sb-rogue.rc

这是一个从音频信号里提取特征参量的程序

*   300^1   HUGE SAVINGS over new balls
*   300^0.5 balls
*   600^1   Titleist
*   500^1   X-OUTS
*   500^1   ballman\.com
*   500^1   The Ballman
*   500^1   Dana Jones
*   300^1   Yes we have BALATAS\.
*   500^1   281[-\. )]*560[-\. ]*0132
*   500^1   281[-\. )]*561[-\. ]*5033
*   500^1   281[-\. )]*991[-\. ]*6442
*   500^1   281[-\. )]*991[-\. ]*6800
*   300^1   888[-\. )]*205[-\. ]*4059
*   500^1   888[-\. )]*507[-\. ]*7566
{ DANAJONES=yes }

:0
* DANAJONES ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Dana Jones"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail],[e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Sam Khuri
#
# Updated and domains verified 5/02/02
# Last reported spam:  3/01/02
# Other Relevant Info:
#    7/11/99:
#     Long-time spammer in the Atlanta area, uses throwaways and doesn't
#     have a known email address or domain.  Identified here for
#     tracking purposes.
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* !^Subject: .*\(fwd\)
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*   500^1    Benchmark Supply
*   500^1    D \& J Printing Corporation
*   500^1    Static Systems
*   500^1    Vertex Technologies
*   500^1    7540 Bridgegate
*   500^1    2564 Cochise Drive
*   300^1    Atlanta.*30350
*   300^1    Acworth.*30102
*  1000^1    770[-\. )]*399[-\. ]*0953
*  1000^1    770[-\. )]*974[-\. ]*8228
*  1000^1    800[-\. )]*586[-\. ]*0540
*  1000^1    800[-\. )]*650[-\. ]*5062
*  1000^1    888[-\. )]*288[-\. ]*9043
*  1000^1    888[-\. )]*977[-\. ]*1577
*  1000^1    888[-\. )]*248[-\. ]*4930
*  1000^1    dprint2000@aol\.com([^a-z0-9\.]|$)
*  1000^1    quickinspirations\.com([^a-z0-9\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Khuri"

 :0
 { SPAMTAG=yes }
}


# Monsterhut/Beaverhome (Todd Pelow)
#
# Updated and domains verified 8/16/02
# Last reported spam: 8/16/02
# Other Relevant Info:
#    Sued their provider PaeTec when PaeTec tried to disconnect them,
#    got restraining order requiring that PaeTec keep them connected.
#    IDP these slimeballs!
#    8/14/01: Got a new contract with sysr.com, possibly a pink
#    contract.  (A contract that explicitly allows spamming.)  Since
#    I can't tell what part of sysr.com belongs to them, I'm blocking
#    the whole thing -- it's a small ISP.
#    8/02/02: Assets frozen by the NY State Supreme Court, per request
#     of the NY Attorney General.  I =hope= this is the end of this
#     despicable slimeball, but don't count on it. :/
#    8/02/02: They're =still= spamming, even with assets frozen and
#     everything.  Chutzpah has a new definition. <sigh>
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](12\.45\.19\.12[8-9]|\
          12\.45\.19\.1[3-9][0-9]|\
          12\.45\.19\.2[0-4][0-9]|\
          12\.45\.19\.25[0-5]|\
          12\.105\.4\.[0-9][0-9]?|\
          12\.105\.4\.1[0-1][0-9]|\
          12\.105\.4\.12[0-7]|\
          12\.145\.220\.1[6-9]|\
          12\.145\.220\.[2-3][0-9]|\
          12\.145\.220\.4[0-7]|\
          12\.145\.220\.12[8-9]|\
          12\.145\.220\.1[3-9][0-9]|\
          12\.145\.220\.2[0-4][0-9]|\
          12\.145\.220\.25[0-5]|\
          64\.23\.8\.9[6-9]|\
          64\.23\.8\.10[0-3]|\
          216\.133\.106\.[8-9]|\
          216\.133\.106\.1[0-5]|\
          beaverhome\.com([^a-z0-9\.]|$)|\
          furniture4free\.net([^a-z0-9\.]|$)|\
          mailpromopack\.net([^a-z0-9\.]|$)|\
          monsterhut\.com([^a-z0-9\.]|$)|\
          whitecap\.cc([^a-z0-9\.]|$))
{ MONSTERHUT=yes }

:0
* MONSTERHUT ?? no
* LEANTAG ?? no
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  1100^0   12\.105\.4\.[0-9][0-9]?
 *  1100^0   12\.105\.4\.1[0-1][0-9]
 *  1100^0   12\.105\.4\.12[0-7]
 *  1100^0   12\.145\.220\.1[6-9]
 *  1100^0   12\.145\.220\.[2-3][0-9]
 *  1100^0   12\.145\.220\.4[0-7]
 *  1100^0   12\.145\.220\.12[8-9]
 *  1100^0   12\.145\.220\.1[3-9][0-9]
 *  1100^0   12\.145\.220\.2[0-4][0-9]
 *  1100^0   12\.145\.220\.25[0-5]
 *  1100^0   64\.23\.8\.9[6-9]
 *  1100^0   64\.23\.8\.10[0-3]
 *  1100^0   216\.133\.106\.[8-9]
 *  1100^0   216\.133\.106\.1[0-5]
 *  1100^1   beaverhome\.com([^a-z0-9\.]|$)
 *  1100^1   mailpromopack\.net([^a-z0-9\.]|$)
 *  1100^1   monsterhut\.com([^a-z0-9\.]|$)
 *  1100^1   whitecap\.cc([^a-z0-9\.]|$)
 { MONSTERHUT=yes }
}

:0
* MONSTERHUT ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Beaverhome/Monsterhut"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 BH c: spamtemp.${SPAMPID}.lock
 * -1000^0
 *  1100^1   12\.105\.4\.
 *  1100^1   12\.145\.220\.
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -A"To: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t

 :0 BH c: spamtemp.${SPAMPID}.lock
 * -1000^0
 *  1100^1   64\.23\.8\.194
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -A"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t

 :0 BH c: spamtemp.${SPAMPID}.lock
 * -1000^0
 *  1100^1   209\.177\.9[6-9]\.
 *  1100^1   209\.177\.10[0-9]\.
 *  1100^1   209\.177\.11[0-1]\.
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -A"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t

 :0 BH c: spamtemp.${SPAMPID}.lock
 * -1000^0
 *  1100^0   216\.133\.106\.
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -A"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# SAMCO
#
# Updated and domains verified 5/02/02
# Last reported spam: 3/15/02
# Other Relevant Info:
#    Block of spam software sellers.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]((^|[^-_0-9a-z])bulkemailpeople\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])desktopserver98\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])e-mailblaster\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])e-mailmagnet\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractor-pro\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])extractor-pro98\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])listsorcerer\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])marketingmasters\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])massmailer\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])ontarget98\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])stealthmassmailer\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])tornadoblaster\.com([^a-z0-9\.]|$))
{ SAMCO=yes }

:0 BH
* LEANTAG ?? no
* !^Subject:.*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  1100^1   (^|[^-_0-9a-z])bulkemailpeople\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])desktopserver98\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])e-mailblaster\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])e-mailmagnet\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])extractor-pro\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])extractor-pro98\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])listsorcerer\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])marketingmasters\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])massmailer\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])ontarget98\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])stealthmassmailer\.com([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])tornadoblaster\.com([^a-z0-9\.]|$)
{ SAMCO=yes }

:0
* SAMCO ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: SAMCO"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# T3 Direct
#
# Updated and domains verified 6/18/02
# Last reported spam: 6/18/02
# Other Relevant Info:
#   Sued someone who was spammed by them and complained publicly
#   for complaining. :(
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(203\.57\.242\.|\
          1823\.biz|\
          Australianmarketingservices\.com|\
          comindico\.com\.au|\
          onebiz\.biz|\
          options21\.com\.au|\
          selfleadership\.com\.au|\
          seminarseries\.biz|\
          t3direct\.com\.au|\
          t3direct\.net)([^a-z0-9\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: T3 Direct"

 :0
 { SPAMTAG=yes }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}