1
# SpamAssassin - ReplaceTags configuration
3
# Please don't modify this file as your changes will be overwritten with
4
# the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead.
5
# See 'perldoc Mail::SpamAssassin::Conf' for details.
8
# Licensed to the Apache Software Foundation (ASF) under one or more
9
# contributor license agreements. See the NOTICE file distributed with
10
# this work for additional information regarding copyright ownership.
11
# The ASF licenses this file to you under the Apache License, Version 2.0
12
# (the "License"); you may not use this file except in compliance with
13
# the License. You may obtain a copy of the License at:
15
# http://www.apache.org/licenses/LICENSE-2.0
17
# Unless required by applicable law or agreed to in writing, software
18
# distributed under the License is distributed on an "AS IS" BASIS,
19
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
20
# See the License for the specific language governing permissions and
21
# limitations under the License.
24
###########################################################################
26
# Requires the Mail::SpamAssassin::Plugin::ReplaceTags plugin be loaded.
28
ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
30
replace_tag A [gra\@\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xe4\xe3\xe2\xe0\xe1\xe2\xe3\xe4\xe5\xe60o]
32
replace_tag C [ck\xc7\xe7@]
34
replace_tag E [e3\xc8\xc9\xca\xcb\xe8\xe9\xea\xeb\xa4]
38
replace_tag I [il|!1y?\xcc\xcd\xce\xcf\xec\xed\xee\xef]
41
replace_tag L [il|!1\xa3]
42
replace_tag M (?:m|rn)
43
replace_tag N [n\xd1\xf1]
44
replace_tag O [go0\xd2\xd3\xd4\xd5\xd6\xd8\xf0\xf2\xf3\xf4\xf5\xf6\xf8]
48
replace_tag S [sz\xa6\xa7]
50
replace_tag U [uv\xb5\xd9\xda\xdb\xdc\xfc\xfb\xfa\xf9\xfd]
51
replace_tag V (?:[vu]|\\\/)
53
replace_tag X (?:[x\xd7]|><)
54
replace_tag Y [y\xff\xfd\xa5j]
56
replace_tag IMG (?:jpe?g|gif|png)
57
replace_tag SP [\s\d_*\$\%(),.:;?!}{\[\]|\/?^\#~\xa1`'+-]
58
replace_tag CUR [\$\xa5\xa3\xa4\xa2]
60
replace_inter SP [\s\d_*\$\%(),.:;?!}{\[\]|\/?^\#~\xa1`'+-]
62
replace_inter W2 \W{0,2}
63
replace_inter W3 \W{0,3}
68
###########################################################################
71
header SUBJECT_FUZZY_MEDS Subject =~ /(?:\b|_)(?!meds)<M><E><D><S>(?:\b|_)/i
72
describe SUBJECT_FUZZY_MEDS Attempt to obfuscate words in Subject:
73
replace_rules SUBJECT_FUZZY_MEDS
75
header __SUBJECT_FUZZY_VPILL Subject =~ /<inter W2><post P3>(?!viagra)<V><I><A><G><R><A>/i
76
replace_rules __SUBJECT_FUZZY_VPILL
77
meta SUBJECT_FUZZY_VPILL __SUBJECT_FUZZY_VPILL && !FUZZY_VPILL
78
describe SUBJECT_FUZZY_VPILL Attempt to obfuscate words in Subject:
80
header SUBJECT_FUZZY_CHEAP Subject =~ /<inter W2><post P3>\b(?!cheap)<C><H><E><A><P>(?:\b|<E>)/i
81
describe SUBJECT_FUZZY_CHEAP Attempt to obfuscate words in Subject:
82
replace_rules SUBJECT_FUZZY_CHEAP
84
header SUBJECT_FUZZY_PENIS Subject =~ /<inter W3><post P3>\b(?!(pen(is|ny)))<P><E><N><I><S>\b/i
85
describe SUBJECT_FUZZY_PENIS Attempt to obfuscate words in Subject:
86
replace_rules SUBJECT_FUZZY_PENIS
88
header SUBJECT_FUZZY_TION Subject =~ /<post P3>(?!tion)<T><I><O><N>/i
89
describe SUBJECT_FUZZY_TION Attempt to obfuscate words in Subject:
90
replace_rules SUBJECT_FUZZY_TION
92
###########################################################################
95
body FUZZY_AFFORDABLE /<inter W1><post P2>(?!affordable)<A><F><F><O><R><D><A><B><L><E>/i
96
describe FUZZY_AFFORDABLE Attempt to obfuscate words in spam
97
replace_rules FUZZY_AFFORDABLE
99
body FUZZY_AMBIEN /<inter W1><post P2>(?!ambien)<A><M><B><I><E><N>/i
100
describe FUZZY_AMBIEN Attempt to obfuscate words in spam
101
replace_rules FUZZY_AMBIEN
103
body FUZZY_BILLION /(?!billion)<B><I><L><L><I><O><N>/i
104
describe FUZZY_BILLION Attempt to obfuscate words in spam
105
replace_rules FUZZY_BILLION
108
body FUZZY_CPILL /(?!ciali[sz])<C><I><A><L><I><S>/i
109
describe FUZZY_CPILL Attempt to obfuscate words in spam
110
replace_rules FUZZY_CPILL
112
body FUZZY_CREDIT /<inter W1>(?!credit)<C><R><E><D><I><T>/i
113
describe FUZZY_CREDIT Attempt to obfuscate words in spam
114
replace_rules FUZZY_CREDIT
116
body FUZZY_ERECT /<inter W2><post P3>(?!erection)<E><R><E><C><T><I><O><N>/i
117
describe FUZZY_ERECT Attempt to obfuscate words in spam
118
replace_rules FUZZY_ERECT
121
body FUZZY_GUARANTEE /<inter W1><post P2>(?!guarantee)<G><U><A><R><A><N><T><E><E>/i
122
describe FUZZY_GUARANTEE Attempt to obfuscate words in spam
123
replace_rules FUZZY_GUARANTEE
125
body FUZZY_MEDICATION /<inter W1><post P2>(?!medication)<M><E><D><I><C><A><T><I><O><N>/i
126
describe FUZZY_MEDICATION Attempt to obfuscate words in spam
127
replace_rules FUZZY_MEDICATION
130
body FUZZY_MILLION /(?!million)<M><I><L><L><I><O><N>/i
131
describe FUZZY_MILLION Attempt to obfuscate words in spam
132
replace_rules FUZZY_MILLION
134
body FUZZY_MONEY /(?!money)<M><O><N><E><Y>/i
135
describe FUZZY_MONEY Attempt to obfuscate words in spam
136
replace_rules FUZZY_MONEY
138
body FUZZY_MORTGAGE /<inter W1><post P2>(?!mortgage)<M><O><R><T><G><A><G><E>/i
139
describe FUZZY_MORTGAGE Attempt to obfuscate words in spam
140
replace_rules FUZZY_MORTGAGE
142
body FUZZY_OBLIGATION /<inter W1><post P2>(?!obligation)<O><B><L><I><G><A><T><I><O><N>/i
143
describe FUZZY_OBLIGATION Attempt to obfuscate words in spam
144
replace_rules FUZZY_OBLIGATION
146
body FUZZY_OFFERS /(?!offers)<O><F><F><E><R><S>/i
147
describe FUZZY_OFFERS Attempt to obfuscate words in spam
148
replace_rules FUZZY_OFFERS
150
body FUZZY_PHARMACY /<inter W2><post P2>(?!pharmacy)<P><H><A><R><M><A><C><Y>/i
151
describe FUZZY_PHARMACY Attempt to obfuscate words in spam
152
replace_rules FUZZY_PHARMACY
154
body FUZZY_PHENT /<inter W1><post P2>(?!phentermine)<P><H><E><N><T><E><R><M><I><N><E>/i
155
describe FUZZY_PHENT Attempt to obfuscate words in spam
156
replace_rules FUZZY_PHENT
159
body FUZZY_PRESCRIPT /<inter W2><post P2>(?!prescription)<P><R><E><S><C><R><I><P><T><I><O><N>/i
160
describe FUZZY_PRESCRIPT Attempt to obfuscate words in spam
161
replace_rules FUZZY_PRESCRIPT
163
# left S off of negative look-ahead on purpose
164
body FUZZY_PRICES /<inter W2><post P2>(?!price)<P><R><I><C><E><S>/i
165
describe FUZZY_PRICES Attempt to obfuscate words in spam
166
replace_rules FUZZY_PRICES
168
body FUZZY_REFINANCE /<inter W2><post P2>(?!refinance)<R><E><F><I><N><A><N><C><E>/i
169
describe FUZZY_REFINANCE Attempt to obfuscate words in spam
170
replace_rules FUZZY_REFINANCE
172
body FUZZY_REMOVE /(?!remove)<R><E><M><O><V><E>/i
173
describe FUZZY_REMOVE Attempt to obfuscate words in spam
174
replace_rules FUZZY_REMOVE
176
body FUZZY_ROLEX /(?!rolex)<R><O><L><E><X>/i
177
describe FUZZY_ROLEX Attempt to obfuscate words in spam
178
replace_rules FUZZY_ROLEX
180
body FUZZY_SOFTWARE /(?!software)<S><O><F><T><W><A><R><E>/i
181
describe FUZZY_SOFTWARE Attempt to obfuscate words in spam
182
replace_rules FUZZY_SOFTWARE
184
body FUZZY_THOUSANDS /(?!thousands)<T><H><O><U><S><A><N><D><S>/i
185
describe FUZZY_THOUSANDS Attempt to obfuscate words in spam
186
replace_rules FUZZY_THOUSANDS
189
body FUZZY_VLIUM /<inter W1><post P2>(?!valium)<V><A><L><I><U><M>/i
190
describe FUZZY_VLIUM Attempt to obfuscate words in spam
191
replace_rules FUZZY_VLIUM
194
body FUZZY_VIOXX /<inter W1><post P2>(?!vioxx)<V><I><O><X><X>/i
195
describe FUZZY_VIOXX Attempt to obfuscate words in spam
196
replace_rules FUZZY_VIOXX
198
body FUZZY_VPILL /(?!viagra)<V><I><A><G><R><A>/i
199
describe FUZZY_VPILL Attempt to obfuscate words in spam
200
replace_rules FUZZY_VPILL
202
body FUZZY_XPILL /<inter W3><post P2>(?!xanax)<X><A><N><A><X>/i
203
describe FUZZY_XPILL Attempt to obfuscate words in spam
204
replace_rules FUZZY_XPILL
206
endif # Mail::SpamAssassin::Plugin::ReplaceTags
added
removed
pkgrules/25_replace.cf
