sb-mainsleaze.rc

这是一个从音频信号里提取特征参量的程序

 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# McAfee (Network Associates)
#
# Updated and domains verified 8/06/02
# Last reported spam: 8/06/02
# Other Relevant Info:
#    After a hiatus, NAI/McAfee is spamming again. :/  This time, they
#    are spamming using Unitymail, a known spam software package.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(216\.49\.8[0-9]\.|\
          216\.49\.9[0-5]\.|\
          unity[0-9]\.mcafee\.com([^a-z0-9\.]|$)|\
          subscriptions@mcafee\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: McAfee/Network Associates"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Network Solutions
#
# Updated and domains verified 9/06/02
# Last reported spam: 9/05/02
# Other Relevant Info:
#   7/13/99:
#    Network Solutions has started a new "mailing list" to which it has
#    apparently subscribed the listed technical contacts in its huge
#    database without asking them, requiring them to unsubscribe
#    themselves.  This is opt-out bulk email, which is spam, plain
#    and simple.  I am therefore including the Network Solutions
#    spamming machine here.  I am not blacklisting the whole domain
#    because that could pose a problem for people with domains
#    registered through this monopoly. :(  The *ssholes are
#    taking advantage of their monopoly to force a situation on
#    their customers which most of the customers would reject totally
#    if asked.
#
#   9/24/99: A few days ago NSI spammed every email address they had,
#    administrative and billing contacts as well as technical
#    contacts, through a third-party company as well, apparently to
#    avoid spam blocks.  :(  These are slimeballs.  I've blocked them
#    entirely -- I'd suggest you inform them that they are to
#    communicate with you about your domain via postal mail only.
#
#   6/10/00: Contacted me via phone a few weeks ago to "follow up on my
#    recent request to opt-out of the .COM directory with a domain".  That
#    request/demand was sent last fall.  A few weeks later, got spammed by
#    them asking me to update my "incomplete" registration information for
#    that specific domain. These jerks simply DO NOT GET IT.
#
#   6/20/00: Yet another spam from these unbelievable slimeballs....
#
#   11/01/01: Now they're spamming on behalf of Verisign, a company
#     they own, via yet another spamhaus....
#
#   4/30/02: They hired a small spamhaus to spam on their behalf, apparently
#     got tired of fielding their own complaints. :/
#
#   9/06/02: New domain, nsi-direct.com, being used to spam now. They are
#     spamming people about domains that are not due to expire til next
#     year, urging them to sign on for a three-year contract.  Desperate,
#     perhaps, because ICANN is threatening to deregister them?
#
# Status:  Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(netsol\.com([^a-z0-9\.]|$)|\
          networksolutions\.com([^a-z0-9\.]|$)|\
          nsi-direct\.com([^a-z0-9\.]|$)|\
          verisign\.com([^a-z0-9\.]|$)|\
          verisign-em\.com([^a-z0-9\.]|$))
{ NSI=yes }

:0
* LEANTAG ?? no
* !NSI ?? yes
{
 :0 B
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *   400^0   ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]inte-net\.com([^a-z0-9\.]|$)
 *   800^0   ^From: .*[^0-9a-z]netsoll@integram\.org([^a-z0-9\.]|$)
 *   600^0   ^From: .*[^0-9a-z]net(work)?.?sol(utions)?[-_0-9a-z]*@
 *   800^0   ^From: .*[^0-9a-z]VeriSign([^a-z0-9\.]|$)
 *   500^1   ^Subject: .*domain name account
 *   500^1   Network Solutions
 *   800^1   netsol\.com([^a-z0-9\.]|$)
 *   800^1   networksolutions\.com([^a-z0-9\.]|$)
 *   800^1   nsi-direct\.com([^a-z0-9\.]|$)
 *   800^1   verisign\.com([^a-z0-9\.]|$)
 *   800^1   verisign-em\.com([^a-z0-9\.]|$)
 *   800^1   the dot com people
 { NSI=yes }
}

:0
* NSI ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Network Solutions/VeriSign"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: [e-mail],[e-mail],[e-mail],[e-mail]" \
     -I"Cc: [e-mail],[e-mail],[e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}

# oracle.com
#
# Updated and domains verified 6/25/02
# Last reported spam: 4/05/02
# Other Relevant Info:
#    3/08/00: Sending out opt-out newsletter to people who did not ask to get it.
#      I'm not sure whether this is going just to customers or to other people as
#      well, but if it's opt-out, it is spam.  :(
#
#    4/13/02: Now someone at Oracle is sending an "eNewsletter" to addresses
#      scraped from the Internet! :(
# Status: Active Spammer
#
:0
* ^(((From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(magazine@.*oracle\.com([^a-z0-9\.]|$)|\
     scott\.nichols@oracle\.com([^a-z0-9\.]|$)))|\
     Subject: eNewsletter from Oracle Corporation)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Oracle"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# paypal.com
#
# Updated and domains verified 6/25/02
# Last reported spam: 5/14/02
# Other Relevant Info:
#       Subscribed all users to newsletter without their consent, reportedly
#       is ignoring remove requests as well. :(
#
#       11/08/01 -- Not reportedly any more.  They've kept spamming me despite
#        repeated, vociferous complaints directed to various addresses in the
#        company, to which they have not given the courtesy of a response yet.
#
#       6/25/02 -- PayPal has gone from putting users on mailing lists they
#        can't get off of, to outright spamming, or so it appears to me. :(
#        I'm no longer trying to avoid "legitimate" email from these clowns;
#        people who dislike spam should simply avoid using PayPal.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(announcements.*@.*paypal\.com([^a-z0-9\.]|$)|\
          service@.*paypal\.com([^a-z0-9\.]|$)|\
          paypalupdate\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: PayPal"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Progressive Networks (real.com/realaudio.com)
#
# Updated and domains verified 6/25/02
# Last reported spam: 4/23/02
# Other Relevant Info:
#    Yet another "legitimate" company which sends lots of unsolicited
#     and unwanted email, usually to people who download their
#     "RealAudio" player.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(209\.210\.138\.|\
          (^|[^-_0-9a-z])prognet\.com([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])real\.(com|net)([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])real-net\.net([^a-z0-9\.]|$)|\
          (^|[^-_0-9a-z])realaudio\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Progressive Networks"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Staples
#
# Updated and domains verified 8/06/02
# Last reported spam: 8/06/02
# Other Relevant Info:
#    Bulk mailing list, opt out. :(
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(12\.40\.61\.|\
            staples-deals\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Staples"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Utne Reader
#
# Updated and domains verified 8/07/02
# Last reported spam: 8/07/02
# Other Relevant Info:
#    Well respected alternative/leftist magazine, but spams via
#    email-publisher.com, Topica's spam-for-hire outfit.
# Status: Active Spammer
#
:0
* LEANTAG ?? no
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *   600^0   cafe\.utne\.com([^a-z0-9\.]|$)
 {
  :0 f
  | ${FORMAIL} -A"X-SBRule: Utne Reader"

  :0
  { SPAMTAG=yes }

  :0
  * SRC ?? yes
  * !ADMINTAG ?? yes
  * !BULKTAG ?? yes
  {
   :0
   { SPAMPID=`echo $$` }

   :0 c:
   spamtemp.${SPAMPID}

   :0 c: spamtemp.${SPAMPID}.lock
   | (${FORMAIL} -rt \
      -I"From: ${ALTFROM}" \
      -I"To: [e-mail]" \
      -I"Subject: cafe.utne.com Spam" \
      -I"Cc: [e-mail],[e-mail],[e-mail]" \
      -A"Cc: [e-mail],[e-mail]" \
      -A"X-Loop: ${NOLOOP}";\
      cat ${SBDIR}/spam;\
      echo " ";\
      echo "Eventis -- you host the web site cafe.utne.com, which is referenced";\
      echo "in the body of this spam.  Please ensure that your customer does not";\
      echo "continue to send unsolicited bulk email.";\
      echo " ";\
      echo "USLink -- You are the upstream provider of Eventis.  Please follow";\
      echo "up and see that Eventis stops its spamming customer.";\
      echo " ";\
      echo "Interliant/sagenetworks -- you host the main utne.com web site.  Please";\
      echo "make it clear to your spamming customers that hosting the cafe.utne.com";\
      echo "site somewhere else does not mean that it is okay to spam.";\
      echo " ";\
      echo "=-=-=-=-=-=-=-=-=-=";\
      echo " ";\
      cat spamtemp.${SPAMPID};\
      ${RM} -f spamtemp.${SPAMPID}) \
      | ${SENDMAIL} -oi -t
  }

  :0
  * SRB ?? yes
  { BOUNCETHIS=yes }
 }
}