sb_isip.rc

这是一个从音频信号里提取特征参量的程序

# Spams like the Nigerian 4-1-9 advance fee fraud that are sent to promote known
# illegal and often dangerous scams that are under investigation by
# Interpol, the FBI, or another national police force or forces.  Usually
# the SpamBouncer will not try to autocomplain about these spams, which
# normally are heavily forged to conceal their origin, but may report
# them to the appropriate police forces where possible.

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-fraud.rc }


# SMALL FRY
#
# Spam sites in this category are considered "small fry" not worth a
# full entry in the Spam Bouncer (which quickly gets big enough to
# slow down delivery of mail), but are definitely spammers.

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-smallfry.rc }


# SPAM MAILER SOFTWARE

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-spamsw.rc }


# GENERIC SPAM HEADERS

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-spamheaders.rc }



##########################################################################

# PROBABLE SPAM

# The remaining recipes filter out mail with certain subjects
# and To: lines which almost always indicate a spam and which
# are difficult to catch otherwise.  Since there's no way to
# be absolutely certain this stuff is from a spammer, though, it
# is handled as blocked mail rather than spam.  DO NOT send this
# email to /dev/null unless you don't mind loosing valid email!


# CHECK THE BLACKLISTS
# This recipe checks those blacklists you have configured the
# SpamBouncer to use, which may include one of the MAPS blacklists, 
# one of the Osirusoft blacklists, one of the ORBS descendents, 
# the SpamHaus.org blacklist, or others.

:0 
* USE_STRICT ?? yes
{ INCLUDERC=${SBDIR}/sb-blacklists.rc }


# CHECK FOR SOCKS PROXY SERVERS
# This recipe checks the Received: headers of your email to see if
# it was sent via a known open SOCKS proxy server, which is used
# by some new spam software to get around port 25/outgoing SMTP
# blocking on dial-up lines by many ISPs.

:0 
* USE_STRICT ?? yes
{ INCLUDERC=${SBDIR}/sb-proxysocks.rc }


# BLOCKED MAIL SOFTWARE
# Mass mailers which aren't always used for spamming, but usually are.

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-blocksw.rc }


# BLOCKED HEADERS
# Headers that usually indicate spam, but not always
# ISIP modification: removed some tests and added others
#
#INCLUDERC=${SBDIR}/sb-blockheaders.rc

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb_isip_blockheaders.rc }


# LANGUAGE FILTERS
# Languages that you shouldn't receive
# 
# These recipes filter out email sent in Chinese and other languages which use
# a non-Latin character set and put it in your BLOCKFOLDER.  If you get email
# in one of these languages, you can set the one of the language variables
# to skip checking for that language.  For example, you can set CHINESE=yes
# if you get email in Chinese, or KOREAN=yes if you get email in Korean.
#
# Given the prevalence of spammers in China and certain other Asian countries
# right now, this extra filter is likely to catch a lot of spam which normal
# pattern matching filters written by someone who doesn't speak or read
# Chinese or Korean won't catch. :)

:0 
* USE_STRICT ?? yes
{ INCLUDERC=${SBDIR}/sb-languages.rc }


# PATTERN MATCHING
#
# Procmail weighted "scoring technique" used to analyze body text of
# email to spot spam which cannot be spotted by analyzing the headers
# of the spam -- spam sent from throwaway accounts or "whackamole"
# spam.
#
# The first recipe sets the email's default score at negative 1000 --
# only if the cumulative "score" of header and body string "hits", or
# recipes which result in a match, equals or exceeds 1000 will the
# email be tagged as probable spam with a Spam Rule of "Pattern Match"
# and diverted to the BLOCKFOLDER.
#
# The numbers between the "*" at the beginning of each condition and
# the start of the actual condition represent the score given to a
# match for that condition.  The first number represents the score
# for the first match.  The second number, after the caret "^", represents
# the exponent used to calculate the score for a second and subsequent
# matches.
#
# For example, a scoring formula of 100^1 means that the first match is
# given a score of 100, and subsequent matches are modified by an exponent,
# or "power", of one.  Since any number to the first power equals itself,
# this means that each match for this recipe will be given a score of 100.
# Ten such matches will result in a score of 1000, which (unless other
# recipes reduced this score) would cause the Spam Bouncer to classify this
# particular piece of email as probable spam and divert it to the BLOCKFOLDER.
#
# A scoring formula of 300^.5 means that the first match is given a score
# of 300; the second of 300^.5, which is 150; the third a score of 300^(.5*2),
# which is 75, and so on.  The cumulative score would be 300+150+75....
# A recipe of this type weighs first mention of the suspect word or phrase
# more heavily than subsequent mentions, and thus avoids classifying email
# as spam based solely on the presence of a single suspect word or phrase
# since the cumulative score for any number of matches can never exceed a
# certain maximum number.
#
# A scoring formula of 50^2, on the other hand, weighs the first occurrence
# of a suspect word or phrase relatively lightly, but subsequent mentions
# ever more heavily.  This is useful for catching spam based on common spam
# keywords which may appear once or twice in non-spam email, but frequently
# appear many times in the text of a spam email.
#
# A scoring formula of 300^0 weighs the first occurrence of a suspect
# word or phrase at 300, and ignores subsequent matches.  This is useful
# for tests for a typical spam phrase in the Subject: header, where the
# phrase will not appear twice -- it speeds up processing.
#
# For more information on how Procmail Scoring works, consult the Procmail
# scoring manual on your system by typing "man procmailsc".

:0 f
* PATTERNMATCHING ?? NONE
| ${FORMAIL} -A"X-SBPass: No Pattern Matching"

:0E
{
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-bogus_urls.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-disclaimer.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-scripts.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-html.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-bulk_email_advertising.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-chain_letters.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-credit.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-detective.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-diploma.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-health.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-mmf.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-onlinebiz.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-stock.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-webhost.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-websitetraffic.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-websurf.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-weight_loss.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-work_from_home.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-xxx.rc }

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-other_patterns.rc }

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-spamphone.rc }
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-spampostal.rc }
:0 

# ISIP modification: removed haven domains
#
#* USE_SIMPLE ?? yes
#{ INCLUDERC=${SBDIR}/sb-pt-havendomains.rc }

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-pt-spamsubjects.rc }
}
# End PATTERNMATCHING Section


# IRRESPONSIBLE PROVIDERS
#    (ISPs and NSPs which host a lot of spam sites, and which do not have
#     adequate AUP/TOS or ignore them, but which also have non-spamming
#     customers.)
# ISIP modification: This seemed too extreme - Uncomment this to block ISPs
#INCLUDERC=${SBDIR}/sb-blockisps.rc


# Retired Spamhouses
#  Former spam sites which have quit spamming, but not officially renounced
#  spamming, are moved here after three to six months of no spam.  After
#  another three to six months of no spam, they are dropped from the 
#  SpamBouncer.

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-retired.rc }


# COMMON FROM FORGERIES
# Checks for forgeries on specific domains that spammers often forge.

:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-domain_from_forgeries.rc }


# Free email sites
:0 hf
* FREEMAIL ?? NONE
| ${FORMAIL} -A"X-SBPass: No Freemail Filtering"

:0E
{
:0 
* USE_SIMPLE ?? yes
{ INCLUDERC=${SBDIR}/sb-freemail.rc }
}


# BLOCKED EMAIL NOTIFICATION ROUTINE
:0
* BLOCKTHIS ?? yes
* !ADMINTAG ?? yes
* !BULKTAG ?? yes
* !VIRUSTAG ?? yes
{
 :0
 { BLOCKPID=`echo $$` }
 
 :0 c:
 blocktemp.${BLOCKPID}

 :0 c: blocktemp.${BLOCKPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/notify;\
    echo " ********** The password is ${BYPASSWD}. **********";\
    echo " ";\
    echo "=-=-=-=-=-=-=-=-=-=";\
    echo " ";\
    cat blocktemp.${BLOCKPID};\
    ${RM} -f blocktemp.${BLOCKPID}) \
    | ${SENDMAIL} -oi -t
}

# BOUNCE ROUTINE
:0
* BOUNCETHIS ?? yes
* !ADMINTAG ?? yes
* !BULKTAG ?? yes
* !VIRUSTAG ?? yes
{
 :0
 { BOUNCEPID=`echo $$` }
 
 :0 c:
 bouncetemp.${BOUNCEPID}

 :0
 { SPAMFROM=`${FORMAIL} -rt -xTo:` }

 :0
 { SPAMERROR=`${FORMAIL} -xErrors-To:` }

 :0
 { SPAMDATE=`date` }

 :0 c: bouncetemp.${BOUNCEPID}.lock
 | (${FORMAIL} -rt \
    -I"From: MAILER-DAEMON@$HOST (Mail Delivery Subsystem)" \
    -I"Subject: Returned mail: User unknown" \
    -I"Auto-Submitted: auto-generated (failure)" \
    -A"Bcc: ${SPAMERROR}" \
    -A"X-Loop: MAILER-DAEMON@${HOST}";\
     echo "The original message was received at ${SPAMDATE}";\
     echo "from ${SPAMFROM}";\
     echo " ";\
     echo "----- The following addresses had permanent fatal errors -----";\
     echo "${LOGNAME}@${HOST}";\
     echo " ";\
     echo "----- Transcript of session follows -----";\
     echo "... while talking to ${HOST}.:";\
     echo ">>> RCPT To:<${LOGNAME}@${HOST}>";\
     echo "<<< 550 Bad recipient";\
     echo "550 ${LOGNAME}@${HOST}... User unknown";\
     echo "Reporting-MTA: dns; ${HOST}";\
     echo " ";\
     echo "Arrival-Date: ${SPAMDATE}";\
     echo "Final-Recipient: RFC822; ${LOGNAME}@${HOST}";\
     echo "Action: failed";\
     echo "Status: 5.1.1";\
     echo "Diagnostic-Code: SMTP; 550 Bad recipient";\
     echo "Last-Attempt-Date: ${SPAMDATE}";\
     cat bouncetemp.${BOUNCEPID};\
     ${RM} -f bouncetemp.${BOUNCEPID}) \
     | ${SENDMAIL} -oi -t
}

}
# End of :0 E wrapper around NOLOOP

}
# End of :0 E wrapper around BYPASSWD

}
# End of :0 E wrapper around Autobot/Abuse

}
# End of :0 E wrapper around Legitimate Mailing List (External)

}
# End of :0 E wrapper around Legitimate Mailing List (Internal)

}
# End of :0 E wrapper around GLOBALNOBOUNCE

}
# End of :0 E wrapper around NOBOUNCE

}
# End of :0 E wrapper around Virus Filter

}
# End of :0 E wrapper around Critical Variables check

:0 f
* VIRUSTAG ?? yes
| ${FORMAIL} -A"X-SBClass: Virus"

  :0 Aw
  * !FILTER ?? yes
  ${VIRUSFOLDER}

:0 f
* SPAMTAG ?? yes
* !VIRUSTAG ?? yes
| ${FORMAIL} -A"X-SBClass: Spam"

  :0 Aw
  * !FILTER ?? yes
  ${SPAMFOLDER}

:0 f
* BLOCKTAG ?? yes
* !VIRUSTAG ?? yes
* !SPAMTAG ?? yes
| ${FORMAIL} -A"X-SBClass: Blocked"

  :0 Aw
  * !FILTER ?? yes
  ${BLOCKFOLDER}

:0 f
* ADMINTAG ?? yes
* !VIRUSTAG ?? yes
* !SPAMTAG ?? yes
* !BLOCKTAG ?? yes
| ${FORMAIL} -A"X-SBClass: Admin"

:0 f
* BULKTAG ?? yes
* !ADMINTAG ?? yes
* !VIRUSTAG ?? yes
* !SPAMTAG ?? yes
* !BLOCKTAG ?? yes
| ${FORMAIL} -A"X-SBClass: Bulk"

:0 f
* !BULKTAG ?? yes
* !ADMINTAG ?? yes
* !VIRUSTAG ?? yes
* !SPAMTAG ?? yes
* !BLOCKTAG ?? yes
| ${FORMAIL} -A"X-SBClass: OK"

LINEBUF=${OLDLINEBUF}

# DEBUG
:0
* DEBUG ?? yes
{ VERBOSE=${OLDVERBOSE} }