home *** CD-ROM | disk | FTP | other *** search
/ ftp.f-secure.com / 2014.06.ftp.f-secure.com.tar / ftp.f-secure.com / support / hotfix / fsis / IS-SpamControl.fsfix / iufssc / rules / 96_fs-meds.cf < prev    next >
Text File  |  2006-11-29  |  2KB  |  70 lines
  1. # 96_fs-meds.cf -- era Fri Jan  7 09:01:37 2005
  2. # Copyright (C) 2004-2005 F-Secure Corporation
  3. # $Id: 96_fs-meds.cf 2346 2005-12-09 13:59:39Z  $
  4.  
  5. ifplugin FS::MsgStructure
  6.  
  7. # rule: MSGSTRUCT_PHARMA_SHORT
  8. # added 2005-03-08
  9. # edit 2005-04-12: spacing variations
  10. # edit 2005-05-10: more spacing and wording variations; allow .signature
  11. # test: spam-2005-03-08/2274612881-1110211748.V802I3d315.localhost.localdomain
  12. # test: spam-2005-03-08/2274594169-1110163604.V802I3c1dc.localhost.localdomain
  13. # test: spam-2005-03-08/2274620120-1110230534.V802I3d9c7.localhost.localdomain
  14. # test: spam-2005-04-12/1836528402-1113221444.V802I3c94c.localhost.localdomain
  15. # test: spam-2005-05-10/df-2005-05-10-007978.txt
  16. # test: spam-2005-05-10/df-2005-05-10-004022.txt
  17. # test: spam-2005-05-10/df-2005-05-10-007642.txt
  18. # test: spam-2005-05-10/df-2005-05-10-000472.txt
  19. # test: spam-2005-05-10/df-2005-05-10-008544.txt
  20.  
  21. define_structure MSGSTRUCT_PHARMA_SHORT
  22. structure ^(?:(?:Would|Do) {1,5}you {1,5}(?:like|want)|Want) {1,5}
  23. structure (?:a {1,5})?
  24. structure (?:inexpensive|[Cc]heap|[Nn]ew)
  25. structure (?: [Aa]nd [Nn]ew)?
  26. structure (?: (?:Canadian|Mexican|Overseas))? {2,5}
  27. structure (?:Pain Killers|Perscriptions|Drugs)\? {1,5}
  28. structure http://[^ \"'<>]{6,50}\n{0,20}
  29. structure (?:-- \n(?:.{0,72}\n){1,6})?$
  30.  
  31. describe MSGSTRUCT_PHARMA_SHORT Short Eliza-like pharma template
  32. score MSGSTRUCT_PHARMA_SHORT 7
  33.  
  34. endif
  35.  
  36.  
  37. # rule: BODY_RNEDS
  38. # added 2005-05-10
  39. # test: spam-2005-05-10/df-2005-05-10-000221.txt
  40.  
  41. body     BODY_RNEDS /\brned(ical)?s\b/
  42. describe BODY_RNEDS Funny spelling of "meds" or "medicals"
  43. score     BODY_RNEDS 1
  44.  
  45. # rule: BODY_PHARRNACY
  46. # added 2005-05-10
  47. # test: spam-2005-05-10/df-2005-05-10-000215.txt
  48.  
  49. body     BODY_PHARRNACY /\bpharrnac(y|(ie|eutic(al)?)s?)\b/
  50. describe BODY_PHARRNACY Funny spelling of "pharmacy" or derived word
  51. score     BODY_PHARRNACY 2
  52.  
  53. # rule: BODY_RNONEY
  54. # added 2005-05-10
  55. # test: spam-2005-05-10/df-2005-05-10-000113.txt
  56.  
  57. body     BODY_RNONEY /\brnoney\b/
  58. describe BODY_RNONEY Funny spelling of "money"
  59. score     BODY_RNONEY 2
  60.  
  61. # rule: BODY_RNVV_SHORT
  62. # added 2005-05-10
  63. # edit 2005-05-12: rename, add a few more short words
  64. # test: spam-2005-05-10/df-2005-05-10-000113.txt
  65. # test: spam-2005-05-10/df-2005-05-10-003422.txt
  66.  
  67. body     BODY_RNVV_SHORT /\b(rnore|n[eo]vv|vvant|lovv(?:e(?:r|st))?)\b/
  68. describe BODY_RNVV_SHORT Funny spelling of "more", "new", "lowest", etc.
  69. score     BODY_RNVV_SHORT 1
  70.