spamassassin-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From yack...@apache.org
Subject svn commit: rev 10707 - incubator/spamassassin/trunk/rules
Date Tue, 18 May 2004 05:51:07 GMT
Author: yackley
Date: Mon May 17 22:51:06 2004
New Revision: 10707

Modified:
   incubator/spamassassin/trunk/rules/70_testing.cf
Log:
Updated test fraud rules

Modified: incubator/spamassassin/trunk/rules/70_testing.cf
==============================================================================
--- incubator/spamassassin/trunk/rules/70_testing.cf	(original)
+++ incubator/spamassassin/trunk/rules/70_testing.cf	Mon May 17 22:51:06 2004
@@ -201,39 +201,85 @@
 body T_DOMAIN_RATIO_32	eval:check_domain_ratio('0.032')
 
 # Bug 3349, rule written by yackley
-header T_FAKE_MS_XMIME X-MimeOLE =~ /mircosoft/i
+header T_FAKE_MS_XMIME	X-MimeOLE =~ /mircosoft/i
+header T_MISSPELLED_MS	ALL =~ /mircosoft/i
+
+# Updated test rules for fraud, uses existing rules and updated rules
+body __T_FRAUD_92	/youre? country/i
+body __T_FRAUD_110	/the total sum/i
+body __T_FRAUD_2	/\bass?ylum\b/i
+body __T_FRAUD_102	/foreign (?:offshore )?(?:bank|account)/i
+body __T_FRAUD_144	/\bnext of kin\b/i
+body __T_FRAUD_235	/(?:international|luckyday|overseas stake|promo|world) lott(?:o|ery)/i
+body __T_FRAUD_258	/computer ballot system/i
+body __T_FRAUD_113	/win cash/i
+body __T_FRAUD_63	/\blagos\b/i
+body __T_FRAUD_44	/(?:may i first|to) introduce my ?self/i
+body __T_FRAUD_52	/\balgeria\b/i
+body __T_FRAUD_81	/as the beneficiary/i
+body __T_FRAUD_58	/\bcongo\b/i
+body __T_FRAUD_259	/drawn	?from.{0,10}\d{2,3},?\d{3}/i
+body __T_FRAUD_149	/as a minister/i
+body __T_FRAUD_51	/\babidjan\b/i
+body __T_FRAUD_236	/lott(?:o|ery) (?:co,?ordinator|international)/i
+body __T_FRAUD_249	/bequest/i
+body __T_FRAUD_125	/(?:white|black|zimbabwean) farmers?/i
+body __T_FRAUD_197	/\smugabe\s/i
+body __T_FRAUD_56	/\bbotswana\b/i
+body __T_FRAUD_252	/modalit(?:y|ies)/i
+body __T_FRAUD_132	/(?:who was a|as a|an? honest|you being a|to any) foreigner/i
+body __T_FRAUD_227	/(?:negotiate|reasonable|acc?or?ding|certain|agg?ree).{1,20}percentage/i
+body __T_FRAUD_100	/(?:claim|concerning) (?:the|this) money/i
+body __T_FRAUD_26	/charity organization/i
+body __T_FRAUD_53	/\bangola\b/i
+body __T_FRAUD_88	/remains unclaimed/i
+body __T_FRAUD_16	/land dispute/i
+body __T_FRAUD_59	/\bdubai\b/i
+body __T_FRAUD_136	/barrister/i
+body __T_FRAUD_240	/award notification/i
+body __T_FRAUD_157	/god gives .{1,10}second chance/i
+body __T_FRAUD_46	/i am contacting you/i
+body __T_FRAUD_133	/foreign (?:business partner|customer)/i
+body __T_FRAUD_11	/\bexile\b/i
+body __T_FRAUD_228	/percentage.{1,10}(?:indicat|previous|involved)/i
+body __T_FRAUD_128	/head of state/i
+body __T_FRAUD_120	/letter of authority/i
+body __T_FRAUD_114	/you are.{0,8}winner/i
+body __T_FRAUD_142	/my late (?:husband|wife|brother|uncle|aunt|father|mother) (?:is|[hw]a[ds])\b/i
+body __T_FRAUD_94	/(?:huge|substantial) amount of m[o0]ney/i
+body __T_FRAUD_146	/the (?:wife|heir) (?:to|of)\b/i
+body __T_FRAUD_96	/(?:will share the money|your share.{1,10}(?:shall|sum|total|money|funds))/i
+body __T_FRAUD_41	/prize award dept/i
+body __T_FRAUD_77	/\btogo(?:lese)?\b/i
+body __T_FRAUD_216	/reliable person/i
+body __T_FRAUD_74	/\bsierra.leone\b/i
+body __T_FRAUD_137	/fiduciary agent/i
+body __T_FRAUD_82	/compliments? of the season/i
+body __T_FRAUD_251	/magnanimity/i
+body __T_FRAUD_162	/in the (?:lord'?s name|name of (?:our|the) lord)/i
+body __T_FRAUD_19	/political crisis/i
+body __T_FRAUD_254	/\bnumbered time\b/i
+body __T_FRAUD_241	/urgent and(?: very)? (?:profitable|confidential) business propos(?:al|ition)/i
+body __T_FRAUD_35	/international (?:bank|court of justice)/i
+body __T_FRAUD_217	/secrecy and confidentiality/i
+body __T_FRAUD_221	/(?:the importance of|utmost) secrecy/i
+body __T_FRAUD_57	/\bc.te .{0,2}ivoire\b/i
+body __T_FRAUD_124	/vital documents/i
+body __T_FRAUD_60	/\bgabon\b/i
+body __T_FRAUD_105	/million usd/i
+body __T_FRAUD_18	/over-invoice/i
+body __T_FRAUD_80	/a native of/i
+body __T_FRAUD_42	/(?:finance|holding|securit(?:ies|y)) (?:company|firm|storage house)/i
+body __T_FRAUD_67	/\bnigerian?\b/i
+body __T_FRAUD_31	/embassy/i
+body __T_FRAUD_115	/your (?:pr[i1]ze|share shall be)/i
+body __T_FRAUD_3	/assassinate/i
+body __T_FRAUD_220	/to (?:assure you|redeem)/i
+meta T_NIGERIAN_BODY_1A	( __NIGERIAN_BODY_1 + __NIGERIAN_BODY_2 + __NIGERIAN_BODY_3 + __NIGERIAN_BODY_5
+ __NIGERIAN_BODY_6 + __NIGERIAN_BODY_7 + __NIGERIAN_BODY_8 + __NIGERIAN_BODY_9 + __NIGERIAN_BODY_10
+ __NIGERIAN_BODY_11 + __NIGERIAN_BODY_12 + __NIGERIAN_BODY_13 + __NIGERIAN_BODY_14 + __NIGERIAN_BODY_16
+ __NIGERIAN_BODY_17 + __NIGERIAN_BODY_18 + __NIGERIAN_BODY_19 + __NIGERIAN_BODY_20 + __NIGERIAN_BODY_21
+ __NIGERIAN_BODY_22 + __NIGERIAN_BODY_25 + __NIGERIAN_BODY_26 + __NIGERIAN_BODY_27 + __NIGERIAN_BODY_28
+ __NIGERIAN_BODY_29 + __NIGERIAN_BODY_30 + __NIGERIAN_BODY_31 + __NIGERIAN_BODY_32 + __NIGERIAN_BODY_33
+ __NIGERIAN_BODY_34 + __NIGERIAN_BODY_35 + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIGERIAN_BODY_39
+ __NIGERIAN_BODY_40 + __NIGERIAN_BODY_41 + __NIGERIAN_BODY_42 + __NIGERIAN_BODY_43 + __NIGERIAN_BODY_44
+ __NIGERIAN_BODY_45 + __NIGERIAN_BODY_46 + __T_FRAUD_92 + __T_FRAUD_110 + __T_FRAUD_2 + __T_FRAUD_102
+ __T_FRAUD_144 + __T_FRAUD_235 + __T_FRAUD_258 + __T_FRAUD_113 + __T_FRAUD_63 + __T_FRAUD_44
+ __T_FRAUD_52 + __T_FRAUD_81 + __T_FRAUD_58 + __T_FRAUD_259 + __T_FRAUD_149 + __T_FRAUD_51
+ __T_FRAUD_236 + __T_FRAUD_249 + __T_FRAUD_125 + __T_FRAUD_197 + __T_FRAUD_56 + __T_FRAUD_252
+ __T_FRAUD_132 + __T_FRAUD_227 + __T_FRAUD_100 + __T_FRAUD_26 + __T_FRAUD_53 + __T_FRAUD_88
+ __T_FRAUD_16 + __T_FRAUD_59 + __T_FRAUD_136 + __T_FRAUD_240 + __T_FRAUD_157 + __T_FRAUD_46
+ __T_FRAUD_133 + __T_FRAUD_11 + __T_FRAUD_228 + __T_FRAUD_128 + __T_FRAUD_120 + __T_FRAUD_114
+ __T_FRAUD_142 + __T_FRAUD_94 + __T_FRAUD_146 + __T_FRAUD_96 + __T_FRAUD_41 + __T_FRAUD_77
+ __T_FRAUD_216 + __T_FRAUD_74 + __T_FRAUD_137 + __T_FRAUD_82 + __T_FRAUD_251 + __T_FRAUD_162
+ __T_FRAUD_19 + __T_FRAUD_254 + __T_FRAUD_241 + __T_FRAUD_35 + __T_FRAUD_217 + __T_FRAUD_221
+ __T_FRAUD_57 + __T_FRAUD_124 + __T_FRAUD_60 + __T_FRAUD_105 + __T_FRAUD_18 + __T_FRAUD_80
+ __T_FRAUD_42 + __T_FRAUD_67 + __T_FRAUD_31 + __T_FRAUD_115 + __T_FRAUD_3 + __T_FRAUD_220
) > 1
+meta T_NIGERIAN_BODY_2A	( __NIGERIAN_BODY_1 + __NIGERIAN_BODY_2 + __NIGERIAN_BODY_3 + __NIGERIAN_BODY_5
+ __NIGERIAN_BODY_6 + __NIGERIAN_BODY_7 + __NIGERIAN_BODY_8 + __NIGERIAN_BODY_9 + __NIGERIAN_BODY_10
+ __NIGERIAN_BODY_11 + __NIGERIAN_BODY_12 + __NIGERIAN_BODY_13 + __NIGERIAN_BODY_14 + __NIGERIAN_BODY_16
+ __NIGERIAN_BODY_17 + __NIGERIAN_BODY_18 + __NIGERIAN_BODY_19 + __NIGERIAN_BODY_20 + __NIGERIAN_BODY_21
+ __NIGERIAN_BODY_22 + __NIGERIAN_BODY_25 + __NIGERIAN_BODY_26 + __NIGERIAN_BODY_27 + __NIGERIAN_BODY_28
+ __NIGERIAN_BODY_29 + __NIGERIAN_BODY_30 + __NIGERIAN_BODY_31 + __NIGERIAN_BODY_32 + __NIGERIAN_BODY_33
+ __NIGERIAN_BODY_34 + __NIGERIAN_BODY_35 + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIGERIAN_BODY_39
+ __NIGERIAN_BODY_40 + __NIGERIAN_BODY_41 + __NIGERIAN_BODY_42 + __NIGERIAN_BODY_43 + __NIGERIAN_BODY_44
+ __NIGERIAN_BODY_45 + __NIGERIAN_BODY_46 + __T_FRAUD_92 + __T_FRAUD_110 + __T_FRAUD_2 + __T_FRAUD_102
+ __T_FRAUD_144 + __T_FRAUD_235 + __T_FRAUD_258 + __T_FRAUD_113 + __T_FRAUD_63 + __T_FRAUD_44
+ __T_FRAUD_52 + __T_FRAUD_81 + __T_FRAUD_58 + __T_FRAUD_259 + __T_FRAUD_149 + __T_FRAUD_51
+ __T_FRAUD_236 + __T_FRAUD_249 + __T_FRAUD_125 + __T_FRAUD_197 + __T_FRAUD_56 + __T_FRAUD_252
+ __T_FRAUD_132 + __T_FRAUD_227 + __T_FRAUD_100 + __T_FRAUD_26 + __T_FRAUD_53 + __T_FRAUD_88
+ __T_FRAUD_16 + __T_FRAUD_59 + __T_FRAUD_136 + __T_FRAUD_240 + __T_FRAUD_157 + __T_FRAUD_46
+ __T_FRAUD_133 + __T_FRAUD_11 + __T_FRAUD_228 + __T_FRAUD_128 + __T_FRAUD_120 + __T_FRAUD_114
+ __T_FRAUD_142 + __T_FRAUD_94 + __T_FRAUD_146 + __T_FRAUD_96 + __T_FRAUD_41 + __T_FRAUD_77
+ __T_FRAUD_216 + __T_FRAUD_74 + __T_FRAUD_137 + __T_FRAUD_82 + __T_FRAUD_251 + __T_FRAUD_162
+ __T_FRAUD_19 + __T_FRAUD_254 + __T_FRAUD_241 + __T_FRAUD_35 + __T_FRAUD_217 + __T_FRAUD_221
+ __T_FRAUD_57 + __T_FRAUD_124 + __T_FRAUD_60 + __T_FRAUD_105 + __T_FRAUD_18 + __T_FRAUD_80
+ __T_FRAUD_42 + __T_FRAUD_67 + __T_FRAUD_31 + __T_FRAUD_115 + __T_FRAUD_3 + __T_FRAUD_220
) > 2
+meta T_NIGERIAN_BODY_3A	( __NIGERIAN_BODY_1 + __NIGERIAN_BODY_2 + __NIGERIAN_BODY_3 + __NIGERIAN_BODY_5
+ __NIGERIAN_BODY_6 + __NIGERIAN_BODY_7 + __NIGERIAN_BODY_8 + __NIGERIAN_BODY_9 + __NIGERIAN_BODY_10
+ __NIGERIAN_BODY_11 + __NIGERIAN_BODY_12 + __NIGERIAN_BODY_13 + __NIGERIAN_BODY_14 + __NIGERIAN_BODY_16
+ __NIGERIAN_BODY_17 + __NIGERIAN_BODY_18 + __NIGERIAN_BODY_19 + __NIGERIAN_BODY_20 + __NIGERIAN_BODY_21
+ __NIGERIAN_BODY_22 + __NIGERIAN_BODY_25 + __NIGERIAN_BODY_26 + __NIGERIAN_BODY_27 + __NIGERIAN_BODY_28
+ __NIGERIAN_BODY_29 + __NIGERIAN_BODY_30 + __NIGERIAN_BODY_31 + __NIGERIAN_BODY_32 + __NIGERIAN_BODY_33
+ __NIGERIAN_BODY_34 + __NIGERIAN_BODY_35 + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIGERIAN_BODY_39
+ __NIGERIAN_BODY_40 + __NIGERIAN_BODY_41 + __NIGERIAN_BODY_42 + __NIGERIAN_BODY_43 + __NIGERIAN_BODY_44
+ __NIGERIAN_BODY_45 + __NIGERIAN_BODY_46 + __T_FRAUD_92 + __T_FRAUD_110 + __T_FRAUD_2 + __T_FRAUD_102
+ __T_FRAUD_144 + __T_FRAUD_235 + __T_FRAUD_258 + __T_FRAUD_113 + __T_FRAUD_63 + __T_FRAUD_44
+ __T_FRAUD_52 + __T_FRAUD_81 + __T_FRAUD_58 + __T_FRAUD_259 + __T_FRAUD_149 + __T_FRAUD_51
+ __T_FRAUD_236 + __T_FRAUD_249 + __T_FRAUD_125 + __T_FRAUD_197 + __T_FRAUD_56 + __T_FRAUD_252
+ __T_FRAUD_132 + __T_FRAUD_227 + __T_FRAUD_100 + __T_FRAUD_26 + __T_FRAUD_53 + __T_FRAUD_88
+ __T_FRAUD_16 + __T_FRAUD_59 + __T_FRAUD_136 + __T_FRAUD_240 + __T_FRAUD_157 + __T_FRAUD_46
+ __T_FRAUD_133 + __T_FRAUD_11 + __T_FRAUD_228 + __T_FRAUD_128 + __T_FRAUD_120 + __T_FRAUD_114
+ __T_FRAUD_142 + __T_FRAUD_94 + __T_FRAUD_146 + __T_FRAUD_96 + __T_FRAUD_41 + __T_FRAUD_77
+ __T_FRAUD_216 + __T_FRAUD_74 + __T_FRAUD_137 + __T_FRAUD_82 + __T_FRAUD_251 + __T_FRAUD_162
+ __T_FRAUD_19 + __T_FRAUD_254 + __T_FRAUD_241 + __T_FRAUD_35 + __T_FRAUD_217 + __T_FRAUD_221
+ __T_FRAUD_57 + __T_FRAUD_124 + __T_FRAUD_60 + __T_FRAUD_105 + __T_FRAUD_18 + __T_FRAUD_80
+ __T_FRAUD_42 + __T_FRAUD_67 + __T_FRAUD_31 + __T_FRAUD_115 + __T_FRAUD_3 + __T_FRAUD_220
) > 3
+meta T_NIGERIAN_BODY_4A	( __NIGERIAN_BODY_1 + __NIGERIAN_BODY_2 + __NIGERIAN_BODY_3 + __NIGERIAN_BODY_5
+ __NIGERIAN_BODY_6 + __NIGERIAN_BODY_7 + __NIGERIAN_BODY_8 + __NIGERIAN_BODY_9 + __NIGERIAN_BODY_10
+ __NIGERIAN_BODY_11 + __NIGERIAN_BODY_12 + __NIGERIAN_BODY_13 + __NIGERIAN_BODY_14 + __NIGERIAN_BODY_16
+ __NIGERIAN_BODY_17 + __NIGERIAN_BODY_18 + __NIGERIAN_BODY_19 + __NIGERIAN_BODY_20 + __NIGERIAN_BODY_21
+ __NIGERIAN_BODY_22 + __NIGERIAN_BODY_25 + __NIGERIAN_BODY_26 + __NIGERIAN_BODY_27 + __NIGERIAN_BODY_28
+ __NIGERIAN_BODY_29 + __NIGERIAN_BODY_30 + __NIGERIAN_BODY_31 + __NIGERIAN_BODY_32 + __NIGERIAN_BODY_33
+ __NIGERIAN_BODY_34 + __NIGERIAN_BODY_35 + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIGERIAN_BODY_39
+ __NIGERIAN_BODY_40 + __NIGERIAN_BODY_41 + __NIGERIAN_BODY_42 + __NIGERIAN_BODY_43 + __NIGERIAN_BODY_44
+ __NIGERIAN_BODY_45 + __NIGERIAN_BODY_46 + __T_FRAUD_92 + __T_FRAUD_110 + __T_FRAUD_2 + __T_FRAUD_102
+ __T_FRAUD_144 + __T_FRAUD_235 + __T_FRAUD_258 + __T_FRAUD_113 + __T_FRAUD_63 + __T_FRAUD_44
+ __T_FRAUD_52 + __T_FRAUD_81 + __T_FRAUD_58 + __T_FRAUD_259 + __T_FRAUD_149 + __T_FRAUD_51
+ __T_FRAUD_236 + __T_FRAUD_249 + __T_FRAUD_125 + __T_FRAUD_197 + __T_FRAUD_56 + __T_FRAUD_252
+ __T_FRAUD_132 + __T_FRAUD_227 + __T_FRAUD_100 + __T_FRAUD_26 + __T_FRAUD_53 + __T_FRAUD_88
+ __T_FRAUD_16 + __T_FRAUD_59 + __T_FRAUD_136 + __T_FRAUD_240 + __T_FRAUD_157 + __T_FRAUD_46
+ __T_FRAUD_133 + __T_FRAUD_11 + __T_FRAUD_228 + __T_FRAUD_128 + __T_FRAUD_120 + __T_FRAUD_114
+ __T_FRAUD_142 + __T_FRAUD_94 + __T_FRAUD_146 + __T_FRAUD_96 + __T_FRAUD_41 + __T_FRAUD_77
+ __T_FRAUD_216 + __T_FRAUD_74 + __T_FRAUD_137 + __T_FRAUD_82 + __T_FRAUD_251 + __T_FRAUD_162
+ __T_FRAUD_19 + __T_FRAUD_254 + __T_FRAUD_241 + __T_FRAUD_35 + __T_FRAUD_217 + __T_FRAUD_221
+ __T_FRAUD_57 + __T_FRAUD_124 + __T_FRAUD_60 + __T_FRAUD_105 + __T_FRAUD_18 + __T_FRAUD_80
+ __T_FRAUD_42 + __T_FRAUD_67 + __T_FRAUD_31 + __T_FRAUD_115 + __T_FRAUD_3 + __T_FRAUD_220
) > 4
 
-# Test rules for 419 & lottery fraud, a bit bloated at the moment
-body __T_FRAUD_BADTHINGS /(?:all funds will be returned|ass?ylum|assassinate|(?:auto|boat|car|plane|train).{1,7}(?:crash|accident|disaster|wreck)|before
they both died|brutal acts|cancer|coup attempt|disease|due to the current|\bexile\b|\bfle[ed]\b|have
been frozen|impeach|\bkilled|land dispute|murder|over-invoice|political crisis|poisoned (?:to
death )?by|relocate|since the demise|\bslay\b)/i
-body __T_FRAUD_DPTCOMPNY /(?:allied irish bank|amsterdam clearing office|(?:bank|government)
(of )?nigeria|charity organization|commerce world directory|correspondent branch|department
of mineral resources and energy|diamond safari|embassy|finance and accounts director of inec|foreign
contract tenders committee|global oil corporation|international (?:bank|court of justice)|mainland
investment trust bank|mining corporation|ministry of (?:oil (?:and )?mini?eral|organisation
worldwide|petroleum and natural resources|urban and rural development)|nigerian national petroleum|prize
award dept|(?:finance|holding|securit(?:ies|y)) (?:company|firm|storage house)|sierra leone
mining)/i
-body __T_FRAUD_INTRO /(?:(?:may i first|to) introduce my ?self|contact address|i am contacting
you)/i
-body __T_FRAUD_REPLY /(?:confidential email|my secure email address|reply (?:me only|urgent)|(?:immediate|swift|urgent)
(?:assist|reply|response))/i
-body __T_FRAUD_LOC /\s(?:abidjan|algeria|angola|benin republic|bangladesh|botswana|c.te .{0,2}ivoire|congo|dubai|gabon|ghana|kogi|lagos|liberia|libya|malaysia|nigerian?|phill?ipp?ine.|qatar|republic.du.benin|republic.of.sahara|saharawi|senegal|sierra.leone|solomon
islands|south.africa|togo(?:lese)?|u\.a\.e\.i\.|zimbabwe)\s/i
-body __T_FRAUD_MISC /(?:a native of|as the beneficiary|compliments? of the season|confidentiality
and professionalism|eagerly await|of (?:the|my) late|on information gathered about you|(?:relate|share)
my testimony|remains unclaimed|several attempts have been made with out success|very big risk|you
and your company|youre? country)/i
-body __T_FRAUD_MONEY /(?:abandoned sum|(?:huge|substantial) amount of m[o0]ney|(?:transfer
this fund|money transfer|transfer money)|(?:will share the money|your share.{1,10}(?:shall|sum|total|money|funds))|assets
have been confiscated|be paid to you|claim a sum of|(?:claim|concerning) (?:the|this) money|family
asset|foreign (?:offshore )?(?:bank|account)|how the money will be split|kick.{0,2}back|million
usd|offer you a generous compensation|personal bank account|remains unclaimed|secure.{1,10}funds|the
total sum|transferring (of|the) funds?|us.{1,9}million|win cash|you are.{0,8}winner|your (?:pr[i1]ze|share
shall be))/i
-body __T_FRAUD_PAPERWORK /(?:all necessary legal documents|covering documents|international
passport|legal official protocol|letter of authority|Next of Kin Payment Application Form|provide
immediately|writing this letter to solicit|vital documents)/i
-body __T_FRAUD_VIPS /(?:(?:white|black|zimbabwean) farmers?|auditor general|(?:former|late)
(?:president of|.{0,20}minister)|head of state|nigerian gov|president of (the )?phillipine|principal
advocate)/i
-body __T_FRAUD_FOREIGN /(?:(?:who was a|as a|an? honest|you being a|to any) foreigner|foreign
(?:business partner|customer))/i
-body __T_FRAUD_BARRISTR /(?:accredited agent|adviser to late|barrister|fiduciary agent|i
am a private investigator|personal attorney to|relationship officer|solicit[oe]r)/i
-body __T_FRAUD_FAMILY /(?:my late (?:husband|wife|brother|uncle|aunt|father|mother) (?:was|is|had|has)|locate(?:
.{1,20})? extended relative|next of kin|the (?:eldest|oldest|youngest|first) son|the (?:wife|heir)
(?:to|of))/i
-body __T_FRAUD_RELIGION /(?:almighty god|as a born again christian|as a minister|call a prayer
line|calvary greeting|eternity is a long t[io]me|fear of god|g[ai]ve.{1,15}life to christ|glorify
god'?s name|god (?:has|have|will) forgiven? me|god gives .{1,10}second chance|god want(?:ed|s)?
it|goodday pastor|hear from god|if you\'?re? not saved|in the (?:lord'?s name|name of (?:our|the)
lord)|jesus is yours|money.{1,15}give.{1,15}ministry|new christian convert|pray daily|read(?:ing)?
(?:the|your) bible|sinful habits|spend (?:.{1,20})in hell|the wish of god|true christian|wealth
to god|your ministry)/i
-body __T_FRAUD_TINHORN /\s(?:abacha|abubakar|ajobola|anigala|arap moi|aziz|bubenik|ewaen|gebarel|gezi|guei|gumbeze|ibiam|kabbahs|kabila|kamara|kazeem|margai|massaquoi|mbeki|mobutu|momoh|mubune|mugabe|obasanjo|okafor|olonga|olumuyiwa|omo(?:nigho|rodion)|rilwanu|savimbi|seko|tarlor|taylor|zaid|zwinginna)\s/i
-body __T_FRAUD_TRUST /(?:(?:total(?:ly)?|very|strict(?:ly|est)|high(?:est|ly)?|intuitive|utmost)
confiden(?:ce|t(?:ai|ia)l)|code of conduct|confidential (?:communications|telephone numbers)|(?:honest|honourable)
(?:cooperation|partnership)|keep this matter|mutual understanding|reliable person|secrecy
and confidentiality|secretly deposited|smooth transaction|to (?:assure you|redeem)|(?:the
importance of|utmost) secrecy|transaction is .{1,15} risk free.|transparent honesty|trust
(?:and|&) confidentiality|very honest person|your assurance)/i
-body __T_FRAUD_AGREE /(?:(?:(?:negotiate|reasonable|acc?or?ding|certain|agg?ree).{1,20}percentage|percentage.{1,10}(?:indicat|previous|involved)|favou?rable
response|your percentage will)|my proposal is acceptable|acceptable by you|purposes within
your country|total acceptance and commitment)/i
-body __T_FRAUD_LOTTERY /(?:(?:international|luckyday|overseas stake|promo|world) lott(?:o|ery)|lott(?:o|ery)
(?:co,?ordinator|international)|intl loteria|prize transfer agent|scientific game promo|award
notification)/i
-body __T_FRAUD_PROPOSE /(?:urgent and(?: very)? (?:profitable|confidential) business (?:proposal|proposition)|(?:financial|confiden(?:tial|ce)|safe|mutual|secret|success|risk-?free|details|business).{1,30}\btransaction|transaction\b.{1,30}\b(?:magnitude|diplomatic|strict|absolute|secret|confiden(?:tial|ce)|guarantee))/i
-body __T_FRAUD_CONTACT /(?:your full names?,?(?:and|&)? full contact address|your(?:
private)? (?:tele)?phone (?:and|&) fax numbers?|send .{1,30}\byour telefax numbers?)/i
-body __T_FRAUD_FUNWORDS /(?:actualization|arising contigencies|bequest|discursions|magnanimity|modalities|non
response|numbered time|(?:should|please) endeavor|receivership)/i
-body __T_FRAUD_LOTTERY2 /(?:attached to ticket number|computer ballot system|drawn  ?from.{0,10}\d{2,3},?\d{3}|second
categories)/i
-body __T_FRAUD_REFNUM /reff?\.?(?: number|no)? ?\:/i
-meta     T_FRAUD_X3 ((__T_FRAUD_BADTHINGS + __T_FRAUD_DPTCOMPNY + __T_FRAUD_INTRO + __T_FRAUD_LOC
+ __T_FRAUD_MONEY + __T_FRAUD_PAPERWORK + __T_FRAUD_VIPS + __T_FRAUD_RELIGION + __T_FRAUD_TINHORN
+ __T_FRAUD_TRUST + __T_FRAUD_AGREE + __T_FRAUD_REPLY + __T_FRAUD_FAMILY + __T_FRAUD_LOTTERY
+ __T_FRAUD_BARRISTR + __T_FRAUD_FOREIGN + __T_FRAUD_PROPOSE + __T_FRAUD_CONTACT + __T_FRAUD_FUNWORDS
+ __T_FRAUD_LOTTERY2 + __T_FRAUD_REFNUM) > 2)
-describe T_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam
-meta     T_FRAUD_X4 ((__T_FRAUD_BADTHINGS + __T_FRAUD_DPTCOMPNY + __T_FRAUD_INTRO + __T_FRAUD_LOC
+ __T_FRAUD_MONEY + __T_FRAUD_PAPERWORK + __T_FRAUD_VIPS + __T_FRAUD_RELIGION + __T_FRAUD_TINHORN
+ __T_FRAUD_TRUST + __T_FRAUD_AGREE + __T_FRAUD_REPLY + __T_FRAUD_FAMILY + __T_FRAUD_LOTTERY
+ __T_FRAUD_BARRISTR + __T_FRAUD_FOREIGN + __T_FRAUD_PROPOSE + __T_FRAUD_CONTACT + __T_FRAUD_FUNWORDS
+ __T_FRAUD_LOTTERY2 + __T_FRAUD_REFNUM) > 3)
-describe T_FRAUD_X4 Matches 4+ phrases commonly used in fraud spam
-meta     T_FRAUD_X5 ((__T_FRAUD_BADTHINGS + __T_FRAUD_DPTCOMPNY + __T_FRAUD_INTRO + __T_FRAUD_LOC
+ __T_FRAUD_MONEY + __T_FRAUD_PAPERWORK + __T_FRAUD_VIPS + __T_FRAUD_RELIGION + __T_FRAUD_TINHORN
+ __T_FRAUD_TRUST + __T_FRAUD_AGREE + __T_FRAUD_REPLY + __T_FRAUD_FAMILY + __T_FRAUD_LOTTERY
+ __T_FRAUD_BARRISTR + __T_FRAUD_FOREIGN + __T_FRAUD_PROPOSE + __T_FRAUD_CONTACT + __T_FRAUD_FUNWORDS
+ __T_FRAUD_LOTTERY2 + __T_FRAUD_REFNUM) > 4)
-describe T_FRAUD_X5 Matches 5+ phrases commonly used in fraud spam
-meta     T_FRAUD_X6 ((__T_FRAUD_BADTHINGS + __T_FRAUD_DPTCOMPNY + __T_FRAUD_INTRO + __T_FRAUD_LOC
+ __T_FRAUD_MONEY + __T_FRAUD_PAPERWORK + __T_FRAUD_VIPS + __T_FRAUD_RELIGION + __T_FRAUD_TINHORN
+ __T_FRAUD_TRUST + __T_FRAUD_AGREE + __T_FRAUD_REPLY + __T_FRAUD_FAMILY + __T_FRAUD_LOTTERY
+ __T_FRAUD_BARRISTR + __T_FRAUD_FOREIGN + __T_FRAUD_PROPOSE + __T_FRAUD_CONTACT + __T_FRAUD_FUNWORDS
+ __T_FRAUD_LOTTERY2 + __T_FRAUD_REFNUM) > 5)
-describe T_FRAUD_X6 Matches 6+ phrases commonly used in fraud spam
 
 # bug 3395
 header    T_YAHOO_MSGID_CAPS          Message-ID =~ /<[A-Z]+\@yahoo.com>/

Mime
View raw message