I hope that this is the right place to make public some rules that seems
to catch extra spam.

Now my question is: I generate Netscape mail files (very, very like a
Unix mail file) that contains spam that made it past SA. Should I do
anything with it before tossing it out to sea? For instance, could it
help anyone who updates SA rules, etc.?


header FROM_BAR_multex          From =~ /\@multexinvestornetwork\.com/i
score  FROM_BAR_multex          100

header FROM_BAR_giftcert        From =~ /GiftCertificatescom\@/i
score  FROM_BAR_giftcert        100

header FROM_BAR_kong            From =~ /bargainbazaar\@kongmail\.com/i
score  FROM_BAR_kong            100

header FROM_BAR_moneytips       From =~
/\@news\.moneytips-gazette\.com/i
score  FROM_BAR_moneytips       100

header FROM_BAR_hotdeals        From =~ /\@.*hotdailydeal\.com>/i
score  FROM_BAR_hotdeals        100

header FROM_BAR_superbargains   From =~ /\@super-bargains\.com>/i
score  FROM_BAR_superbargains   100

header FROM_BAR_free_dvd        From =~ /free\s*dvd/i
score  FROM_BAR_free_dvd        100

header SBJ_BAR_4_dvd            Subject =~ /\b4\s*dvds?\b/i
score  SBJ_BAR_4_dvd            2.8

body   BODY_BAR_matchcom
/This\s+communication\s+is\s+not\s+from\s+Match\.com\.\s+If\s+you\s+wish\s+to\s+unsubscribe,\s+please\s+follow\s+the\s+instructions\s+below\./o
score  BODY_BAR_matchcom        2.8

header FROM_BAR_elucky          From =~ /eLuckyDay\@/i
score  FROM_BAR_elucky          2.8

header FROM_BAR_fedmarket       From =~ /\@fedmarket.com/i
score  FROM_BAR_fedmarket       2.8

header FROM_BAR_frisbee         From =~ /frisbee\s*offers/i
score  FROM_BAR_frisbee         2.8

header FROM_BAR_ameridebt       From =~ /\bameridebt\b/i
score  FROM_BAR_ameridebt       2.8

header FROM_BAR_dailydeals      From =~ /\bDailyDeals/i
score  FROM_BAR_dailydeals      2.8

body   BODY_BAR_rapevirgin      /Do +you +want +to +rape +a +virgin
+too/i
score  BODY_BAR_rapevirgin      1.5

body   BODY_BAR_realrape        /http:\/\/www\.realrape\.net/i
score  BODY_BAR_realrape        3.5

header FROM_BAR_aptimus         From =~ /\baptimusvaluenetwork\b/i
score  FROM_BAR_aptimus         2.8

header FROM_BAR_emza            From =~ /\@emza\.net\b/i
score  FROM_BAR_emza            2.8

header FROM_BAR_atlas           From =~ /\batlasrewards@\@/i
score  FROM_BAR_atlas           2.8


-------------------------------------------------------
This sf.net email is sponsored by: Jabber - The world's fastest growing 
real-time communications platform! Don't just IM. Build it in! 
http://www.jabber.com/osdn/xim
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to