On Friday 21 March 2008 09:08:51 peter pilsl wrote: > For more than a week now I'm flooded by software-spam > > "leicht zu installierende software" > "sie werden kein besseres softwareshop finden" > "software fuer die guenstigste preise" > "sichere und voellig funktionale software" > usw. usf. >
30_blogspot.cf and 50_software.cf from http://sarah.ibcsolutions.de/~aep/sa/ (credits go to Loren mostly, see previous posts) as well as 70_sare_oem.cf from http://www.rulesemporium.com/rules.htm Content analysis details: (7.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 SOFTWARE_AD BODY: advertising software 0.8 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [123.19.104.245 listed in zen.spamhaus.org] 1.0 URIBL_GREY Contains an URL listed in the URIBL greylist [URIs: geocities.com] 3.0 SOFT_AND_URIGREY contains both an url in the URIBL greylist or blogpsot and software advertisement 0.8 SARE_OEM_PRODS_1 SARE_OEM_PRODS_1 0.9 SARE_OEM_PRODS_FEW SARE_OEM_PRODS_FEW 0.4 SARE_PRODUCTS_02 SARE_PRODUCTS_02 adjust the scores to your needs -- best regards/Mit freundlichen Grüßen Arvid Ephraim Picciani
