# This is the right place to customize your installation of SpamAssassin. # # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # ########################################################################### # # rewrite_subject 0 # report_safe 1 # trusted_networks 212.17.35. # SpamAssassin config file for version 2.5x # generated by http://www.yrex.com/spam/spamconfig.php (version 1.01) # modified heavily by M. V. (2003-2004) # How many hits before a message is considered spam. required_hits 5.0 # Whether to change the subject of suspected spam rewrite_subject 1 # Text to prepend to subject if rewrite_subject is used subject_tag [SPAM: _HITS_] # Encapsulate spam in an attachment report_safe 0 # Use terse version of the spam report use_terse_report 0 # Enable the Bayes system use_bayes 1 # Enable Bayes auto-learning auto_learn 1 bayes_auto_learn_threshold_spam 15 bayes_auto_learn_threshold_nonspam 0.1 bayes_journal_max_size 0 bayes_expiry_max_db_size 200000 # Enable or disable network checks skip_rbl_checks 1 use_razor2 1 use_dcc 1 use_pyzor 1 # Mail using languages used in these country codes will not be marked # as being possibly spam in a foreign language. # - english russian ok_languages en ru # Mail using locales used in these country codes will not be marked # as being possibly spam in a foreign language. ok_locales en ru # How many hits before a mail is considered spam. required_hits 5 #clear_headers #add_header spam Flag _YESNOCAPS_ #add_header all Test _TESTSSCORES(,)_ #add_header all Autolearn "_AUTOLEARN_, bayes_score=_BAYES_" #add_header all Status "_YESNO_, hits=_HITS_, required=_REQD_" #add_header all Level _STARS(*)_ add_header all Checker-Version SpamAssassin at thelema.mccme.ru # add_header all Checker-Version SpamAssassin at plutonium.maths.gla.ac.uk ###################################################### # Whitelist and blacklist addresses are now file-glob-style patterns, so # "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work. # whitelist_from someone@somewhere.com blacklist_from postmaster@iol.it blacklist_from AntiVir@zeus.dnttm.ru blacklist_from subscribe@subscribe.ru ############################################################## # Add your own customised scores for some tests below. The default scores are # read from the installed spamassassin rules files, but you can override them # here. To see the list of tests and their default scores, go to # http://spamassassin.org/tests.html . # HTML_* tests - upped most heavily # since e-mail in HTML is considered harmful score HTML_EMBEDS 3 score HTML_EVENT 4 score HTML_JAVASCRIPT 3 score HTML_IMAGE_ONLY_02 2 score HTML_IMAGE_ONLY_06 2 score HTML_IMAGE_ONLY_08 2 score HTML_FONTCOLOR_UNKNOWN 3 score HTML_FONT_FACE_BAD 3 score HTML_FONT_INVISIBLE 2 score HTML_FONTCOLOR_UNSAFE 1 score HTML_MESSAGE 3 score MIME_HTML_ONLY 2 score HTML_70_80 BODY 3 score HTML_60_70 2.5 score HTML_50_60 2.5 score HTML_40_50 2 score HTML_30_40 1.5 score HTML_20_30 1.5 score MIME_HTML_MOSTLY 2 score MIME_HTML_ONLY 2 score MIME_BASE64_TEXT 2.5 score HTTP_EXCESSIVE_ESCAPES 2.5 score MICROSOFT_EXECUTABLE 5 # Spamtalk score ACT_NOW_CAPS 3 score ORDER_NOW 2 score MANY_EXCLAMATIONS 1.5 score CLICK_BELOW_CAPS 3 score CLICK_BELOW 2 score SAVE_UP_TO 2 score GUARANTEED_100_PERCENT 2 score BIZ_TLD 2 score NIGERIAN_BODY2 2 score NIGERIAN_BODY3 2 score RISK_FREE 1.5 score YOU_WON 1.5 score PRIZE 3 score SELECTED_YOU 2 score BIZ_TLD 4 score MORTGAGE_PITCH 2.5 score BAD_CREDIT 2.5 score THIS_AINT_SPAM 3 score PENIS_ENLARGE2 3 score PENIS_ENLARGE 4 score REMOVE_PAGE 1.5 score MLM 2.5 score CASHCASHCASH 2 score CELEBRITY_PORN 2.5 # Header signatures some spammers use score TRACKER_ID 4 score X_MSMAIL_PRIORITY_HIGH 2 score FORGED_MUA_OUTLOOK 4.5 score FORGED_EUDORAMAIL_RCVD 3.5 score FORGED_YAHOO_RCVD 3.5 score FORGED_HOTMAIL_RCVD 4.5 score FROM_NO_USER 3 score FORGED_OUTLOOK_TAGS 3 score FORGED_YAHOO_RCVD 2.5 # Speakers of Asian languages, like Chinese, Japanese and Korean, will almost # definitely want to uncomment the following lines. They will switch off some # rules that detect 8-bit characters, which commonly trigger on mails using CJK # character sets, or that assume a western-style charset is in use. # score HTML_COMMENT_8BITS 0 score UPPERCASE_25_50 0 score UPPERCASE_50_75 0 score UPPERCASE_75_100 0 score HEAD_ILLEGAL_CHARS 0 score SUBJ_ILLEGAL_CHARS 0 score FROM_ILLEGAL_CHARS 0 ########################################################### ########################################################### ########################################################### # # NEW TESTS BY M.V. # ########################################################### ########################################################### ########################################################### body BANGS_MV /\!\!\!/i describe BANGS_MV Three ! signs in a row body LARGE_HEX_MV /[0-9a-fA-F]{70,}/ describe LARGE_HEX_MV Contains a large block of hexadecimal code ############################################# # Forgeries, bad headers and spamware ############################################# header UNDISCLOSED_MV ALL =~ /undisclosed-recipients: ?;/ describe UNDISCLOSED_MV Undisclosed recipients score UNDISCLOSED_MV 2 header FORGED_OUTBLAZE_MV Received =~ /\.mr\.outblaze\.com/ describe FORGED_OUTBLAZE_MV Received line forged (Outblaze/Mail.com) score FORGED_OUTBLAZE_MV 4.5 header FORGED_RAMBLER_MV Received =~ /imx[12]\.rambler\.ru/ describe FORGED_RAMBLER_MV Received line forged to implicate rambler.ru score FORGED_RAMBLER_MV 4.5 body ABAB_SIG_MV /\b[-ab]{6,40}\b/ describe ABAB_SIG_MV Spam signed with b---aba-ab-- score ABAB_SIG_MV 2.5 body AYUEA_SIG_MV / [яеоуиыюаэ]{4,50} / describe AYUEA_SIG_MV Spam signed with Russian vowels score AYUEA_SIG_MV 3.5 header AUTO_SUBMITTED_MV exists:Auto-Submitted describe AUTO_SUBMITTED_MV Auto-Submitted header score AUTO_SUBMITTED_MV 1.5 header T_X_MESSAGE_INFO exists:X-Message-Info describe T_X_MESSAGE_INFO Ratware signature (X-Message-Info) score T_X_MESSAGE_INFO 3.5 #header __LINES_MV exists:Lines #meta LINES_MV (__LINES_MV == 0) #describe LINES_MV The Lines: header not present #score LINES_MV 3 uri SUSP_URL_MV /\?/ describe SUSP_URL_MV Suspicious URL (contains "?") body MULTIPART_ALTERNA_MV /multipart\/alternative/i describe MULTIPART_ALTERNA_MV multipart/alternative: can indicate spurious bounce messave score MULTIPART_ALTERNA_MV 1.3 body MULTIPART_RELATED_MV /multipart\/related/i describe MULTIPART_RELATED_MV multipart/related: can indicate spurious bounce messave score MULTIPART_RELATED_MV 1.6 ##################################### # Bounce messages ##################################### header DRWEB_MV From =~ /Antivirus-DAEMON|DrWeb-DAEMON/i describe DRWEB_MV Virus mailing returned by antivirus daemon score DRWEB_MV 8 header DAEMON_MV From =~ /(Undeliverable mail|MDaemon|Mailer-Daemon|smtp-daemon)/i describe DAEMON_MV Mailer daemon bounce message score DAEMON_MV 2.5 header HI_MV Subject =~ /^Re: hi$/ describe HI_MV Possibly a virus message header HI2_MV Subject =~ /^Undeliverable mail: hi$/ describe HI2_MV Possibly a virus message score HI2_MV 5 body NEVER_MV /This message was created automatically by mail delivery software.|This is an autoresponder. I'll never see your message./ describe NEVER_MV Autoresponder notice header VBOUNCE_INTERSCAN3 Subject =~ /^InterScan NT Alert/ describe VBOUNCE_INTERSCAN3 InterScan NT score VBOUNCE_INTERSCAN3 6.0 body VBOUNCE_BODY_MV /WARNING! Your message was infected by VIRUS|is removed from here because it contains a virus|Captured by McAfee antivirus|Your mail message did not pass the server content filter|Captured by McAfee antivirus plugin|TRANSACTION FAILED - Unrepairable Virus Detected. |Dr.Web detailed report:|A file attached to this email was removed because it was infected with a virus|Captured by Sophos antivirus plugin|The message you sent is infected and was not delivered|Your message was refused by recipient's server filtering program|DrWEB Antivirus: Message is rejected because it contains a virus/ describe VBOUNCE_BODY_MV Virus bounce message score VBOUNCE_BODY_MV 4.0 header VBOUNCE_AMAVISD Subject =~ /^VIRUS IN YOUR MAIL /i describe VBOUNCE_AMAVISD amavisd virus alert (subject) score VBOUNCE_AMAVISD 6.0 header VBOUNCE_ADMINI From =~ /System Anti-Virus Administrator/i describe VBOUNCE_ADMINI Virus found in sent message score VBOUNCE_ADMINI 6.0 header VBOUNCE_AUTO X-Auto-Generated =~ /McAfee/i describe VBOUNCE_AUTO Virus found in sent message score VBOUNCE_AUTO 6.0 header VBOUNCE_SUBJ Subject =~ /Anti-Virus subsystem report: Virus found in message from you|Attention! This message has been checked by Kaspersky|MDaemon Warning - Virus Found|Virus Detected by Network Associates|Virus found in( a|) message|virus in (outgoing|your) mail|mail Quarantined Due to Virus|AntiVir ALERT|Invalid content in mail message \(message rejected\)|ScanMail Message: To Sender, virus found and action taken|Virus gefunden!virus in a message you sent/i describe VBOUNCE_SUBJ Virus bounce message score VBOUNCE_SUBJ 6.0 body MYDOOM_MV /The message contains Unicode characters and has been sent as a binary attachment./i describe MYDOOM_MV Mydoom virus message score MYDOOM_MV 5 body SWIPNET_MV /swip\.net/i describe SWIPNET_MV Swip.net relay - spurious failure notices come this way score SWIPNET_MV 2 body AOL_BOUNCE_MV /\-\-AOL Postmaster/ describe AOL_BOUNCE_MV Can be a bounce message from AOL score AOL_BOUNCE_MV 2.3 ################################# # Obfuscation ################################# body CASH_OBFU_MV /CA\$H/i describe CASH_OBFU_MV Cash (obfuscated) score CASH_OBFU_MV 2.5 body PENLS_MV /penls/i describe PENLS_MV Penis (obfuscated) score PENLS_MV 2.5 body ENL_OBFU_MV /en1argement/i describe ENL_OBFU_MV En1argement (obfuscation) score ENL_OBFU_MV 3 body FUCK3D_MV /fuck3d|fuck1ng|ffuckk|f\@kk/i describe FUCK3D_MV Fuck3d (obfuscation) score FUCK3D_MV 3 body HIDDEN_VIAGRA1_MV /(?!viagra)v\W*(i|1)\W*(a|\@)\W*g\W*r\W*a/i describe HIDDEN_VIAGRA1_MV VI.AGRA now score HIDDEN_VIAGRA1_MV 3.5 body HIDDEN_GUARANTEED_MV /(?!guaranteed)(G\W*u\W*a\W*r\W*a\W*n\W*t\W*e\W*e\W*d|Guanarteed)/i describe HIDDEN_GUARANTEED_MV G.u.a.r.a.n.t.e.e.d, eh? score HIDDEN_GUARANTEED_MV 3.0 body VIARGA_MV /(V(1|i)agara|Vivagwra|Vmiagura|Vi\S{1,4}gra)/i describe VIARGA_MV Viagra misspelled score VIARGA_MV 3 body VICODIN_MV /v\W*i\W*c\W*(0|o)\W*d\W*i\W*n/i describe VICODIN_MV Vicodin (possibly obfuscated) score VICODIN_MV 4 body XANAX_MV /x\W*(a|\@)\W*n\W*(a|\@)\W*x/i describe XANAX_MV Xanax (possibly obfuscated) score XANAX_MV 4 body VALIUM_MV /v\W*a\W*l+\W*i\W*u\W*m/i describe VALIUM_MV Valium (possibly obfuscated) score VALIUM_MV 2 body OVERNIGHT_MV /(?!overni)[0o]\W*v\W*e\W*r\W*n\W*i\W*/i describe OVERNIGHT_MV Overnight (obfuscated) score OVERNIGHT_MV 4.5 body DRUGS_MV /(?!drugs)d\W*r\W*u\W*g\W*s/i describe DRUGS_MV Drugs (obfuscated) score DRUGS_MV 3.5 body LOAN_OBFU_MV /(?!loan)l\W*o\W*a\W*n/i describe LOAN_OBFU_MV Loan (obfuscated) score LOAN_OBFU_MV 3.5 body APPROV_OBFU_MV /(?!approv)a\W*p\W*p+\W*r+\W*o\W*v/i describe APPROV_OBFU_MV Approved (obfuscated) score APPROV_OBFU_MV 2.5 body FREE_MV /(?!free)f\W*r\W*e\W*e/i describe FREE_MV Free (obfuscated) score FREE_MV 3.5 body MEDICINE_MV /(?!medic)m\W*e\W*d\W*i\W*c/i describe MEDICINE_MV Medicine/medication (obfuscated) score MEDICINE_MV 3.5 body PHARMACY_MV /(?!pharmacy)p\W*h\W*a\W*r\W*m\W*a\W*c\W*y/i describe PHARMACY_MV Pharmacy (obfuscated) score PHARMACY_MV 3.5 body ORDER_OBFU_MV /(?!order)o\W*r\W*d\W*e\W*r/i describe ORDER_OBFU_MV Order (obfuscated) score ORDER_OBFU_MV 3.5 body RATES_OBFU_MV /(?!rate)r\W*a\W*t\W*e\W*/i describe RATES_OBFU_MV Rates (obfuscated) score RATES_OBFU_MV 3 body REFINANCE_MV /r\W*e\W*f\W*i\W*n\W*a\W*n\W*c\W*e/i describe REFINANCE_MV Refinance (possibly obfuscated) score REFINANCE_MV 4 body CHEAP_OBFU_MV /(?!cheap)c\W*h\W*e\W*a\W*p/i describe CHEAP_OBFU_MV Cheap (obfuscated) score CHEAP_OBFU_MV 5 body LSOE_MV /(?!lose the weight)(lsoe|lose) the (wieght|weight)/i describe LSOE_MV Lose the weight (obfuscated) score LSOE_MV 3 body STAR_OBFU_MV /(\w\W){4}/ describe STAR_OBFU_MV Obfuscation with special characters (V^i^a^g^r^a etc) score STAR_OBFU_MV 0.5 body G1RLS_MV /g1r\|s/ describe G1RLS_MV Girls (obfuscated) score G1RLS_MV 1.5 uri URL_MASKED_MV /http.*\.biz\/|rd.yahoo.com.*http/i describe URL_MASKED_MV Obfuscation in URL score URL_MASKED_MV 4.5 body MORTGAGE_OBF_MV /(?!mortgage)m\W*o+(\W*r+\W*t+|\W*t+\W*r+)\W*g+\W*a+\W*g+\W*e/i describe MORTGAGE_OBF_MV Mortgage (obfuscated) score MORTGAGE_OBF_MV 4.5 body PAPERW_OBF_MV /(?!paperwork)p\W*a\W*p\W*e\W*r\W*w\W*o\W*r\W*k/i describe PAPERW_OBF_MV Paperwork (obfuscated) score PAPERW_OBF_MV 4.5 body CREDIT_OBF_MV /(?!credit)c+\W*r+\W*e+\W*d+\W*i+\W*t+/i describe CREDIT_OBF_MV Credit (obfuscated) score CREDIT_OBF_MV 4.5 body TILDE_OBFU_MV /[013A-z]{3}\~[013A-z]{3}/ describe TILDE_OBFU_MV Obfuscation with ~ symbol score TILDE_OBFU_MV 1.5 body LONG_OBFU_MV /[^\s@\-\.]{30}/ describe LONG_OBFU_MV Very long words score LONG_OBFU_MV 0.5 ########################################## # Polite spammers ########################################## body ERROR_MV /If you have received this message in error/i describe ERROR_MV you have received this message in error score ERROR_MV 2.5 body COMMER1_MV /Request no further Commericial Email|THIS EMAIL IS A COMMERCIAL ADVERTISEMENT|This \S* (was|is) a paid advertisement by/i describe COMMER1_MV Claims to be a commercial advertisement score COMMER1_MV 4 body COMMER2_MV /THIS EMAIL IS A COMMERCIAL ADVERTISEMENT/ describe COMMER2_MV Claims to be a commercial advertisement (in ALL CAPS) score COMMER2_MV 8 body ADV1_MV /Click to be omitted|No more ad(s|vertisements:|vertisements, thanks)|If you do not wish to be invited again:|To modify your future preference with us:/i describe ADV1_MV No more advertisements? Yipee! score ADV1_MV 3 body ADV2_MV /To be taken out|Want to be Deleted|receive further emails|Don't want any more|No more notifications/i describe ADV2_MV Don't want any more? No way score ADV2_MV 1.5 body DISCLAIM_MV /It is intended for information and entertainment only/i describe DISCLAIM_MV Disclaimer (for information and entertainment only) score DISCLAIM_MV 2.5 body EXCUSE_10_MV /if you (?:(?:want|wish|care|prefer) not to |(?:don't|do not) (?:want|wish|care) to )(?:be contacted again|receive (any)?\s*(?:more|such|future|further) (?:e?-?mail|messages?|offers|solicitations))/i describe EXCUSE_10_MV "if you do not wish to receive any more" score EXCUSE_10_MV 2.5 body RUSSIAN_DELETE_MV /(указав тему|укажите в теме) письма (.*)Delеte/i describe RUSSIAN_DELETE_MV Ukazhite v teme pis'ma delete score RUSSIAN_DELETE_MV 3.5 uri OPTOUT_MV /optout/i describe OPTOUT_MV URL contains "optout" score OPTOUT_MV 2 body UNSUBSCRIBE_MV /un.subscribe/i describe UNSUBSCRIBE_MV Unsubscribe ########################################## # SPAMTALK ########################################## body WHOLESALE_MV /wholesale/i describe WHOLESALE_MV Wholesale body BRAND_MV /famous brand/i describe BRAND_MV Famous brands score BRAND_MV 1.5 header PAY_MV Subject =~/Just pay/i describe PAY_MV Just pay (in Subject" line) score PAY_MV 3.5 header FAVOR_MV Subject =~/Someone did you a favor/i describe FAVOR_MV Someone did you a favor (in Subject" line) score FAVOR_MV 4.5 body SUBSCRIBE_MV /Subscribe For Free/i describe SUBSCRIBE_MV _Subscribe_ to spam? score SUBSCRIBE_MV 2 body GUARANTEED_MV /Guaranteed to work or your money back!/i describe GUARANTEED_MV Guaranteed to work score GUARANTEED_MV 2.5 body OPPORTUNITY1_MV /GREAT OPPORTUNITY!/i describe OPPORTUNITY1_MV Great opportunity! score OPPORTUNITY1_MV 1.5 body OPPORTUNITY2_MV /OPPORTUNIT/i describe OPPORTUNITY2_MV Mentions opportunity score OPPORTUNITY2_MV 1 body NEWS_MV /BREAKING NEWS/i describe NEWS_MV Breaking news score NEWS_MV 1.5 body SEE_MV /See now/i describe SEE_MV See now! body ONLY_DOLLARS_MV /only \$[0-9.,]*( |\/month)/i describe ONLY_DOLLARS_MV Only $665.98 body ONLY_MONTH_MV /for only \$[0-9.,]*\/month/i describe ONLY_MONTH_MV For only $665.98/month score ONLY_MONTH_MV 1.5 body SPENDING_MV /spend your money|Don't keep spending/i describe SPENDING_MV Don't keep spending score SPENDING_MV 3 body WORKS_MV /Works!/i describe WORKS_MV Works! body REVOLU_MV /revolutionary device/i describe REVOLU_MV Revolutionary device? score REVOLU_MV 2 body RESULTS_MV /results were astounding!/i describe RESULTS_MV The results were astounding! score RESULTS_MV 3 body FRIEND_MV /A Friend of Yours/ describe FRIEND_MV A Friend of Yours? Nah... score FRIEND_MV 3 body ONESTOP_MV /ONE-STOP SHOP/i describe ONESTOP_MV One-stop shop body BUY_SOME_MV /\bWhy not (buy|purchase) some\b/i describe BUY_SOME_MV Why not buy some score BUY_SOME_MV 2 body WILL_WORK_MV /\bproducts will work for you\b/i describe WILL_WORK_MV Products will work for you score WILL_WORK_MV 2 body APPROVED_MV /YOU (ARE|have been) APPROVED|apply below/i describe APPROVED_MV YOU ARE APPROVED score APPROVED_MV 2 body DOWNLOAD_MV /instantly (download|order)/i describe DOWNLOAD_MV Instantly download score DOWNLOAD_MV 1 body MONITOR_MV /right on your computer's monitor/i describe MONITOR_MV Right on your computer's monitor score MONITOR_MV 1 body FREE_COPY_MV /order your free copy/i describe FREE_COPY_MV Order your free copy score FREE_COPY_MV 2 body LOW_PRICE_MV /low price/i describe LOW_PRICE_MV Low price score LOW_PRICE_MV 1.5 body OFFER_MV /we can offer you/i describe OFFER_MV We can offer score OFFER_MV 2 body PROMOTION_MV /promotion/ describe PROMOTION_MV Promotion body VISIT_MV /visit the link below/i describe VISIT_MV Visit the link below score VISIT_MV 1.5 ########################### # Contact ########################### body REPLY_MV /DO NOT \'REPLY\'/i describe REPLY_MV Do not 'reply' score REPLY_MV 2 body CALL1_MV /Call to register/i describe CALL1_MV Call to register score CALL1_MV 2.5 body CALL2_MV /CALL NOW/ describe CALL2_MV CALL NOW (in CAPS) score CALL2_MV 2.5 body DIAL_MV /Call now|JUST DIAL/i describe DIAL_MV Just dial! body CONTACT_MV /Please contact .{0,20}(advantage|offer)/i describe CONTACT_MV Please contact to take advantage score CONTACT_MV 2.5 body WEBSITE_MV /Please visit .{0,20}website|go here to read|link and address above/i describe WEBSITE_MV Please visit our website score WEBSITE_MV 2 ###################################################### # Specific products/services ###################################################### ###################### # Pharmacy ###################### header PHARM_SUBJ_MV Subject =~ /pharmacy/i describe PHARM_SUBJ_MV Pharmacy in subject score PHARM_SUBJ_MV 2.5 body PAIN_RELIEVER_MV /pain reliever/i describe PAIN_RELIEVER_MV Pain reliever score PAIN_RELIEVER_MV 2 body MEDS_MV /\bmeds\b/i describe MEDS_MV Meds score MEDS_MV 1.5 body DISCOUNT_MED_MV /(discount|quality|variety).{0,5}med/i describe DISCOUNT_MED_MV Discount meds score DISCOUNT_MED_MV 2.5 body PRESCRIPTIONS_MV /prescriptions/i describe PRESCRIPTIONS_MV Prescriptions body PRESCRIPTIONS1_MV /prescribed online/i describe PRESCRIPTIONS1_MV Prescribed online score PRESCRIPTIONS1_MV 2.5 body MEDICATIONS_MV /Medication/i describe MEDICATIONS_MV Medication score MEDICATIONS_MV 1.5 body PILLS_MV /your pills/i describe PILLS_MV Your pills score PILLS_MV 2.5 body VALIUM_MV /v(a|\@)(l|1)ium/i describe VALIUM_MV Valium score VALIUM_MV 2 body HEALTH_MV /(sexual |men.{0,5})health/i describe HEALTH_MV Sexual health score HEALTH_MV 2.5 ##################### # Investment ##################### body BULLISH_MV /BULLISH/i describe BULLISH_MV Bullish (investment term) score BULLISH_MV 1.5 body STOCK_MARKET1_MV /Stock[- ]Market/i describe STOCK_MARKET1_MV Stock-Market score STOCK_MARKET1_MV 1.5 body STOCK_MARKET2_MV /Stock-Market Technical Analysis/i describe STOCK_MARKET2_MV Stock-Market Technical Analysis score STOCK_MARKET2_MV 2.5 body MULTIMILLION_MV /(million dollars|milliom|multi-million dollar)/i describe MULTIMILLION_MV Multi-million dollar score MULTIMILLION_MV 2 body CUSTOMERS_MV /leading customers/i describe CUSTOMERS_MV Leading customers score CUSTOMERS_MV 2 body VENTURE_MV /exclusive venture/i describe VENTURE_MV Exclusive venture score VENTURE_MV 4 body REVENUE_MV /revenue.{0,25} grow/i describe REVENUE_MV Revenue growth score REVENUE_MV 1.5 body ACCOU_MV /Accounts Receivables/i describe ACCOU_MV Accounts Receivables score ACCOU_MV 3 body INDEPE_MV /independent analysis/i describe INDEPE_MV Independent analysis score INDEPE_MV 1.5 body INSURANCE_MV /major insurance companies/i describe INSURANCE_MV Major insurance companies score INSURANCE_MV 2.5 body SOLUTIONS_MV /innovative management solutions/i describe SOLUTIONS_MV Innovative management solutions? score SOLUTIONS_MV 2 body LITIGATION_MV /Private Securities Litigation Reform Act/i describe LITIGATION_MV Private Securities Litigation Reform Act (legalese) score LITIGATION_MV 4 body INVEST_SPAMMER_MV /Stock Market Watcher/i describe INVEST_SPAMMER_MV The name of investment spammer score INVEST_SPAMMER_MV 4 body LEGALESE_MV /forward-looking statements/ describe LEGALESE_MV Legalese in investment spam score LEGALESE_MV 2.5 body WAS_PAID_MV /was paid .{3,8} thousand dollars to distribute/ describe WAS_PAID_MV Was paid ... to distribute (investment spam) score WAS_PAID_MV 4 body INVESTMENT_MV /investment advisor/i describe INVESTMENT_MV Investment advisor score INVESTMENT_MV 3 ############################## # Porn spam ############################## body PHEROMONES_MV /pheromones/i describe PHEROMONES_MV Pheromones score PHEROMONES_MV 2.5 body SEXUALLY_MV /Sexually/ describe SEXUALLY_MV Sexually body GETHARD_MV /Get hard/i describe GETHARD_MV Get hard in seconds! Amzaing. body PENIS1_MV /male (enlargement|enhancement)/i describe PENIS1_MV Male enlargement score PENIS1_MV 2.5 body PENIS2_MV /solution to male enlargement/i describe PENIS2_MV Solution to male enlargement score PENIS2_MV 1.5 body PENIS3_MV /your current size|size.{0,20}manhood/i describe PENIS3_MV Happy with your current size? body STAMINA_MV /sexual stamina/i describe STAMINA_MV Sexual stamina score STAMINA_MV 2 body HOTMOMS_MV /hot \S*[- ]moms? /i describe HOTMOMS_MV Hot soccer-moms (possibly a porn spam) score HOTMOMS_MV 2.5 body FACIAL_MV /facial/i describe FACIAL_MV Facial (possibly a porn spam) score FACIAL_MV 1.5 body MANJUICE_MV /man-juice/i describe MANJUICE_MV Man-juice (possibly a porn spam) score MANJUICE_MV 2 body SEXTAPES_MV /sex tapes/i describe SEXTAPES_MV Sex tapes score SEXTAPES_MV 1.5 body TV_MV /too hot for TV/i describe TV_MV Too hot for TV score TV_MV 3 body VIDEOS1_MV /Home Videos/i describe VIDEOS1_MV Home Videos score VIDEOS1_MV 1.5 body VIDEOS2_MV /(Stolen Home Videos|Home Videos Of .{0,20}Stars)/i describe VIDEOS2_MV Stolen Home Videos Of Your Favorite Stars! score VIDEOS2_MV 2 body DATING1_MV /dating (|[A-z]* )site\b/i describe DATING1_MV Dating site score DATING1_MV 1.5 ########################## # GAMBLING ########################## body PRIZE_MV /(collect your prize|\blotto\b)/i describe PRIZE_MV Collect your prize, you lucky winner score PRIZE_MV 3 body CASINO1_MV /casino/i describe CASINO1_MV Casino mentioned score CASINO1_MV 1.5 body CASINO2_MV /online casino/i describe CASINO2_MV Online casino score CASINO2_MV 1.5 body GAMING_MV /gaming/i describe GAMING_MV Gaming score GAMING_MV 0.7 ################################### # LOTTERY ################################### body CONGRATULATIONS_MV /Congratulations!/i describe CONGRATULATIONS_MV Congratulations! body WINNER_MV /You are a winner/i describe WINNER_MV You are a winner score WINNER_MV 2 body LOTTERY1_MV /lottery/i describe LOTTERY1_MV Lottery body LOTTERY2_MV /winning.{0,25}claim/i describe LOTTERY2_MV Your winning must be claimed score LOTTERY2_MV 2 ###################################### # College degrees ###################################### body DEGREE1_MV /(instant|genuine|accredited).{0,20}degree/i describe DEGREE1_MV Get an instant university degree score DEGREE1_MV 2.5 body DEGREE2_MV /No Study Required/i describe DEGREE2_MV No Study Required score DEGREE2_MV 2.5 body DEGREE3_MV /degree.{0,40}life experience/i describe DEGREE3_MV Degree you deserve based on your life experience score DEGREE3_MV 2 body DIPLOMA_MV /Academic[- ]*Qualifications/i describe DIPLOMA_MV Academic Qualifications score DIPLOMA_MV 3.5 body UNIVERSITY_DIPLOMAS_MV /\b(?:college|university)\s+diplomas/i describe UNIVERSITY_DIPLOMAS_MV University Diplomas body CERT_MV /( cert | certs )/i describe CERT_MV All certs are genuine and real score CERT_MV 2 ############################################ # Mortgage ############################################ body CREDIT_MV /CREDIT[ -]HISTORY/i describe CREDIT_MV Credit-history score CREDIT_MV 2 body MORTGAGE_MV /experienced lender|mortgage|Mo.rtgage|(personal|home) loan/i describe MORTGAGE_MV Mortgage score MORTGAGE_MV 1.5 body LOAN1_MV / loan / describe LOAN1_MV Loan header LOAN2_MV ALL =~ / loan / describe LOAN2_MV Loan (in header) ################################ # Other services (in English) ################################ body ROLEX1_MV /Rolex.{0,25} Watches/i describe ROLEX1_MV Rolex (and Cartier) Watches score ROLEX1_MV 3 body ROLEX2_MV /Rolex/i describe ROLEX2_MV Rolex score ROLEX2_MV 3 body DOWNLOAD_MV /download movies/i describe DOWNLOAD_MV Download movies score DOWNLOAD_MV 2 body CONSOLE1_MV /console games/i describe CONSOLE1_MV Console games score CONSOLE1_MV 2 body CONSOLE2_MV /download.{0,30} console/i describe CONSOLE2_MV Download console games score CONSOLE2_MV 3 body ROUNDTRIP_MV /Round trip/i describe ROUNDTRIP_MV Round trip body GRAPH1_MV /Professional Graphic Design Studio/i describe GRAPH1_MV Professional Graphic Design Studio score GRAPH1_MV 2.5 body GRAPH2_MV /Graphic Design Services/i describe GRAPH2_MV Graphic Design Services score GRAPH2_MV 2.5 body CORPO_MV /Corporate identity/i describe CORPO_MV Corporate identity body PAYPAL_MV /enjoy your Paypal experience/i describe PAYPAL_MV Enjoy your Paypal experience score PAYPAL_MV 2 body WORKERS_MV /Workers Needed/i describe WORKERS_MV Honest workers needed! body RND_SYB_MV /(UndergroundCD|Govenment don't want me to sell|banned CD!* government don't want me to sell|RND_SYB|cableTV)/i describe RND_SYB_MV Banned CD and cable TV score RND_SYB_MV 3 body HACKING_MV /hacking someone PC/ describe HACKING_MV Hacking someone's PC score HACKING_MV 2 body SPAM1_MV /Spam Hosting/ describe SPAM1_MV Spam Hosting score SPAM1_MV 2.5 body SPAM2_MV /Spam For free/i describe SPAM2_MV Spam for free score SPAM2_MV 2.5 body SPAM3_MV /website sends email messages/i describe SPAM3_MV Website sends email messages! It shouldn't score SPAM3_MV 2 body CASH_MV /QUICK CASH/ describe CASH_MV QUICK CASH (in CAPS) score CASH_MV 3 body OIL_MV /\bOil Company/i describe OIL_MV Oil Company score OIL_MV 1 ######################################### # Nigerian scam letters ######################################### body NIG_GOODFRIEND_MV /Dear Goodfriend/i describe NIG_GOODFRIEND_MV Dear Goodfriend (possibly a Nigerian scam) score NIG_GOODFRIEND_MV 2.5 body NIG_OIL_MV /Nigeria.{0,25} (Oil|Aviation)/i describe NIG_OIL_MV Mentions Nigeria and oil or aviation score NIG_OIL_MV 2.5 body AFRICA_MV /Zimbabwe|Nigeria|sierra leon|Senegal/i describe AFRICA_MV Mentions an African country body NIG_DOLLARS_MV /(thousand|million) (united state(s|) dollars|USD)/i describe NIG_DOLLARS_MV Talks about millions USD (possibly a Nigerian scam) score NIG_DOLLARS_MV 2.5 body NIG_HEARTS_MV /With warm hearts/i describe NIG_HEARTS_MV With warm hearts (possibly a Nigerian scam) score NIG_HEARTS_MV 3 body NIG_CONTACT_MV /I got your contact (as a result|in the cause)/i describe NIG_CONTACT_MV I got your contact (possibly a Nigerian scam) score NIG_CONTACT_MV 3 body NIG_CONFIDE_MV /(I confide in you hoping|This proposal is strictly confidential)/ describe NIG_CONFIDE_MV I confide in you (possibly a Nigerian scam) score NIG_CONFIDE_MV 2 body NIG_SENSITIVE_MV /Due to the sensitive nature of my job/i describe NIG_SENSITIVE_MV Sensitive nature (possibly a Nigerian scam) score NIG_SENSITIVE_MV 2 body NIG_REPLY_MV /reply to my via email only|(send a reply|response) through (this|my) email/i describe NIG_REPLY_MV Reply via email (possibly a Nigerian scam) score NIG_REPLY_MV 2 body NIG_CLAIM_MV /(claim the funds|collect this deposit)/i describe NIG_CLAIM_MV Claim the funds (possibly a Nigerian scam) body LEGAL100_MV /100\% legal/i describe LEGAL100_MV 100 percent legal body CONFI100_MV /100\% confidential/i describe CONFI100_MV 100 percent confidential ############################################ # Tests targeted to stop specific spammers ############################################ uri COMPASS_MV /(www.compass.com.ru|carderportal)/i describe COMPASS_MV URL pointing to compass.com.ru or such like score COMPASS_MV 5 body COMPASS_WELCOME_MV /Welcome to our underground site!/i describe COMPASS_WELCOME_MV Welcome to our underground site? Nah... header COMPASS_SUBJ_MV ALL =~ /Best computers/i describe COMPASS_SUBJ_MV Best computers (possibly a spam from compass.com.ru) score COMPASS_SUBJ_MV 3 header RAR_ATTACH_MV X-attachments =~ /\.rar;/i describe RAR_ATTACH_MV Contains .rar attachment score RAR_ATTACH_MV 15 header PHP3_MV X-Mailer =~ /PHP3/ describe PHP3_MV X-Mailer: PHP3 header PRICE_MV ALL =~ /price/i describe PRICE_MV Prices score PRICE_MV 0.5 header INKLINE_MV ALL =~ /inklineglobal/ describe INKLINE_MV Inkline Global score INKLINE_MV 5 header FEMLAB_HEADER_MV ALL =~ /FEMLAB/ describe FEMLAB_HEADER_MV mathematical modelling package FEMLAB score FEMLAB_HEADER_MV 3.5 body FEMLAB_BODY_MV /FEMLAB/ describe FEMLAB_BODY_MV mathematical modelling package FEMLAB score FEMLAB_BODY_MV 2.5 body SPAMWARE_MV /\(This safeguard is not inserted when using the registered version\)/ describe SPAMWARE_MV Message sent using unregistered spamware score SPAMWARE_MV 4 header STORMPAY_MV From =~/stormpay/i describe STORMPAY_MV Stormpay.net score STORMPAY_MV 8 ################################ # Letters to "Verbit " ################################ header KALEDIN_NOSPAM_MV From =~ /kaledin\@/i describe KALEDIN_NOSPAM_MV Letters from Kaledin score KALEDIN_NOSPAM_MV -6 header KALEDIN_FAKE_MV From =~ /\"Kaledin\" /i describe POSTMASTER_MV To "Postmaster" score POSTMASTER_MV 5 header CEBEP_MV To =~ /(Cebep |cebep-owner|rada-owner)/i describe CEBEP_MV Letters to "Cebep" score CEBEP_MV 4 body ZDR_VERBIT_MV /From: \"Verbit\"|Здравствуйте (Verbit|Cebep|шеф)|verbit\@brauer.harvard.edu/i describe ZDR_VERBIT_MV Zdravstvujte "Verbit" score ZDR_VERBIT_MV 3 body DEAR_CUSTOMER_MV /Dear [A-z.]* Customer|^Dear Friend/i describe DEAR_CUSTOMER_MV Dear blah-blah-blah score DEAR_CUSTOMER_MV 2 body PRIVET_MV /Привет, дружище!/i describe PRIVET_MV Privet, druzhishche! score PRIVET_MV 3 header CEBEP_OWNER_MV To =~ /Cebep-owner /i describe CEBEP_OWNER_MV Letters to "Cebep-owner" score CEBEP_OWNER_MV 8 header HARVARD_MV To =~ /math.harvard.edu/i describe HARVARD_MV Letters to "math.harvard.edu" score HARVARD_MV 3.5 header MCCME_MV To =~ /(?!.*erbitsk.*)\".*\".*verbit\@mccme.ru/i describe MCCME_MV Letters to "Connie Edwards" score MCCME_MV 3.5 header MAILRU_MV ALL =~ /tiphareth\@mail.ru/i describe MAILRU_MV Letters to "tiphareth@mail.ru" score MAILRU_MV 4 header YULYA_MV To =~ /Yulya\s+