Code: Select all
#START OF FILE GENERATION @ 19:08:06 (July 31st, 2006)
#----------------------------------------------------------------------
#START OF TYPE: blacklist
#----------------------------------------------------------------------
blacklist_from *.ru #Rule Added July 31st, 2006
#----------------------------------------------------------------------
#START OF TYPE: body
#----------------------------------------------------------------------
#Rule Added November 10th, 2005
body AGEN_form11424534 /<form/i
score AGEN_form11424534 2.8
describe AGEN_form11424534 apears to contain form
#Rule Added November 10th, 2005
body AGEN_form1131683575 /<input/i
score AGEN_form1131683575 2.1
describe AGEN_form1131683575 appears to contain a form input in the email
#Rule Added November 10th, 2005
body AGEN_BioMatrix5658419 /Bio-Matrix Scientific/i
score AGEN_BioMatrix5658419 5
describe AGEN_BioMatrix5658419 BioMatrix Scientific
#Rule Added November 12th, 2005
body AGEN_CARTIER5659200345 /CARTIER/i
score AGEN_CARTIER5659200345 0.7
describe AGEN_CARTIER5659200345 CARTIER
#Rule Added November 13th, 2005
body AGEN_cheaper4527739340 /cheaper/i
score AGEN_cheaper4527739340 0.2
describe AGEN_cheaper4527739340 cheaper
#Rule Added November 10th, 2005
body AGEN_link4526735568 /click on the link/i
score AGEN_link4526735568 1
describe AGEN_link4526735568 asks to click on a link
#Rule Added November 10th, 2005
body AGEN_profile1131683788 /come check out my .?.?.?.?.?.?.?.?.?.? profile/i
score AGEN_profile1131683788 3.8
describe AGEN_profile1131683788 profile related (sex sites etc)
#Rule Added November 17th, 2005
body AGEN_cuisinate0 /cuisinate.com/i
score AGEN_cuisinate0 2.6
describe AGEN_cuisinate0 evil host
#Rule Added December 02nd, 2005
body AGEN_geocities45342465 /geocities.yahoo.com/i
score AGEN_geocities45342465 4
describe AGEN_geocities45342465 often used in spam
#Rule Added November 13th, 2005
body AGEN_geocities22638699 /geocities.com/i
score AGEN_geocities22638699 4
describe AGEN_geocities22638699 Lot of spam refers to geocities.com
#Rule Added November 12th, 2005
body AGEN_notclear452736060 /It was not clear whether there were/i
score AGEN_notclear452736060 2
describe AGEN_notclear452736060 found in spam allot
#Rule Added November 13th, 2005
body AGEN_lower_costs0 /low.?.?.?.?.?.?.?.?.?.?.?.?.?cost/i
score AGEN_lower_costs0 2.6
describe AGEN_lower_costs0 talks about low costs
#Rule Added November 10th, 2005
body netoperations /Net Operations.?.?.?inc/i
score netoperations 5
describe netoperations evil company
#Rule Added November 10th, 2005
body AGEN_prescription0 /NO PRESCRIPTION REQUIRED/i
score AGEN_prescription0 3.8
describe AGEN_prescription0 prescription
#Rule Added November 12th, 2005
body AGEN_omega0 /omega/i
score AGEN_omega0 0.9
describe AGEN_omega0 omega
#Rule Added November 13th, 2005
body AGEN_store0 /Our store/i
score AGEN_store0 0.8
describe AGEN_store0 Our store
#Rule Added November 10th, 2005
body AGEN_prescription_0 /p.?.?.?r.?.?.?[e3].?.?.?[s58].?.?.?c.?.?.?r.?.?.?[it1].?.?.?p.?.?.?[t7].?.?.?[it1].?.?.?[o0*].?.?.?n/i
score AGEN_prescription_0 4
describe AGEN_prescription_0 prescription related
#Rule Added November 13th, 2005
body AGEN_price0 /p.?.?r.?.?[it1].?.?c.?.?[e3].?.?!/i
score AGEN_price0 0.98
describe AGEN_price0 price with exclaimation mark
#Rule Added November 12th, 2005
body AGEN_PIAGET1131840102 /PIAGET/i
score AGEN_PIAGET1131840102 1.1
describe AGEN_PIAGET1131840102 PIAGET
#Rule Added November 10th, 2005
body AGEN_prostrate45267359 /prostrategood.com/i
score AGEN_prostrate45267359 4.5
describe AGEN_prostrate45267359 pills related site
#Rule Added November 17th, 2005
body AGEN_quitpaying3396819 /Quit .?.?.?.?.?.?paying/i
score AGEN_quitpaying3396819 0.7
describe AGEN_quitpaying3396819 quit paying or quit overpaying
#Rule Added November 12th, 2005
body AGEN_rem0ve0 /rem0ve/i
score AGEN_rem0ve0 3
describe AGEN_rem0ve0 rem0ve
#Rule Added November 12th, 2005
body AGEN_replicas226368025 /replicas/i
score AGEN_replicas226368025 0.4
describe AGEN_replicas226368025 replicas
#Rule Added November 10th, 2005
body AGEN_ringo2263367662 /ringo.com/i
score AGEN_ringo2263367662 3.5
describe AGEN_ringo2263367662 spam site
#Rule Added November 13th, 2005
body AGEN_save_on3395804757 /save on/i
score AGEN_save_on3395804757 1.1
describe AGEN_save_on3395804757 save on
#Rule Added November 17th, 2005
body AGEN_save_up_to0 /save up to/i
score AGEN_save_up_to0 1.15
describe AGEN_save_up_to0 save up to
#Rule Added November 13th, 2005
body AGEN_shipped_worldwide /shipped worldwide/i
score AGEN_shipped_worldwide 0.2
describe AGEN_shipped_worldwide shipped worldwide
#Rule Added November 13th, 2005
body AGEN_Shop4527692604 /Shop/i
score AGEN_Shop4527692604 0.2
describe AGEN_Shop4527692604 Shop
#Rule Added November 10th, 2005
body AGEN_stock2263367494 /stock/i
score AGEN_stock2263367494 0.4
describe AGEN_stock2263367494 stock related (body)
#Rule Added November 13th, 2005
body AGEN_variety_of_produc /variety of products/i
score AGEN_variety_of_produc 0.9
describe AGEN_variety_of_produc variety of products
#Rule Added November 13th, 2005
body AGEN_wrist_watch0 /w.?.?r.?.?[it1].?.?[s58].?.?[t7].?.? .?.?w.?.?[a4@].?.?[t7].?.?c.?.?h/i
score AGEN_wrist_watch0 2.3
describe AGEN_wrist_watch0 wrist watch
#Rule Added November 13th, 2005
body AGEN_produce1131923451 /We produce a variety of excellent/i
score AGEN_produce1131923451 2.6
describe AGEN_produce1131923451 talks about producing stuff
#Rule Added November 13th, 2005
body AGEN_We_supply0 /We supply/i
score AGEN_We_supply0 0.953
describe AGEN_We_supply0 We supply spam
#Rule Added November 10th, 2005
body AGEN_mtg_process113168 /Your mtg process is approved/i
score AGEN_mtg_process113168 5
describe AGEN_mtg_process113168 Your mtg process is approved reoccuring spam
#Rule Added November 13th, 2005
body AGEN_query2263847416 /?.../i
score AGEN_query2263847416 0.8
describe AGEN_query2263847416 contains a url with a query string
#----------------------------------------------------------------------
#START OF TYPE: header
#----------------------------------------------------------------------
#Rule Added November 10th, 2005
header AGEN_subject0 subject=~ /.?.?.?Message subject.?.?.?/i
score AGEN_subject0 4
describe AGEN_subject0 dumb reoccuring spam
#Rule Added December 02nd, 2005
header AGEN_spam_ip4534246988 received=~ /219.129.120.138/i
score AGEN_spam_ip4534246988 5
describe AGEN_spam_ip4534246988 spam ip
#Rule Added July 25th, 2006
header AGEN_fromauclairs46154 from=~ /auclair/i
score AGEN_fromauclairs46154 -0.8
describe AGEN_fromauclairs46154 possibly from family
#Rule Added November 12th, 2005
header AGEN_Cialis3395508339 subject=~ /Cialis/i
score AGEN_Cialis3395508339 4
describe AGEN_Cialis3395508339 Cialis
#Rule Added November 12th, 2005
header AGEN_complimentary5659 subject=~ /complimentary/i
score AGEN_complimentary5659 1.2
describe AGEN_complimentary5659 often used in cruise spam
#Rule Added November 13th, 2005
header AGEN_consultation22638 subject=~ /consultation/i
score AGEN_consultation22638 2.3
describe AGEN_consultation22638 consultation
#Rule Added November 12th, 2005
header AGEN_cruise1131839960 subject=~ /cruise/i
score AGEN_cruise1131839960 1
describe AGEN_cruise1131839960 cruise spam
#Rule Added November 12th, 2005
header AGEN_Depresion0 subject=~ /Depresion/i
score AGEN_Depresion0 0.3
describe AGEN_Depresion0 Depresion drugs
#Rule Added November 12th, 2005
header AGEN_Emerging_Equity45 subject=~ /Emerging Equity/i
score AGEN_Emerging_Equity45 3.5
describe AGEN_Emerging_Equity45 Emerging Equity
#Rule Added July 25th, 2006
header AGEN_fromfortiers34616 from=~ /fortier/i
score AGEN_fromfortiers34616 -1.2
describe AGEN_fromfortiers34616 possibly from family
#Rule Added January 27th, 2006
header AGEN_forwarded34151511 subject=~ /fw:/i
score AGEN_forwarded34151511 0.7
describe AGEN_forwarded34151511 lot of spam fakes as forwarded mail
#Rule Added November 13th, 2005
header AGEN_health_supplement subject=~ /health supplement/i
score AGEN_health_supplement 3.5
describe AGEN_health_supplement health supplements
#Rule Added November 13th, 2005
header AGEN_health0 subject=~ /health/i
score AGEN_health0 0.2
describe AGEN_health0 health
#Rule Added November 12th, 2005
header AGEN_imailpl5659203465 received=~ /imail.pl/i
score AGEN_imailpl5659203465 4
describe AGEN_imailpl5659203465 host known to send spam
#Rule Added November 13th, 2005
header AGEN_low_price45276930 subject=~ /low price/i
score AGEN_low_price45276930 2.2
describe AGEN_low_price45276930 low price
#Rule Added December 31st, 1969
header mortgage subject=~ /m.?.?.?[o0*].?.?.?r.?.?.?[t7].?.?.?g.?.?.?[a4@].?.?.?g.?.?.?[e3]/i
score mortgage 3
describe mortgage mortgage related
#Rule Added November 13th, 2005
header AGEN_medicati0 subject=~ /m.?.?[e3].?.?d.?.?[it1].?.?c.?.?[a4@].?.?[t7].?.?[it1]/i
score AGEN_medicati0 2.3
describe AGEN_medicati0 medicati scrambled
#Rule Added November 12th, 2005
header AGEN_Mutual3395507904 subject=~ /Mutual/i
score AGEN_Mutual3395507904 2
describe AGEN_Mutual3395507904 money related spam
#Rule Added November 12th, 2005
header AGEN_o2pl3395507697 received=~ /o2.pl/i
score AGEN_o2pl3395507697 4.7
describe AGEN_o2pl3395507697 evil host
#Rule Added November 12th, 2005
header AGEN_offer5659180245 subject=~ /offer/i
score AGEN_offer5659180245 1.9
describe AGEN_offer5659180245 offer
#Rule Added November 12th, 2005
header AGEN_Order_Verificatio subject=~ /Order Verification/i
score AGEN_Order_Verificatio 4
describe AGEN_Order_Verificatio reoccuring
#Rule Added November 12th, 2005
header AGEN_pleasure565917934 subject=~ /P.?.?.?[l1!].?.?.?[e3].?.?.?[a4@].?.?.?[s58].?.?.?u.?.?.?r.?.?.?[e3]/i
score AGEN_pleasure565917934 2.7
describe AGEN_pleasure565917934 sex related
#Rule Added November 10th, 2005
header AGEN_pills2263355908 subject=~ /p.?.?[it1].?.?[l1!].?.?[l1!].?.?[s58]/i
score AGEN_pills2263355908 3
describe AGEN_pills2263355908 pill related
#Rule Added November 13th, 2005
header AGEN_rdinn4527694368 received=~ /rdinn.com/i
score AGEN_rdinn4527694368 4
describe AGEN_rdinn4527694368 spammy host
#Rule Added November 12th, 2005
header AGEN_rep0rt1131839887 subject=~ /rep0rt/i
score AGEN_rep0rt1131839887 1.6
describe AGEN_rep0rt1131839887 reoccuring spam
#Rule Added November 13th, 2005
header AGEN_save_on0 subject=~ /save on/i
score AGEN_save_on0 2.7
describe AGEN_save_on0 save on
#Rule Added February 07th, 2006
header AGEN_stop2278691224 subject=~ /stop/i
score AGEN_stop2278691224 0.9
describe AGEN_stop2278691224 lot of spam subjects have stop in them
#Rule Added November 13th, 2005
header AGEN_supplement2263845 subject=~ /supplement/i
score AGEN_supplement2263845 0.3
describe AGEN_supplement2263845 supplement
#Rule Added November 13th, 2005
header AGEN_timepiece45276939 subject=~ /timepiece/i
score AGEN_timepiece45276939 2.7
describe AGEN_timepiece45276939 timepiece
#Rule Added November 13th, 2005
header AGEN_top_quality452769 subject=~ /top quality/i
score AGEN_top_quality452769 2.8
describe AGEN_top_quality452769 top crap
#Rule Added November 12th, 2005
header AGEN_Viagra1131836101 subject=~ /Viagra/i
score AGEN_Viagra1131836101 4
describe AGEN_Viagra1131836101 Viagra
#Rule Added November 12th, 2005
header AGEN_Vicodin3395508261 subject=~ /Vicodin/i
score AGEN_Vicodin3395508261 1.5
describe AGEN_Vicodin3395508261 Vicodin
#Rule Added November 10th, 2005
header AGEN_Vocalscape3395049 subject=~ /Vocalscape.?.?.?.?inc/i
score AGEN_Vocalscape3395049 1.4
describe AGEN_Vocalscape3395049 evil company
#Rule Added November 10th, 2005
header AGEN_reoccuring_spam0 subject=~ /W.?.?.?[a4@].?.?.?[s58].?.?.?h.?.?.?[it1].?.?.?n.?.?.?g.?.?.?[t7].?.?.?[o0*].?.?.?n.?.?.? .?.?.?M.?.?.?u.?.?.?[t7].?.?.?u.?.?.?[a4@].?.?.?[l1!]/i
score AGEN_reoccuring_spam0 3
describe AGEN_reoccuring_spam0 reoccuring spam
#Rule Added November 13th, 2005
header AGEN_wristwatch1131923 subject=~ /w.?.?r.?.?[it1].?.?[s58].?.?[t7].?.?w.?.?[a4@].?.?[t7].?.?c.?.?h/i
score AGEN_wristwatch1131923 4
describe AGEN_wristwatch1131923 wristwatch
#Rule Added December 02nd, 2005
header AGEN_watch1133561673 subject=~ /watch/i
score AGEN_watch1133561673 2.7
describe AGEN_watch1133561673 watch related
#Rule Added November 12th, 2005
header AGEN_Winner1131835929 subject=~ /Winner/i
score AGEN_Winner1131835929 3
describe AGEN_Winner1131835929 you loose
#Rule Added November 12th, 2005
header AGEN_Xanax4527344500 subject=~ /Xanax/i
score AGEN_Xanax4527344500 4
describe AGEN_Xanax4527344500 Xanax
#Rule Added November 12th, 2005
header AGEN_yukonsoft56592000 received=~ /yukonsoft.com/i
score AGEN_yukonsoft56592000 1
describe AGEN_yukonsoft56592000 spam server
#Rule Added November 10th, 2005
header AGEN_oportunity3395049 subject=~ /[o0*].?.?.?p.?.?.?p.?.?.?[o0*].?.?.?r.?.?.?[t7].?.?.?u.?.?.?n.?.?.?[it1].?.?.?[t7].?.?.?y/i
score AGEN_oportunity3395049 2
describe AGEN_oportunity3395049 gimick
#Rule Added November 10th, 2005
header AGEN_stock_market22633 subject=~ /[s58].?.?.?[t7].?.?.?[o0*].?.?.?c.?.?.?k.?.?.?m.?.?.?[a4@].?.?.?r.?.?.?k.?.?.?[e3].?.?.?[t7]/i
score AGEN_stock_market22633 2.4
describe AGEN_stock_market22633 stockmarket spam
#Rule Added December 04th, 2005
header AGEN_spam0 subject=~ /*SPAM*/i
score AGEN_spam0 6
describe AGEN_spam0 tagged as spam by host
#Rule Added December 29th, 2005
header AGEN_marked0 subject=~ /*spam*/i
score AGEN_marked0 5
describe AGEN_marked0 marked as spam by moosecc
#Rule Added November 12th, 2005
header AGEN_fake_reply2263672 subject=~ /^R.?E.?.?.?.?.?$/i
score AGEN_fake_reply2263672 4.5
describe AGEN_fake_reply2263672 fake reply
#----------------------------------------------------------------------
#START OF TYPE: whitelist
#----------------------------------------------------------------------
#----------------------------------------------------------------------
#END OF FILE GENERATION @ 19:08:06 (July 31st, 2006)
#Total Entries: 170
#----------------------------------------------------------------------
[code]
[color=#888888][size=85]Archived topic from Iceteks, old topic ID:4476, old post ID:35880[/size][/color]