sb-domain_from_forgeries.rc

这是一个从音频信号里提取特征参量的程序

# Altavista
:0
* ^From.*altavista\.net
* !^Received:.*altavista\.net
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Altavista"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# AOL
:0
* ^From.*aol\.com([^\.]|$)
* !^Received:.*aol\.(com|net)([^\.]|$)
* $ !^X-Loop: ${NOLOOP}
* !^Resent-(By|From|To):
* !^Subject:.*\(fwd\)
* !BLOCKTHIS ?? yes
* !BOUNCETHIS ?? yes
{ BOGUSAOL=yes }

:0
* ^From.*@aol\.com([^\.]|$)
* !^From.*[^0-9a-z][a-z][0-9a-z][0-9a-z][0-9a-z]*@aol\.com([^\.]|$)
* $ !^X-Loop: ${NOLOOP}
* !^Resent-(By|From|To):
* !^Subject:.*\(fwd\)
* !BLOCKTHIS ?? yes
* !BOUNCETHIS ?? yes
{ BOGUSAOL=yes }

:0
* BOGUSAOL ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus AOL"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Compuserve relay/forgery
:0
* ^Received:.*206\.175\.[0-9][0-9]?[0-9]?\.
* !^From.*@(compuserve\.com([^\.]|$)|\
               cis\.com([^\.]|$)|\
               cs\.com([^\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Compuserve Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# cuny.edu relay/forgery
:0
* ^Received:.*cuny\.edu([^\.]|$)
* !^From.*@.*cuny\.edu([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: cuny.edu Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Earthlink
:0
* ^From.*earthlink\.net
* !^Received:.*earthlink\.net
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Earthlink"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# freei.net relay/forgery
:0
* ^Received:.*freei\.net([^\.]|$)
* !^From.*@.*freei\.net([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: freei.net Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Hotmail
:0
* ^From.*hotmail\.com
* !^Received:.*(hotmail\.com|microsoft\.com)
{ BOGUSHOTMAIL=yes }

:0
* ^From.*hotmail\.com
* !^X-Originating-IP:
{ BOGUSHOTMAIL=yes }

:0
* ^From:? [0-9].*@hotmail\.com
{ BOGUSHOTMAIL=yes }

:0
* BOGUSHOTMAIL ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Hotmail"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Juno
:0
* ^From.*juno\.com
* !^Received:.*juno\.com
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Juno"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Lycos
:0
* ^From.*lycos\.com
* !^(Message-ID|Received):.*lycos\.com
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Lycos"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Mailexcite
:0
* ^From.*mailexcite\.com
* !^Received:.*mailexcite\.com
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Mailexcite"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Miami.edu relay/forgery
:0
* ^Received:.*miami\.edu([^\.]|$)
* !^From.*@.*miami\.edu([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Miami.edu Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Bogus MSN
:0
* ^(From|Reply-To).*@.*msn\.com([^\.]|$)
* !^Received:.*msn\.com([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus MSN"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# MSN relay/forgery
:0
* ^Received:.*(hotmail|microsoft|msn)\.com([^\.]|$)
* !^From.*@.*(hotmail|microsoft|msn)\.com([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: MSN Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Netcom
:0
* ^From.*netcom\.com
* !^Received:.*netcom\.com
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bogus Netcom"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# osaka-u.ac.jp relay/forgery
:0
* ^Received:.*osaka-u\.ac\.jp
* !^From.*osaka-u\.ac\.jp
{
:0 f
| ${FORMAIL} -A"X-SBRule: osaka-u.ac.jp Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# ozemail.com.au relay/forgery
:0
* ^Received:.*ozemail\.(com\.au|net)([^\.]|$)
* !^From.*@ozemail\.(com\.au|net)([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Ozemail Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# Prodigy relay/forgery
:0
* ^Received:.*prodigy\.(com|net)([^\.]|$)
* !^From.*@(pacbell\.net([^\.]|$)|\
            prodigy\.(com|net)([^\.]|$)|\
            sbcglobal\.net([^\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Prodigy Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# salfelipe.com.mx relay/forgery
:0
* ^Received:.*sanfelipe\.com\.mx([^\.]|$)
* !^From.*@sanfelipe\.com\.mx([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: sanfelipe.com.mx Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# TheGrid.Net relay/forgery
:0
* ^Received:.*thegrid\.net([^\.]|$)
* !^From.*@thegrid\.net([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: TheGrid.Net Relay/Forgery"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}

# UUnet Forgery
:0
* ^From.*@uunet\.
* !^Received:.*uunet\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: UUnet relay"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Yahoo Forgery
:0
* ^From.*@yahoo\.com([^\.]|$)
* !^Received:.*yahoo\.com([^\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Yahoo relay"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}