projects / proxmox-spamassassin.git / blame
| Commit | Line | Data |
|---|---|---|
| b780ea8d SI |
1 | # SpamAssassin rules file: advance fee fraud rules (Nigerian 419 scams) |
| 2 | # | |
| 3 | # Please don't modify this file as your changes will be overwritten with | |
| 4 | # the next update. Use /etc/mail/spamassassin/local.cf instead. | |
| 5 | # See 'perldoc Mail::SpamAssassin::Conf' for details. | |
| 6 | # | |
| 7 | # <@LICENSE> | |
| 8 | # Licensed to the Apache Software Foundation (ASF) under one or more | |
| 9 | # contributor license agreements. See the NOTICE file distributed with | |
| 10 | # this work for additional information regarding copyright ownership. | |
| 11 | # The ASF licenses this file to you under the Apache License, Version 2.0 | |
| 12 | # (the "License"); you may not use this file except in compliance with | |
| 13 | # the License. You may obtain a copy of the License at: | |
| 14 | # | |
| 15 | # http://www.apache.org/licenses/LICENSE-2.0 | |
| 16 | # | |
| 17 | # Unless required by applicable law or agreed to in writing, software | |
| 18 | # distributed under the License is distributed on an "AS IS" BASIS, | |
| 19 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| 20 | # See the License for the specific language governing permissions and | |
| 21 | # limitations under the License. | |
| 22 | # </@LICENSE> | |
| 23 | # | |
| 24 | ########################################################################### | |
| 25 | ||
| cabe596e | 26 | require_version 3.004006 |
| b780ea8d SI |
27 | |
| 28 | # predicate naming used to avoid renumbering | |
| 29 | # 1. assign new rules a random unique three letter sequence | |
| 30 | # 2. sort on rule definition, not rule name | |
| 31 | ||
| 32 | header __FRAUD_VQE Subject =~ /^(?:Re:|\[.{1,10}\])?\s*(?:very )?urgent\s+(?:(?:and|&)\s+)?(?:confidential|assistance|business|attention|reply|response|help)\b/i | |
| 33 | ||
| 34 | body __FRAUD_DBI /(?:\bdollars?\b|\busd(?:ollars)?(?:[0-9]|\b)|\bus\$|\$[0-9,.]{6,}|\$[0-9].{0,8}[mb]illion|\$[0-9.,]{2,10} ?m|\beuros?\b|u[.]?s[.]? [0-9.]+ m)/i | |
| 35 | body __FRAUD_KJV /(?:claim|concerning) (?:the|this) money/i | |
| 36 | body __FRAUD_IRJ /(?:finance|holding|securit(?:ies|y)) (?:company|firm|storage house)/i | |
| 37 | body __FRAUD_NEB /(?:government|bank) of nigeria/i | |
| 38 | body __FRAUD_XJR /(?:who was a|as a|an? honest|you being a|to any) foreigner/i | |
| 39 | body __FRAUD_DPR /\b(?:(?:respond|reply) (?:urgently|immediately)|(?:urgent|immediate|earliest) (?:reply|response))\b/i | |
| 40 | body __FRAUD_PTS /\b(?:ass?ass?inat(?:ed|ion)|murder(?:e?d)?|kill(?:ed|ing)\b[^.]{0,99}\b(?:war veterans|rebels?))\b/i | |
| 41 | body __FRAUD_BEP /\b(?:bank of nigeria|central bank of|trust bank|apex bank|amalgamated bank)\b/i | |
| 42 | body __FRAUD_TDP /\b(?:business partner(?:s|ship)?|silent partner(?:s|ship)?)\b/i | |
| 43 |