sb-spamforhire.rc

这是一个从音频信号里提取特征参量的程序

 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -A"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# dartmail.net/flonetwork.com (Doubleclick/Media Synergy)
#
# Updated and domains verified 10/05/02
# Last reported spam: 10/03/02
# Other Relevant Info:
#    6/12/00:
#     Spammers-for-hire for mainsleaze companies, most recently Barnes & Noble
#    10/05/02:
#     Still spamming for B&N, and now for AOL as well.
#     Media Synergy apparently has hooked up with Doubleclick
#     and dartmail.net, they're all one spamhaus now. :(
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](205\.150\.6\.|\
          209\.58\.86\.|\
          209\.167\.79\.|\
          216\.73\.8[0-9]\.|\
          216\.73\.9[0-5]\.|\
          dartmail\.net([^a-z0-9\.]|$)|\
          flonetwork\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Dartmail/Flonetwork"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail],[e-mail]" \
    -A"Cc: [e-mail],[e-mail],[e-mail]" \
    -A"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# iexpect.com
#
# Updated and domains verified 9/10/02
# Last reported spam: 9/10/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]iexpect\.com([^a-z0-9\.]|$)
{ IEXPECT=yes }

:0 BH
* LEANTAG ?? no
* !IEXPECT ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   iexpect\.com([^a-z0-9\.]|$)
{ IEXPECT=yes }
}

:0
* IEXPECT ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: iexpect.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: [e-mail]" \
     -I"Cc: [e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
      ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# IFX Corporation
#
# Updated and domains verified 10/05/02
# Last reported spam: 8/28/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](198\.172\.137\.|\
          206\.105\.10[4-5]\.|\
          1888meds\.com([^a-z0-9\.]|$)|\
          atlanticmeds\.com([^a-z0-9\.]|$)|\
          best-pill\.com([^a-z0-9\.]|$)|\
          corptopia\.com([^a-z0-9\.]|$)|\
          didlyco\.com([^a-z0-9\.]|$)|\
          docdrugs\.com([^a-z0-9\.]|$)|\
          get-meds\.com([^a-z0-9\.]|$)|\
          get-pills\.net([^a-z0-9\.]|$)|\
          globalrxco\.com([^a-z0-9\.]|$)|\
          marital-aid\.com([^a-z0-9\.]|$)|\
          netprescribe\.net([^a-z0-9\.]|$)|\
          overnightrx\.com([^a-z0-9\.]|$)|\
          penisshopstore\.com([^a-z0-9\.]|$)|\
          pillsgroup\.com([^a-z0-9\.]|$)|\
          pill-shop\.com([^a-z0-9\.]|$)|\
          platinumpills\.com([^a-z0-9\.]|$)|\
          postageshop\.com([^a-z0-9\.]|$)|\
          quickrxmeds\.com([^a-z0-9\.]|$)|\
          realsmalltalk\.com([^a-z0-9\.]|$)|\
          sexpills\.biz([^a-z0-9\.]|$)|\
          sterlingpills\.com([^a-z0-9\.]|$)|\
          telcom\.net([^a-z0-9\.]|$)|\
          thebestpills\.com([^a-z0-9\.]|$)|\
          universalmeds\.com([^a-z0-9\.]|$)|\
          vmarketingonline\.com([^a-z0-9\.]|$))
{ IFXCORP=yes }

:0 BH
* LEANTAG ?? no
* !IFXCORP ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^0    (^|[^-_0-9a-z])1888meds\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])atlanticmeds\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])best-pill\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])corptopia\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])didlyco\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])docdrugs\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])get-meds\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])get-pills\.net([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])globalrxco\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])marital-aid\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])netprescribe\.net([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])overnightrx\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])penisshopstore\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])pillsgroup\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])pill-shop\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])platinumpills\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])postageshop\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])quickrxmeds\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])realsmalltalk\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])sexpills\.biz([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])sterlingpills\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])telcom\.net([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])thebestpills\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])universalmeds\.com([^a-z0-9\.]|$)
 *  1100^0    (^|[^-_0-9a-z])vmarketingonline\.com([^a-z0-9\.]|$)
 { IFXCORP=yes }
}

:0
* IFXCORP ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: IFX Corporation"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Imatcher
#
# Updated and domains verified 10/05/02
# Last reported spam: 7/29/02
# Other Relevant Info:
#    10/05/02:
#     Aggressive, totally unrepentant spammers. :(
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](208\.253\.17[2-5]\.|\
          imatcher\.(com|org)([^a-z0-9\.]|$))
{ IMATCHER=yes }

:0 BH
* LEANTAG ?? no
* !IMATCHER ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])208\.253\.17[2-5]\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])imatcher\.(com|org)([^a-z0-9\.]|$)
{ IMATCHER=yes }
}

:0
* IMATCHER ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Imatcher"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: [e-mail]," \
     -A"Cc: [e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# iwon.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 10/05/02
# Other Relevant Info:
#     7/31/02:
#       Company that bought what was left of Excite@Home,
#       apparently has turned to spamming to pay for it. :/
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](63\.236\.75\.|\
          208\.45\.133\.|\
          blastdirect\.com([^a-z0-9\.]|$)|\
          iwon\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Blastdirect/Iwon"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: [e-mail],[e-mail],[e-mail]" \
     -A"Cc: [e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# mailadv.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 11/10/01
# Other Relevant Info:
#       11/11/01 -- spamming on behalf of Verisign, but have their own
#         netblocks, domains, etc.
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](199\.233\.145\.|\
          204\.27\.144\.|\
          macdirect\.com([^a-z0-9\.]|$)|\
          mailadv\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: mailadv.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -A"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# merchantmail.com/m0.net etc.
#
# Updated and domains verified 8/02/02
# Last reported spam: 9/29/02
# Other Relevant Info:
#    10/20/00 -- too much spam is coming from this bulk mail house, although
#     they claim to be legitimate and may be trying to be, for all I know.
#     I've gotten eight or ten pieces of spam from them in the last month,
#     though, from mainsleaze customers whose business they are still handling,
#     and got no response to any of my complaints.  Enough is enough, guys.
#    10/05/02:
#     Spamming for Palm computers, Apple, and other legitimate businesses.
#     Also spamming for Citibank.  :/  I block these guys, but think that
#     loud complaints to their customers for paying them to spam is a
#     better tactic.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Received:).*[^0-9a-z](209\.11\.13[3-6]\.|\
          216\.32\.126\.233|\
          digital-impact\.(com|net)([^a-z0-9\.]|$)|\
          m0\.(com|net)([^a-z0-9\.]|$)|\
          merchantmail\.(com|net)([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Merchantmail/M0"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Messagereach.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 10/02/02
# Other Relevant Info:
#    3/17/00 -- another "direct marketing" bulk email opt-out spamhaus.
#    11/08/01 -- spamming for Looksmart, and found xpedite.com. :)
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](137\.236\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          205\.183\.255\.[0-9][0-9]?[0-9]?|\
          messagereach\.com([^a-z0-9\.]|$)|\
          xmr3\.com([^a-z0-9\.]|$)|\
          xpedite\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Messagereach"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Mindshare Designs
#
# Updated and domains verified 10/05/02
# Last reported spam: 8/10/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.39\.11[2-9]\.|\
          216\.39\.12[0-7]\.|\
          mb00\.net([^a-z0-9\.]|$)|\
          mindsharedesign\.com([^a-z0-9\.]|$)|\
          pm0\.net([^a-z0-9\.]|$)|\
          postmastergeneral\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Mindshare Design/PostmasterGeneral"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}