sb-ordinary.rc

这是一个从音频信号里提取特征参量的程序

 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])recruitexec[0-9]\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])resumetiger\.com([^a-z0-9\.]|$)
 *   800^0   (^|[^-_0-9a-z])Resume Tiger([^a-z0-9\.]|$)
 *   800^0   (^|[^-_0-9a-z])The Job Scene([^a-z0-9\.]|$)
 *   800^0   (^|[^-_0-9a-z])SUSAN HANSON([^a-z0-9\.]|$)
 { RECRUITEXEC=yes }
}

:0
* RECRUITEXEC ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: RecruitExec"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
      -A"To: [e-mail],[e-mail],[e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}



# resumerabbit.com
#
# Updated and domains verified 8/17/02
# Last reported spam: 9/06/02
# Other Relevant Info:
#   Aggressive resume/recruiter spammers.
#   8/17/02 -- moved from Virginia Web Properties to China. :/
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(211\.167\.175\.|\
          216\.73\.139\.178|\
          execs-direct\.com([^a-z0-9\.]|$)([^a-z0-9\.]|$)|\
          resumerabbit\.com([^a-z0-9\.]|$)([^a-z0-9\.]|$))
{ RESUMERABBIT=yes }

:0
* LEANTAG ?? no
* !RESUMERABBIT ?? yes
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])execs-direct\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])resumerabbit\.com([^a-z0-9\.]|$)
 { RESUMERABBIT=yes }
}

:0
* RESUMERABBIT ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: ResumeRabbit"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
      -A"To: [e-mail],[e-mail],[e-mail]" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}



# Shocking-incest.com (was Eltel.com Russian spam nest)
#
# Updated and domains verified 6/17/02
# Last reported spam: 6/17/02
# Other Relevant Info:
#   Nest of porn spammers that play lots of tricks. :/
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -200^1   ^[:;#>]
*  1100^0   (^|[^-_0-9a-z])shocking-incest\.com([^a-z0-9\.]|$)
*   800^0   ^Subject:.*(it.?s kinda wierd|\
                        private incest photos)
*   200^1   (^|[^-_0-9a-z])(Brother - Brother\.\.\.|\
                            Brother - Sister,|\
                            content is absolutely real|\
                            Daddy - Daughter,|\
                            Daddy - Son,|\
                            Daddy is a real sexual monster|\
                            incest of all kinds|\
                            Mommy - Daughter,|\
                            Mommy - Son,|\
                            Sister - Sister,|\
                            Shocking Family Photos|\
                            We have incest)([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: shocking-incest.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# SiteProNews
#
# Updated and domains verified 9/18/02
# Last reported spam:  9/26/02
# Other Relevant Info:
#    SiteProNews spammers, and probably other stuff.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(ezinehub\.com|\
          sitepronews\.com)([^a-z0-9\.]|$)
{ SITEPRONEWS=yes }

:0
* LEANTAG ?? no
* !SITEPRONEWS ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])aaascreensavers\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])aaathemes\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])addme\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])bravenet\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])controlv\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])designerwiz\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])exactseek\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])ezinehub\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])featureprice\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])freetechmail\.org([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])goarticles\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])HomeBizTools\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])homepageuniverse\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])myzips\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])netmechanic\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])novicenews\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])pocketflier\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])rankpilot\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])roibot\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])se-secrets\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])sitepronews\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])submitexpress\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])submitplus\.bc\.ca([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])thecgisite\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])trafficzap\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])weberdev\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])web-source\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])wetrack\.it([^a-z0-9\.]|$)
 { SITEPRONEWS=yes }
}

:0
* SITEPRONEWS ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: SiteProNews"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail]" \
    -I"Cc: [e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# SmartDM
#
# Updated and domains verified 7/02/02
# Last reported spam: 7/02/02
# Other Relevant Info:
#   7/02/02: resume blasting site, recently expanded IP space. :(
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.153\.8[0-1]\.|\
          sdm0\.com([^a-z0-9\.]|$)|\
          sdm2\.com([^a-z0-9\.]|$)|\
          smartreminders\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: SmartDM"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}

# Software Services
#
# Updated and domains verified 3/24/01
# Last reported spam: 2/06/01
# Other Relevant Info:
#
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*   600^0   Software Services([^a-z0-9\.]|$)
*   600^0   9824 South Western Avenue([^a-z0-9\.]|$)
*   600^0   Evergreen Park, IL 60805([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Software Services"

:0
{ SPAMTAG=yes }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Trafficmagnet
#
# Updated and domains verified 8/07/02
# Last reported spam:  8/07/02
# Other Relevant Info:
#    Long-time web site promotion spammers.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*trafficmagnet\.(com|net)([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Trafficmagnet"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -I"Cc: [e-mail], [e-mail], [e-mail], [e-mail], [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# WebSideStory
#
# Updated and domains verified 3/24/01
# Last reported spam: 2/07/01
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](hitbox\.com([^a-z0-9\.]|$)|\
          hitboxmailer\.com([^a-z0-9\.]|$)|\
          websidestory\.com([^a-z0-9\.]|$))
{ WSS=yes }

:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*   600^0   Sean.*Shubert([^a-z0-9\.]|$)
*   800^0   Product Marketing Manager.*HitBox Pro([^a-z0-9\.]|$)
*   800^0   WebSideStory([^a-z0-9\.]|$)
*   800^0   858[-\. )]*546[-\. ]*0040([^a-z0-9\.]|$)
{ WSS=yes }

:0
* WSS ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: WebSideStory"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# World Currency Cartel
#
# Updated and domains verified 6/12/00
# Last reported spam:  3/16/00
# Other Relevant Info:
#    3/16/00: Long-time spammer, needs own recipe because this spammer
#      tries to bypass filters with unusual obstinancy.  This filter does
#      not autoreply because the WCC spammers don't have a stable
#      domain or presence on the 'Net.
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*   800^1   ^From:.*profitsnow\.net([^a-z0-9\.]|$)
*   800^1   ^Subject: Make Big Money Exchanging Foreign Currency
*   500^1    World Currency Cartel
*   500^1    S\.?J\.? Enterprises
*   500^1    100 Riverdale Ave.*Suite LJ
*   500^1    Yonkers.*10701-4638
*  1100^1    914[-\. )]*476[-\. ]*9167
{
:0 f
| ${FORMAIL} -A"X-SBRule: World Currency Cartel"

:0
{ SPAMTAG=yes }
}


# World Reach Corporation
#
# Updated and domains verified 8/19/02
# Last reported spam:  8/18/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* LEANTAG ?? no
{
 :0 BDH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *   800^0   ^Subject: Have You Received It Yet$
 *   800^1    world Reach
 *   500^1    permission based messages on the products and services
 {
  :0 f
  | ${FORMAIL} -A"X-SBRule: World Reach"

  :0
  { SPAMTAG=yes }
 }
}

# Yawadoo
#
# Updated and domains verified 6/14/02
# Last reported spam:  5/25/02
# Other Relevant Info:
#   Domain registration spammers.
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](217\.7\.129\.|\
          yawadoo\.com([^a-z0-9\.]|$)|\
          yawadoo\.info([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Yawadoo"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: [e-mail],[e-mail],[e-mail]" \
    -I"Cc: [e-mail]" \
    -A"Bcc: [e-mail],[e-mail],[e-mail],[e-mail]" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}