sb-ordinary.rc

这是一个从音频信号里提取特征参量的程序

# 2np.net
#
# Updated and domains verified 7/02/02
# Last reported spam:  7/01/02
# Other Relevant Info:
#   7/02/02 -- Got email from someone at JDR Media indicating that
#    they are no longer affiliated with 2np.net/em5000.com, etc.
# Status: Active Spammer
#
:0
* LEANTAG ?? no
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   2np\.net([^a-z0-9\.]|$)
 *  1100^1   em5000\.com([^a-z0-9\.]|$)
 {
  :0 f
  | ${FORMAIL} -A"X-SBRule: 2np.net"

  :0
  { SPAMTAG=yes }

  :0
  * SRC ?? yes
  * !ADMINTAG ?? yes
  * !BULKTAG ?? yes
  {
   :0
   { SPAMPID=`echo $$` }

   :0 c:
   spamtemp.${SPAMPID}

   :0 c: spamtemp.${SPAMPID}.lock
   | (${FORMAIL} -rt \
      -I"From: ${ALTFROM}" \
      -I"To: [e-mail]" \
      -I"Cc: [e-mail]" \
      -A"X-Loop: ${NOLOOP}";\
      cat ${SBDIR}/spam;\
      cat spamtemp.${SPAMPID};\
      ${RM} -f spamtemp.${SPAMPID}) \
      | ${SENDMAIL} -oi -t
   }

  :0
  * SRB ?? yes
  { BOUNCETHIS=yes }
 }
}


# artprice.com
#
# Updated and domains verified 9/10/02
# Last reported spam:  9/10/02
# Other Relevant Info:
#     For what should be a small-time company, these guys are
#     really persistent spammers, spamming even the autoresponder
#     at a non-profit domain I run.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(artmarket\.com([^a-z0-9\.]|$)|\
          artprice\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: artprice.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# bay9.com
#
# Updated and domains verified 6/25/02
# Last reported spam:  5/29/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(63\.87\.242\.12[8-9]|\
          63\.87\.242\.1[3-8][0-9]|\
          63\.87\.242\.19[0-1]|\
          63\.87\.243\.|\
          209\.73\.205\.9[6-9]|\
          209\.73\.205\.1[0-1][0-9]|\
          209\.73\.205\.12[0-7]|\
          bay9\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bay9.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# bigwhat.com
#
# Updated and domains verified 7/31/02
# Last reported spam:  1/08/02
# Other Relevant Info:
#    11/11/01 -- pesters registered domain contacts of web sites it locates
#     to "update their information", despite their never having requested
#     listing in this list. :/  Uncool.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*bigwhat\.com([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bigwhat.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# bigwho.com
#
# Updated and domains verified 7/31/02
# Last reported spam:  1/08/02
# Other Relevant Info:
#    11/11/01 -- pesters registered domain contacts of web sites it locates
#     to "update their information", despite their never having requested
#     listing in this list. :/  Uncool.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*bigwho\.com([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Bigwho.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Chya Dann Enterprises
#
# Updated and domains verified 7/30/02
# Last reported spam:  7/30/02
# Other Relevant Info:
#    Prolific Hong-Kong based spammers, manufacturers of computer
#    peripherals.
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*   800^1   CHYA DANN
*   800^1   texas?comtech\.com([^a-z0-9\.]|$)
*   800^1   O755[-\. ()]*8759053([^a-z0-9\.]|$)
*   800^1   886[-\. ()]*2[-\. )]*29170979([^a-z0-9\.]|$)
*   800^1   886[-\. ()]*2[-\. )]*29137636([^a-z0-9\.]|$)
*   800^1   hongkong@.*hinet\.net([^a-z0-9\.]|$)
*   800^1   texascom[1-9][0-9]*@163\.com([^a-z0-9\.]|$)
*   800^1   5F(.*$)+No(.*$)+135(.*$)+Pao-Chung Road(.*$)+Hsin-Tien City(.*$)+Taipei
{
:0 f
| ${FORMAIL} -A"X-SBRule: Chya Dann"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Cosmex Media
#
# Updated and domains verified 10/05/02
# Last reported spam:  10/05/02
# Other Relevant Info:
#    10/05/02:
#      Apparently a pornographic spamhaus.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.89\.24[1-3]\.[0-9][0-9]?[0-9]?|\
          coochiemail\.com([^a-z0-9\.]|$)|\
          cosmexhosting\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Cosmex Media"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# dlbdirect.com
#
# Updated and domains verified 7/31/02
# Last reported spam:  7/19/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(208\.47\.192\.9[6-9]|\
          208\.47\.192\.1[0-1][0-9]|\
          208\.47\.192\.12[0-7]|\
          dlbdirect\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: dlbdirect.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Etracks
#
# Updated and domains verified 7/09/02
# Last reported spam:  7/06/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(etracks\.com([^a-z0-9\.]|$)|\
          ivbs\.net([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Etracks"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Euniverse/flowgo.com
#
# Updated and domains verified 7/09/02
# Last reported spam:  7/02/02
# Other Relevant Info:
#    Spamming root addresses at nameservers.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(euniverse\.com([^a-z0-9\.]|$)|\
          flowgo\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: euniverse/flowgo"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# "Friendfinder" spammers
#
# Updated and domains verified 8/19/02
# Last reported spam: 8/10/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(adultfriendfinder\.com([^a-z0-9\.]|$)|\
          amigos\.com([^a-z0-9\.]|$)|\
          asiafriendfinder\.com([^a-z0-9\.]|$)|\
          filipinofriendfinder\.com([^a-z0-9\.]|$)|\
          frenchfriendfinder\.com([^a-z0-9\.]|$)|\
          friendfinder\.com([^a-z0-9\.]|$)|\
          friendfinderinc\.com([^a-z0-9\.]|$)|\
          germanfriendfinder\.com([^a-z0-9\.]|$)|\
          gradfinder\.com([^a-z0-9\.]|$)|\
          koreanfriendfinder\.com([^a-z0-9\.]|$)|\
          outpersonals\.com([^a-z0-9\.]|$)|\
          seniorfriendfinder\.com([^a-z0-9\.]|$))
{ FRIENDFINDER=yes }

:0
* LEANTAG ?? no
* !FRIENDFINDER ?? yes
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])adultfriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])amigos\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])asiafriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])filipinofriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])frenchfriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])friendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])friendfinderinc\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])germanfriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])gradfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])koreanfriendfinder\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])outpersonals\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])seniorfriendfinder\.com([^a-z0-9\.]|$)
 { FRIENDFINDER=yes }
}

:0
* FRIENDFINDER ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: FriendFinder"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail]" \