3
# URL: http://wiki.fastmail.fm/index.php?title=SanjaySieveSpamFilter
9
# Blacklisted sender domains
10
header :contains ["from", "Received", "X-Sender", "Sender",
11
"To","CC","Subject","X-Mail-from"]
12
[ "123greetings", "allfreewebsite.com",
13
"new-fields.com","atlasrewards","azogle.com",
14
"bannerport.net","bettingextreme.com","bigemailoffers.com",
16
"beyondoffers.net", ".biz ", ".biz]",
17
"cavalrymail.com","ciol.com","citywire.co.uk",
19
"consumergamblingreport","creativemailoffers.com","creativeoffers.com",
20
"daily-promotions.com",
21
"dailypromo.","dailypromotions.",
22
"dandyoffers","dlbdirect",
23
"e54.org", "email-specials.net","email-ware.com","emailoffersondemand",
24
"emailbargain.com","emailofferz","emailrewardz","etoll.net","emailvalues.com",
25
"evaluemarketing.com","exitrequest.com",
26
"fantastic-bargain.com","fpsamplesmail.com","freelotto",
27
"findtv.com", "freddysfabulousfinds.com",
29
"hotdailydeal.com","hulamediamail","hy-e.net",
30
"inboxbargains.com","idealemail.com",
31
"jackpot.com","jpmailer.com",
32
"lolita","lund.com.br",
33
"mafgroup.com","mailasia.com","mailtonic.net","migada.com","ms83.com",
34
"nationaloffers.com","nexdeals.com ",
35
"offercatch.com","offermagnet.com","offerservice.net","offertime.com",
36
"offersdaily.net","optnetwork.net",
37
"ombramarketing.com","on-line-offers.com","outblaze.com",
38
"permissionpass","primetimedirect.net","productsontheweb.net",
39
"rapid-e.net","recessionspecials", "redmoss","remit2india",
40
"sampleoffers.com","savingsmansion.com","sendoutmail.com","simpleoffers.com",
41
"specialdailydeals4u.com","Select-Point.net",
42
"speedyvalues.com","sportsoffers","sporttime.info","suntekglobal.com",
43
"superstorespecials.com", "synapseconnect","sunsetterawnings.com",
44
"thefreesamplenews","truemail.net",
45
"ub-kool","ultimatesports.info","uniquemailoffers","utopiad.com",
47
"valuesdirect","virtualoffers.net",
48
"wagerzine", "webdpoffrz",
50
"z-offer.com", "zipido.com"
53
# Blacklisted ip subnets due to excessive spam from them
54
header :contains "Received"
58
"[63.123.149.", "[63.209.206.", "(63.233.30.73", "[63.251.200.",
59
"[64.41.183.","[64.49.250.", "[64.57.188.", "[64.57.221.",
61
"[64.70.17.", "[64.70.44.", "[64.70.53.",
62
"[64.39.27.6", "[64.39.27.7","[64.191.25.","[64.191.36.",
64
"[64.125.181.", "[64.191.123.", "[64.191.23.", "[64.239.182.",
66
"[66.46.150.", "[66.62.162.", "[66.118.170.", "[66.129.124.",
67
"[66.205.217.", "[66.216.111.", "[66.239.204.",
69
"[80.34.206.", "[80.80.98.",
76
"[200.24.129.", "[200.161.203.",
77
"[202.164.182.76]","[202.57.69.116",
78
"[203.19.220.","[203.22.104.","[203.22.105.",
81
"[206.26.195.", "[206.154.33.","[206.169.178",
83
"[208.46.5.","[208.187.",
84
"[209.164.27.","[209.236.",
86
"[211.101.138.199","[211.185.7.125]","[211.239.231.",
88
"[213.47.250.139", "[213.225.61.",
89
"[216.22.79.","[216.39.115.","[216.99.240.",
90
"[216.126.32.", "[216.187.123.","[217.36.124.53",
91
"[218.145.25","[218.52.71.103","[218.158.136.115",
92
"[218.160.42.74", "[218.242.112.4]"
95
# Blacklisted SpamAssassin flags
96
header :contains ["SPAM", "X-Spam-hits"]
97
["ADDRESSES_ON_CD","ACT_NOW","ADULT_SITE", "ALL_CAP_PORN",
98
"AMATEUR_PORN", "AS_SEEN_ON",
99
"BAD_CREDIT", "BALANCE_FOR_LONG_20K", "BARELY_LEGAL", "BEEN_TURNED_DOWN",
100
"BANG_GUARANTEE", "BANG_MONEY","BASE64_ENC_TEXT",
101
"BAYES_99","BAYES_90",
102
"BE_BOSS", "BEST_PORN", "BULK_EMAIL",
103
"CASINO", "CONSOLIDATE_DEBT", "COPY_ACCURATELY", "COPY_DVD",
104
"DIET", "DO_IT_TODAY","DOMAIN_4U2",
105
"EMAIL_MARKETING","EMAIL_ROT13", "EXPECT_TO_EARN","EARN_MONEY",
106
"FIND_ANYTHING", "FORGED_AOL_RCVD",
107
"FORGED_HOTMAIL_RCVD", "FORGED_YAHOO_RCVD",
108
"FORGED_RCVD_TRAIL", "FORGED_JUNO_RCVD",
110
"FREE_MONEY","FREE_PORN",
111
"GENTLE_FEROCITY", "GET_PAID", "GUARANTEED_STUFF", "GUARANTEED_100_PERCENT",
112
"HAIR_LOSS", "HIDDEN_ASSETS", "HGH,", "HOME_EMPLOYMENT","HOT_NASTY","HTTP_ESCAPED_HOST",
113
"HTTP_USERNAME_USED","HTML_FONT_INVISIBLE",
114
"IMPOTENCE","INVALID_MSGID","INVESTMENT",
115
"LESBIAN","LIVE_PORN","LOSE_POUNDS",
116
"MARKETING_PARTNERS", "MORTGAGE_OBFU", "MORTGAGE_RATES",
117
"NIGERIAN_SCAM", "NIGERIAN_TRANSACTION_1", "NIGERIAN_BODY", "NUMERIC_HTTP_ADDR",
118
"NO_MX_FOR_FROM","NO_DNS_FOR_FROM",
119
"OBFUSCATING_COMMENT", "ONLINE_PHARMACY",
121
"PREST_NON_ACCREDITED", "PURE_PROFIT","PORN_4",
122
"RCVD_IN_DSBL", "RCVD_IN_OSIRUSOFT_COM","RCVD_IN_BL_SPAMCOP_NET", "RCVD_IN_SBL",
123
"RCVD_IN_MULTIHOP_DSBL", "RCVD_IN_RELAYS_ORDB_ORG", "RCVD_IN_UNCONFIRMED_DSBL",
124
"RCVD_FAKE_HELO_DOTCOM", "RCVD_IN_RFCI", "RCVD_IN_NJABL","RCVD_IN_SORBS",
125
"REFINANCE", "REVERSE_AGING",
126
"SAVE_ON_INSURANCE","SPAM_REDIRECTOR", "STOCK_ALERT", "STOCK_PICK", "STRONG_BUY",
127
"SEE_FOR_YOURSELF", "SUPPLIES_LIMITED",
128
"THE_BEST_RATE","TONER",
130
"VACATION_SCAM", "VIAGRA", "VJESTIKA",
131
"WHILE_SUPPLIES", "WORK_AT_HOME",
132
"X_OSIRU_DUL", "X_OSIRU_SPAMWARE_SITE", "X_OSIRU_SPAM_SRC"
136
# Blacklisted subjects
138
header :contains ["From","Subject"]
140
"ADV:", "adult dvd", "adult movie", "adultdirect", "adultemail",
141
"background check", "bankrupt", "boobs", "business opportunity","big@boss.com",
142
"casino", "cash guarantee",
143
"debt free", "diet bread", "ebay secrets", "erection",
144
"financial freedom", "free credit",
145
"gambl", "gov grants", "jackpot",
146
"life insurance", "lottery", "lotto",
147
"mortgage", "nude", "OTCBB",
148
"penis", "porn", "promotion", "proven System",
150
" sex ", "skin resurfacing", "special offer",
151
"ultimate software", "viagra", "V1AGRA", "vivatrim",
152
"win money","work from home", "xxx"
155
# often spam emails to multiple addresses with same name & different domain
156
header :matches ["To","CC"]
157
["*fastmail*fastmail*fastmail*fastmail*fastmail*"],
159
# Almost all emails from these domains is spam (at least for me)
160
header :contains ["from", "received"]
161
[".ru ",".jp ", ".kr ", ".pt ",".pl ",".at ",".cz ",
162
".ru>",".jp>", ".kr>", ".pt>", ".pl>",".at>",".cz>"],
164
# Really high SpamAssassin scores (15.0+)
165
header :matches ["X-Spam-score","X-Remote-Spam-score"] [
166
"1?.?", "2?.?", "3?.?", "4?.?", "5?.?", "6?.?" # 10.0 to 69.9
169
fileinto "INBOX.Spam.discard";