sb-rogue.rc

这是一个从音频信号里提取特征参量的程序

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Dean Westbury
#
# Updated and domains verified 5/02/02
# Last reported spam: 5/01/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](203\.42\.90\.12[8-9]|\
          203\.42\.90\.1[3-9][0-9]|\
          203\.42\.90\.2[0-4][0-9]|\
          203\.42\.90\.25[0-5]|\
          (^|[^-_0-9a-z])host-servers\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])kawananet\.com\.au([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])lopermanagement\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])winnet\.com\.au([^a-z0-9\.]|$))
{ DWESTBURY=yes }

:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  1100^1   (^|[^-_0-9a-z])aspenflair\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])santosweb\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])zedoweb\.com([^a-z0-9\.]|$)
{ DWESTBURY=yes }

:0
* DWESTBURY ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Dean Westbury"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -A"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# DM1.com (Robert Hicks)
#
# Updated and domains verified 5/02/02
# Last reported spam: 2/27/02
# Other Relevant Info:
#     Old time spamhaus, has gotten more discreet in its old age, but
#     is definitely opt-out and not opt-in. :/  Hosted by clever.net,
#     also old-time spammers.  (Sagenetworks is owned by the same people
#     who own clever.net.) These are the kind of idiots that lead
#     one to believe certain crooks can't be reformed.  (There is also
#     a report of at least one late-night, threatening phone call to
#     someone who reported these slimeballs.) :(
# Status: Active Spammers
#
:0 BH
* LEANTAG ?? no
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  1000^1   ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](205\.178\.180\.3|\
                    209\.145\.39\.156|\
                    209\.235\.6\.36|\
                    209\.235\.11\.10|\
                    209\.235\.64\.219)
*  1000^1   (^|[^-_0-9a-z])admail\.net([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])dm1\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])dm1-cc\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])dm1ftp\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])e-mailmatch\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])ifyouordernow\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])information-411\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])information411\.com([^a-z0-9\.]|$)
*  1000^1   (^|[^-_0-9a-z])postalnet1\.com([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: dm1.com/Robert Hicks"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail]" \
    -A"Cc: [e-mail],[e-mail],[e-mail]" \
    -A"Cc: [e-mail],[e-mail]" \
    -A"Cc: [e-mail]" \
    -A"Bcc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Gary Green
#
# Updated and domains verified 8/07/02
# Last reported spam: 7/28/02
# Other Relevant Info:
#    Australian spammer, very aggressive.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](202\.5\.125\.[569]|\
          202\.5\.125\.1[0-1]|\
          210\.10\.109\.226|\
          (^|[^-_0-9a-z])garygreen\.org([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])mindovermoney\.com\.au([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])powerlist\.info([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])selfdevelopment\.biz([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])wesolveit\.com\.au([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])wesolveit\.info([^a-z0-9\.]|$))
{ GGREEN=yes }

:0
*  LEANTAG ?? no
*! GGREEN ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])garygreen\.org([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])mindovermoney\.com\.au([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])powerlist\.info([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])selfdevelopment\.biz([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])wesolveit\.com\.au([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])wesolveit\.info([^a-z0-9\.]|$)
 { GGREEN=yes }
}

:0
* GGREEN ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Gary Green"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail]" \
    -A"Bcc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# The Hitman (Dan Hufnal)
#
# Updated and domains verified 5/02/02
# Last reported spam: 4/17/02
# Other Relevant Info:
#    Disconnected 12/29/97 by ACSI :)
#    Reconnected 1/15/98 by SOS Internet Services (sosis.com)
#    www.thehitman.com live at home.net
#    www.onlinebiz.net live at home.net :(
#    7/31/99 -- thedeaa.com live at cetlink.com.  I haven't heard of any direct
#     spam from Hufnal for some time, but I suspect he's just learned to use
#     throwaway accounts and relays effectively.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](207\.226\.247\.191([^a-z0-9\.]|$)|\
          207\.243\.124\.|\
          208\.44\.62\.|\
          209\.140\.94\.2([^a-z0-9\.]|$)|\
          209\.218\.24\.|\
          216\.189\.15\.|\
          216\.189\.2[0-1]\.|\
          (^|[^-_0-9a-z])101main\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])advantage-mkt\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])aimdirect\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])alternativeproducts\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])alwaysinnature\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])amymktg\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])aremis\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])awesomeamateur\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])astrologimedia\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])bestops\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])better-life\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])bitic\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])bizemall\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])biz-leads\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])bizmkt\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])biznessweb\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])biznetcards\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])bjain\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])business-mail\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])capella\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])capella-systems\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])careeropp\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cashingin\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])changes4u\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])charnet\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])chardap\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])chocodile-isle\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])christianchildren\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])chuck-biz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cigarzar\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cigarzar-1\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])classiccarcontest\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])c-mass\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cmpsrv\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cockatooconnection\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])codesden\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])combiz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])comp-picks\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])compsrv\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])compusrv\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])corporate-filings\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])corproadkill\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cosmicflyer\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cp-grp\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cpublishing\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cre8fun\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])csscom\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cvue\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cyber-cd\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])cyber-edge\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])danes\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])dapconcepts\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])darcodistribution\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])deaa\.org([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])digitaltechnology\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])directmarket\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])dna-1\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])drjohnenterprises\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])dvdcd\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])dzmail\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])eaglenterprises\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])eagle-team\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])earthorbit\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])easysavings\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])elan-vital\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])electricdereg\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])emailblaster\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])emailbuzz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])email-buzz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])email-leads\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])email-man\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])emailplaza\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])email-pro\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])eroticsexshows\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])e-serv\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])exsoft\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractorpro\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractorpro6\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractor-pro-company\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractorsoftware\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractor-software\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])eyeonmoney\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])ezbizz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])ez-cash\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])fastflood\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])fastleads\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])fastserver\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])fatfree4you\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])flashflood\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])foreclosuremagazine\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])free-2-choose\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])freebuy\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])freedom98\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])freesoft\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])freeusa\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])futurebiz\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])futuretech-enterprises\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])genevision\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])giantheap\.com([^a-z0-9\.]|$)|\