home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
ftp.f-secure.com
/
2014.06.ftp.f-secure.com.tar
/
ftp.f-secure.com
/
support
/
hotfix
/
fsis
/
IS-SpamControl.fsfix
/
iufssc
/
rules
/
96_fs-rolex.cf
< prev
next >
Wrap
Text File
|
2006-11-29
|
2KB
|
54 lines
# 96_fs-rolex.cf -- era Tue Nov 16 16:03:24 2004
# Copyright (C) 2004 F-Secure Corporation
# $Id: 96_fs-rolex.cf 3056 2006-02-28 13:16:33Z eriker $
ifplugin FS::MsgStructure
# rule: MSGSTRUCT_ROLEX_SHORT
# test: spam-2004-12-13/-388190279-1102822227.V802I3c2db.localhost.localdomain
# added 2004-11-18 or thereabouts
define_structure MSGSTRUCT_ROLEX_SHORT
structure ^.{0,25}([Rr].?[Oo0].?[Ll1].?[Ee3].?
structure ([Xx]|([Cc][Kk]|[Cc]|[Kk]).?[Ss5])|
structure [Ww].?[Aa4].?[Tt\+].?[Cc].?[Hh]).{0,25}\n\n{0,2}
structure http://[-a-z0-9_./?&+=%,]{5,120}\n{1,10}$
describe MSGSTRUCT_ROLEX_SHORT Attempts to sell you a Rolex
score MSGSTRUCT_ROLEX_SHORT 5
# rule: MSGSTRUCT_ROLEX_HILTON
# test: spam-2004-12-13/-388190279-1102822227.V802I3c2db.localhost.localdomain
# added 2004-11-18 or thereabouts
# edit 2004-12-15: added provision for optional greeting at top of message
######## FIXME: no hits in January, update? obsolete?
define_structure MSGSTRUCT_ROLEX_HILTON
structure ^
structure (?:\n{0,7}[A-Za-z][-'a-z]+(?: [-'a-z])*,[ \t]*\n{1,7})?
structure Do you want a [Rr]olex watch\?\n\n
structure In our online store you can buy replicas of [Rr]olex watches.(?: )
structure They look\n
structure and feel exactly like the real thing\.\n\n
structure - We have 20\+ different brands in our selection\n
structure - Free shipping if you order 5 or more\n
structure - Save up to 40% compared to the cost of other replicas\n
structure - Standard [Ff]eatures:\n
structure (?: )- Screw-in crown\n
structure (?: )- Unidirectional turning bezel where appropriate\n
structure (?: )- All the appropriate [Rr]olex logos, on crown and dial\n
structure (?: )- Heavy weight\n\n
structure Visit us: http://[-a-z0-9_./?&+=%,]{5,120}\n\n
structure Best regards,\n
structure [A-Z][a-z]{0,40}(?:\.? [A-Z][a-z]{0,40}){1,5}\n\n\n
structure No thanks: http://[-a-z0-9_./?&+=%,]{5,120}\.php\n\n$
describe MSGSTRUCT_ROLEX_HILTON "Hilton Jones" Rolex template
score MSGSTRUCT_ROLEX_HILTON 7
endif