || __SEEK_S66GFA || __SEEK_DQVEGQ || __SEEK_BWN7SU || __SEEK_SIGFE9 || __SEEK_GNRU9M || __SEEK_6U6UMW || __SEEK_HGGZ_S || __SEEK_SVQHLJ || __SEEK_VTKK7D || __SEEK_PYBPHM || __SEEK_OSG8XB || __SEEK_2OUGNV || __SEEK_NS__UA || __SEEK_M6DGPV || __SEEK_BTUPVK || __SEEK_D9WUGM || __SEEK_8TS7UL || __SEEK_R1EVYR || __SEEK_LJDTWB || __SEEK__IKQB3 || __SEEK_MU8HZC || __SEEK_4UERPF || __SEEK_LC0PEP || __SEEK_HENJME || __SEEK_CV_DQL || __SEEK_UUI1ZP || __SEEK_9RYBUT || __SEEK_ABXZQS || __SEEK_SPWWBZ || __SEEK_LTHCGH || __SEEK_UOZ9LQ || __SEEK_9VSHJM ||
__SEEK_6LAVBI || __SEEK_MXET7H || __SEEK_ETHD3L || __SEEK__ATT6U || __SEEK_P9Y1TP || __SEEK_LIMDUO || __SEEK_BJFVSD || __SEEK_A_QURK || __SEEK_3AVR_G || __SEEK_EHFJGY || __SEEK_QJGLQB || __SEEK_IGDRQ_ || __SEEK_QUWCBT || __SEEK_2MU0RW)
score JM_SOUGHT_3 4.0
describe JM_SOUGHT_3 Body contains frequently-spammed text patterns