spamassassin-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jhar...@apache.org
Subject svn commit: r1083523 - in /spamassassin/trunk/rulesrc/sandbox/jhardin: 20_fillform.cf 20_lotsa_money.cf 20_misc_testing.cf 20_tbird_image_spam.cf
Date Sun, 20 Mar 2011 17:54:56 GMT
Author: jhardin
Date: Sun Mar 20 17:54:55 2011
New Revision: 1083523

URL: http://svn.apache.org/viewvc?rev=1083523&view=rev
Log:
More FP avoidance; disable PILL_PRICE rules until sa-compile fixed; add some Spanish-language
variants to lotsa_money

Modified:
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
    spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf?rev=1083523&r1=1083522&r2=1083523&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf Sun Mar 20 17:54:55 2011
@@ -57,7 +57,7 @@ ifplugin Mail::SpamAssassin::Plugin::Rep
   replace_rules   __FILL_THIS_FORM_LONG1
   replace_rules   __FILL_THIS_FORM_LONG2
   meta     __FILL_THIS_FORM_LONG          __FILL_THIS_FORM_LONG1 || __FILL_THIS_FORM_LONG2
-  meta     FILL_THIS_FORM_LONG            __FILL_THIS_FORM_LONG && !__VIA_ML &&
!__DOS_HAS_LIST_UNSUB && !__COMMENT_EXISTS && !__THREADED
+  meta     FILL_THIS_FORM_LONG            __FILL_THIS_FORM_LONG && !__VIA_ML &&
!__DOS_HAS_LIST_UNSUB && !__THREADED
   describe FILL_THIS_FORM_LONG            Fill in a form with personal information
   score    FILL_THIS_FORM_LONG            1.00
 
@@ -72,7 +72,7 @@ ifplugin Mail::SpamAssassin::Plugin::Rep
   # 5+ fields in either format
   # For easy use in metas
   meta     __FILL_THIS_FORM               (__FILL_THIS_FORM_LONG || __FILL_THIS_FORM_PARTIAL
> 4 || __FILL_THIS_FORM_PARTIAL_RAW > 4)
-  meta     FILL_THIS_FORM                 __FILL_THIS_FORM && !__COMMENT_EXISTS &&
!__THREADED && !__FB_TOUR && !__VIA_ML
+  meta     FILL_THIS_FORM                 __FILL_THIS_FORM && !__THREADED &&
!__FB_TOUR && !__VIA_ML
   describe FILL_THIS_FORM                 Fill in a form with personal information
   #score    FILL_THIS_FORM                 1.00
   tflags   FILL_THIS_FORM                 publish

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf?rev=1083523&r1=1083522&r2=1083523&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_lotsa_money.cf Sun Mar 20 17:54:55 2011
@@ -50,14 +50,15 @@ score    MONEY_FORM_SHORT  0.5
 #describe MONEY_ACCOUNT    Lots of money to your account
 
 
-body     __LOTTO_WINNINGS   /(?:claim|process(?:ing)?|transfert?(?:\s\w+)?|virement|zahlung|reivindicar)\s(?:(?:your|of|the|this|de|ihrer|seu)\s)+(?:win+ings?|money|(?:cash\s)?prize|award|f[ou]nds?|grant|gewinne|premio)/i
+body     __LOTTO_WINNINGS   /(?:claim|process(?:ing)?|transfert?(?:\s\w+)?|redeem|virement|zahlung|reivindicar|demandar)\s(?:(?:[a-z]{1,5}\s)?(?:your|of|the|this|de|ihrer|seu|tu)\s)+(?:win+ings?|money|(?:cash\s)?prize|award|f[ou]nds?|grant|gewinne|premio)/i
 
 body     __LOTTO_WIN_01     /\bwin+ing\s(?:prize|number|notification|draw|check|cheque|details|information|payment)/i
 
 body     __YOU_WON_01    /\byou(?:r|'re|'ve|'ll|\shave|\sdid)?\s(?:e-?mail\s)?(?:\w+\s){0,2}(?:a\s)?w[io]n+(?:er|ing)?(?!'t)\b/i
 body     __YOU_WON_02    /\bw[io]n\s(?:(?:for|by)\s)?your?\b/i
 body     __YOU_WON_03    /\b(?:your?|win+ing|win+ers?|beneficiaries|participants?|individuals?|address(?:es)?)(?:\s[-a-z\s]{4,40}?)?\s(?:w(?:ere|as)|ha(?:ve|s)
be(?:en)?)\s(?:(?:randomly|raffly)\s(?:selected|cho+sen|cho+sing|picked)|(?:selected|cho+sen|cho+sing|picked)\s(?:[a-z\s]{2,40}?\srandom|randomly|online|lottery|computer\s(?:ballot|wahlgang)))/i

-meta     __YOU_WON       __YOU_WON_01 || __YOU_WON_02 || __YOU_WON_03
+body     __HAS_WON_01    /\bque ha ganado\b/i
+meta     __YOU_WON       __YOU_WON_01 || __YOU_WON_02 || __YOU_WON_03 || __HAS_WON_01
 
 body     LOTTO_AGENT      /\b(?:claim(?:s|ing)?(?:\sprocessing)?|fiducia\w+|reimbursement|(?:prize|international|intl|foreign|win+ing)(?:[\s,.]+(?:rem+it+ance|settlement|payment|award|transfer))+|payment|immunity|grants?)\s?(?:agent|manager|officer|secretary|director|mgr\b)/i
 describe LOTTO_AGENT      Claims Agent
@@ -83,7 +84,7 @@ score    LOTTO_AGENT_RPLY 0.50
 # body    HK_LOTTO                /(?:(?:(?:inter)?national|foundation|mercato|univers|euro
million|e-?mail|euro-pw|bill gates|swiss) ?lo(?:tto|ttery|terie)|coca.?cola games|mega jackpot|staatsloterij|ukonline
game promo|loto prestige|(?:fran.aise|e-?mail) sweepstakes|loterie (?:internationale|cristal|am.ricaine|coca.?cola|euromillions|bill
gates)|(?:computer|internet) ballot|foundation internationale billgateslottery award|(?:promotional|online)
draws?|lottery (?:fiduciary|department))/i
 # body            __KAM_LOTTO5    /(freelotto group|Royal Heritage Lottery|UK National (Online)?
Lottery|U\.?K\.? Grand Promotions|Lottery Department UK|Euromillion Loteria|Luckyday International
Lottery|International Lottery)/is
 
-body     __LOTTO_ADMITS_1 /\b(?:on-?line|e-?mail|ballot|(?:inter)?national|state|(?:UK|euro)[-
]?(?:mil+ions?|PW)|Canada|Microsoft|MSN|internet|mega|jackpot|Royal Heritage|foundation|mercato|univers|staatsloterij|bill\s?gates|swiss|this)(?:\s\w+)?\s?(?:lot(?:to|tery|eri[ea])|sweepstake|promotion|promocao)/i
+body     __LOTTO_ADMITS_1 /\b(?:on-?line|e-?mail|ballot|(?:inter)?national|state|(?:UK|euro)[-
]?(?:mil+ions?|PW)|Canada|Microsoft|MSN|internet|mega|jackpot|Royal Heritage|foundation|mercato|univers|staatsloterij|bill\s?gates|swiss|this|esta)(?:\s\w+)?\s?(?:lot(?:to|tery|eri[ea])|sweepstake|promotion|promocao|promocion)/i
 body     __LOTTO_ADMITS_2 /\b(?:free)?(?:lot(?:to|tery|erie)|sweepstakes)\s(?:(?:inter)?na[tz]ional|department|bureau|group|award)/i
 uri      __LOTTO_ADMITS_3 /lottery/i
 meta     __LOTTO_ADMITS     __LOTTO_ADMITS_1 || __LOTTO_ADMITS_2 || __LOTTO_ADMITS_3
@@ -147,7 +148,7 @@ body     __NOT_DEAD_YET   /\bwill\sinher
 body     __AM_DYING       /\bam\s(?:\S+\s)?dying\b/i
 body     __I_WILL_YOU     /\bwill(?:ed)?\s(?:[a-z\s]{0,20}\s(?:fortune|money)\s)?to\syou\b/i
 body     __NEXT_OF_KIN    /\bnext[-\s]of[-\s]kin\b/i
-body     __EX_CUSTOMER    /\b(?:(?:dead|deceased|late|verstorbenen)\s(?:[ck]lient|customer|ac+ount|invest[eo]r|beneficiary|mr\.|kunde|engr?\.?)|titulaire\sdu\scompte\sest\s(?:d[\xe9]c[\xe9]d[\xe9]|d[\xc3][\xa9]c[\xc3][\xa9]d[\xc3][\xa9])|invest[eo]r\sdied|[\xe9]tranger\sd[\xe9]c[\xe9]d[\xe9])/i
+body     __EX_CUSTOMER    /\b(?:(?:dead|deceased|late|verstorbenen)\s(?:[ck]lient|customer|ac+ount|invest[eo]r|beneficiary|mr\.|kunde|engr?\.?)|titulaire\sdu\scompte\sest\s(?:d[\xe9]c[\xe9]d[\xe9]|d[\xc3][\xa9]c[\xc3][\xa9]d[\xc3][\xa9])|invest[eo]r\sdied|[\xe9]tranger\sd[\xe9]c[\xe9]d[\xe9]|(?:[ck]lient|customer|ac+ount|invest[eo]r|beneficiary|mr\.|kunde|engr?\.?)\s(?:[a-z]{1,10}\s)?(?:dead|deceased|verstorbenen))/i
 body     __DECEASED       /\b(?:the|my|der|du|le)\s(?:deceased|late|verstorbenen|d[\xe9]funt|d[\xc3][\xa9]nt)\b/i
 body     __SURVIVORS      /\b(?:widow|son|daughter|husband|wife|brother|sister|attorney)\s(?:of|to)\s(?:the\s)?late\s\w+\b/i
 body     __DEAD_PARENT    /\bmy\s(?:deceased|dead)\s(?:father|mother)/i
@@ -198,7 +199,7 @@ body     __SUM_OF_FUND      /\b(?:sum|re
 body     __BENEFICIARY    /\bb(?:[e\xe9]n[e\xe9]|[\xc3][\xa9]n[\xc3][\xa9])fi(?:c|sh)i?ai?r(?:y|ies|es?)/i
 body     __DIPLOMATIC     /\bdiplomatic\b/i
 body     __FEES           /\b(?:security|safe\w*|courier|registration|pay|paid|up-?front|processing|delivery|transfer)[\s\w]{0,15}\s(?:fee|charge)s?\b/i

-body     __LUCKY_WINNER   /\b(?:lucky|gl.cklich(?:en)?)\s(?:ge)?win+ers?\b/i
+body     __LUCKY_WINNER   /\b(?:lucky|gl.cklich(?:en)?|afortunados)\s(?:(?:ge)?win+ers?|ganador(?:es)?)\b/i
 body     __YOUR_FUND      /\b(?:your|ihr)\s(?:unpaid\s|win+ing\s|ap+roved\s|foreign\s|overdue\s|outstanding\s|nicht\sausbezahlten\s){0,3}(?:fund|payment|geld)\b/i
 body     __NIGERIA        /\bnigeria\b/i
 body     __IVORY_COAST    /\b(?:Cote\s?D.Ivoire|Ivory\s?Coast)\b/i
@@ -211,7 +212,7 @@ body     __CONTACT_YOU    /\b(?:contact(
 body     __FOUND_YOU      /\b(?:I|we)\sfound\syour?\b/i
 body     __INVEST_MONEY   /\binvest\sthis\smoney\b/i
 body     __INVEST_COUNTRY /\binvest\sin\syour?\scountry\b/i
-body     __RANDOM_PICK    /\b(?:random(?:ly)?\s(?:\w+\s)?(?:select(?:ion|ed)|pick(?:ed)?|computer)|(?:select|pick)ed\s(?:at\s)?random(?:ly)?|esco(?:g|lh)idos
aleatoriamente)\b/i
+body     __RANDOM_PICK    /\b(?:random(?:ly)?\s(?:\w+\s)?(?:select(?:ion|ed)|pick(?:ed)?|computer)|(?:select|pick)ed\s(?:at\s)?random(?:ly)?|(?:esco(?:g|lh)idos|seleccion)
(?:aleatoria(?:mente)?|al azar))\b/i
 body     __CHARITY        /\bcharit(?:y|[ai]ble)\b/i
 
 body     __UC_MONEY       /\bMONEY\b/

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1083523&r1=1083522&r2=1083523&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sun Mar 20 17:54:55 2011
@@ -571,14 +571,16 @@ header      ART_NAMES_ORG          Recei
 score       ART_NAMES_ORG          4.0
 describe    ART_NAMES_ORG          Arthur Simmons - registrar spammer extraordinaire
 
-body        __PILL_PRICE_1         m;\$?[\d\s.]{3,8}(?:/|per|each)\s?(?:pill|tablet|cap(?:sule|let));i
-body        __PILL_PRICE_2         /(?:pill|tablet|cap(?:sule|let))s\s\$?[\d\s.]{3,8}/i
-body        __PILL_PRICE_3         /free\s(?:pill|tablet|cap(?:sule|let))s/i
-tflags      __PILL_PRICE_1         multiple
-tflags      __PILL_PRICE_2         multiple
-tflags      __PILL_PRICE_3         multiple
-meta        MANY_PILL_PRICE        (__PILL_PRICE_1 + __PILL_PRICE_2 + __PILL_PRICE_3) >
2
-describe    MANY_PILL_PRICE        Prices for pills
+# Causes infinite loops if compiled on ia32 (users list 2011-03-20)
+# Disabled until that is resolved
+# body        __PILL_PRICE_1         m;\$?[\d\s.]{3,8}(?:/|per|each)\s?(?:pill|tablet|cap(?:sule|let));i
+# body        __PILL_PRICE_2         /(?:pill|tablet|cap(?:sule|let))s\s\$?[\d\s.]{3,8}/i
+# body        __PILL_PRICE_3         /free\s(?:pill|tablet|cap(?:sule|let))s/i
+# tflags      __PILL_PRICE_1         multiple
+# tflags      __PILL_PRICE_2         multiple
+# tflags      __PILL_PRICE_3         multiple
+# meta        MANY_PILL_PRICE        (__PILL_PRICE_1 + __PILL_PRICE_2 + __PILL_PRICE_3) >
2
+# describe    MANY_PILL_PRICE        Prices for pills
 
 # More from Ned Slider
 meta        NSL_FREEMAIL_SUBJ      (FREEMAIL_FROM && MISSING_SUBJECT)
@@ -613,19 +615,35 @@ body        __FOR_SALE_OBO            /\
 tflags      __FOR_SALE_OBO            multiple
 meta        __FOR_SALE_OBO_MANY       __FOR_SALE_OBO > 5
 
-body        __FOR_SALE_PRC_1K         /\bprice:? \$\d,\d\d\d/i
+body        __FOR_SALE_PRC_1K         /\bprice:? \$\d,?\d\d\d[.\s]/i
 tflags      __FOR_SALE_PRC_1K         multiple
-meta        __FOR_SALE_PRC_1K_MANY    __FOR_SALE_PRC_1K > 5
+meta        __FOR_SALE_PRC_1K_MANY    __FOR_SALE_PRC_1K > 10
 
 body        __FOR_SALE_PRC_10K        /\bprice:? \$\d\d,\d\d\d/i
 tflags      __FOR_SALE_PRC_10K        multiple
-meta        __FOR_SALE_PRC_10K_MANY   __FOR_SALE_PRC_10K > 5
+meta        __FOR_SALE_PRC_10K_MANY   __FOR_SALE_PRC_10K > 10
 
-meta        __FOR_SALE_PRC_MANY       (__FOR_SALE_PRC_1K + __FOR_SALE_PRC_10K) > 10
+body        __FOR_SALE_PRC_100K       /\bprice:? \$\d\d\d,\d\d\d/i
+tflags      __FOR_SALE_PRC_100K       multiple
+meta        __FOR_SALE_PRC_100K_MANY  __FOR_SALE_PRC_100K > 5
+
+meta        __FOR_SALE_PRC_MANY       (__FOR_SALE_PRC_1K + __FOR_SALE_PRC_10K + __FOR_SALE_PRC_100K)
> 20
+
+body        __FOR_SALE_LTP            /00\.? (?:less 10%|LTP)/i
+tflags      __FOR_SALE_LTP            multiple
+meta        __FOR_SALE_LTP_MANY       __FOR_SALE_LTP > 10
+
+body        __FOR_SALE_NET            /00\.? NET/i
+tflags      __FOR_SALE_NET            multiple
+meta        __FOR_SALE_NET_MANY       __FOR_SALE_NET > 10
+
+rawbody     __FOR_SALE_PRC_EOL        /\s\$\d{1,3},\d00(?:\.00)?$/m
+tflags      __FOR_SALE_PRC_EOL        multiple
+meta        __FOR_SALE_PRC_EOL_MANY   __FOR_SALE_PRC_EOL > 10
 
 uri         __URI_MAILTO              /^mailto:/
 tflags      __URI_MAILTO              multiple
-meta        __URI_MAILTO_MANY         __URI_MAILTO > 10
+meta        __URI_MAILTO_MANY         __URI_MAILTO > 15
 
 
 header      REPLYTO_EMPTY          Reply-To =~ /<>/

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf?rev=1083523&r1=1083522&r2=1083523&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_tbird_image_spam.cf Sun Mar 20 17:54:55
2011
@@ -34,7 +34,7 @@ score      TO_NO_BRKTS_HTML_IMG    0.20
 describe   TO_NO_BRKTS_HTML_IMG    To: misformatted and HTML and one image
 
 meta       __TO_NO_BRKTS_HTML_ONLY __TO_NO_ARROWS_R && !__TO_UNDISCLOSED &&
MIME_HTML_ONLY
-meta       TO_NO_BRKTS_HTML_ONLY   __TO_NO_BRKTS_HTML_ONLY && !__MIME_QP &&
!__MSGID_JAVAMAIL && !__HAS_X_MAILER && !__HAS_REPLY_TO && !__CTYPE_CHARSET_QUOTED
&& !__SUBJECT_ENCODED_B64 && !__VIA_ML && !__MSGID_BEFORE_RECEIVED
&& !__MIME_BASE64 && !__RCD_RDNS_MAIL_MESSY && !__COMMENT_EXISTS &&
!LOTS_OF_MONEY
+meta       TO_NO_BRKTS_HTML_ONLY   __TO_NO_BRKTS_HTML_ONLY && !__MIME_QP &&
!__MSGID_JAVAMAIL && !__HAS_X_MAILER && !__HAS_REPLY_TO && !__CTYPE_CHARSET_QUOTED
&& !__SUBJECT_ENCODED_B64 && !__VIA_ML && !__MSGID_BEFORE_RECEIVED
&& !__MIME_BASE64 && !__RCD_RDNS_MAIL_MESSY && !__COMMENT_EXISTS &&
!LOTS_OF_MONEY && !__TAG_EXISTS_CENTER
 score      TO_NO_BRKTS_HTML_ONLY   0.20
 describe   TO_NO_BRKTS_HTML_ONLY   To: misformatted and HTML only
 



Mime
View raw message