# Sample regexp lookup "table". # # Format is /regexp/flags or /regexp/flags!/regexp/flags # where regexp is a regular expression as found in regexp(5), and flags are # i: toggle ignore case (REG_ICASE - default is to ignore case) # x: toggle extended expression (REG_EXTENDED - default is extended) # m: toggle multiline mode (REG_NEWLINE - default is non-multiline mode) # # In order for a line to match, the first regexp must match, and the # second (if present) must not match. The first matching line wins, # terminating processing of the ruleset. # Disallow sender-specified routing. This is a must if you relay mail # for other domains. #/[%!@].*@//[%!@].*[ |<|>].*@/ REJECT ## Postmaster is OK, that way they can talk to us about how to fix their problem. /^postmaster@.*$/ OK /^[to|from].*@vger.kernel.org.*/ OK /^[to|from].*@lists.debian.org.*/ OK ## Protect your outgoing majordomo exploders /^(.*)-outgoing@(.*)$/!/^owner-.*/ REJECT ## Defined conten-type to be rejected (e.g. html) /^content-type:.*text\/html.*/ REJECT /^content-type:.*ks_c_5601.*/ REJECT ## Known spam subjects /^Subject:.*Fwd:Peace BeTweeN AmeriCa and IsLaM!/ REJECT /^Subject: ILOVEYOU/ REJECT /^Subject: (Re: )*Important Message From/ REJECT /^Subject: (Re: )*BubbleBoy is back!/ REJECT /^Subject: Accept Credit Cards/ REJECT /^Subject: How Soon Are You Going To Retire\?/ REJECT /^Subject: \[ADV:/ REJECT /^Subject: ADV:/ REJECT /^Subject: Snowhite and the Seven Dwarfs - The REAL story!/ REJECT /^Subject: Are you losing sleep over debt\?/ REJECT /^Subject: a stock that makes money/ REJECT /^Subject: high earnings may soar/ REJECT /^Subject: See the VIDEO Britney/ REJECT /^Subject: FW: VIDEOS OF BRITNEY/ REJECT /^Subject: STOLEN HARDCORE VIDEO/ REJECT /^Subject: NEW CASH PROGRAM/ REJECT /^Subject: Hot Celebs 100% Exposed!/ REJECT /^Subject: Make It Happen/ REJECT /^Subject: If you need extra money...read this!/ REJECT /^Subject: Recieve A Free Quote/ REJECT /^Subject: We Have Low Mortgage Rates!!!/ REJECT /^Subject: Re: travel confirmation/ REJECT /^Subject: Receive a FREE SAMPLE of Viagra for Women/ REJECT /^Subject: DOUBLE YOUR BREAST SIZE! GUARANTEED/ REJECT /^Subject: Ground Breaking Business "Starts Today"/ REJECT /^Subject: AS SEEN ON T\.V/ REJECT /^Subject: 99 Million Email Addresses - \$99/ REJECT /^Subject: 99 Million Email Addresses - \$99/ REJECT /^Subject: 50 Million Fresh Email Addresses/ REJECT /^Subject: 200 Million Email Addresses - \$149/ REJECT /^Subject: Get Viagra Online Now !!!/ REJECT /^Subject: Boost Your Windows Reliability/ REJECT /^Subject: I know what you've been doing/ REJECT /^Subject: Hot Penny Stock Pick/ REJECT /^Subject: Need a great deal on a home loan\?/ REJECT /^Subject: I used to be in debt too!/ REJECT /^Subject: Work less, make more/ REJECT /^Subject: Drive Your Web Counter Ballistic/ REJECT /^Subject: Re: have you considered doing this\?/ REJECT /^Subject: Work from home and get paid!/ REJECT /^Subject: Enter To Win One of 25 Dream Vacations!!/ REJECT /^Subject: Do You Accept Credit Cards/ REJECT /^Subject: Home Owners ONLY/ REJECT /^Subject: Your Credit Info/ REJECT /^Subject: Do you owe money\?/ REJECT /^Subject: Need a Home Loan? We Can Help!!/ REJECT /^Subject: stock alert/ REJECT /^Subject: contact lenses/ REJECT /^Subject: ENLARGE YOUR PACAKGE GUARANTEED/ REJECT /^Subject: ENLARGE YOUR PACKAGE GUARANTEED/ REJECT /^Subject: We purchase uncollected Judicial Judgments/ REJECT /^Subject: Increase Your Gas Mileage by up to 27%!/ REJECT /^Subject: Willow Flower Herb For Prostate Problems\./ REJECT /^Subject: NEW Increase Your Gas Mileage by 27%/ REJECT /^Subject: The easiest way to make money on the internet!/ REJECT /^Subject: Re: think about this\.\.\./ REJECT /^Subject: think about this\.\.\./ REJECT /^Subject: At Last, Herbal V, the All Natural Alternative!/ REJECT /^Subject: Make Money In Your Sleep! / REJECT /^Subject: FREE Satellite TV System/ REJECT /^Subject: About your site/ REJECT /^Subject: No Deposit VISA or Master Card!/ REJECT /^Subject: FREE Auto Insurance Quote!/ REJECT /^Subject: Need money for college\?/ REJECT /^Subject:.*are you (being investigated|in need of a lifestyle)/ REJECT /^Subject:.*Free 1 Ounce Silver Coin/ REJECT /^Subject: CAN YOU ADVERTISE TO OVER 20 MILLION E-MAIL ADDRESSES?/ REJECT /^Subject: DSL - FREE DSL Modem! FREE Install! NO Contract!/ REJECT /^Subject: We want to give you a Brand New FREE Motorola Pager/ REJECT /^Subject:[[{(<:.\s]+ADV[:.})>\]\s]+\b/ REJECT /^Subject:.*[[{(<:.\s]+ADV[:.})>\]\s]*$/ REJECT /^Subject:\s+.*ILOVEYOU/ REJECT /^Subject:\s+.*I\s+Love\s+You/ REJECT /^Subject:\s+.*Susitikim\s+shi\s+vakara\s+kavos\s+puodukui.../ REJECT /^Subject:\s+.*Mother's\s+Day\s+Order\s+Confirmation/ REJECT /^Subject: Snowhite and the Seven Dwarfs - The REAL story!/ REJECT ## spam tracking code at end of subject line. multiple spaces followed by ## a number, or multiple spaces followed by \[code\] /^Subject:.*[ ._]{3,}\d+$/ REJECT /^Subject:.*[ ._]{3,}\[[^ ]+\]$/ REJECT ## Dunno... /^X-unsent: 1/ REJECT /^X-Spanska:/ REJECT ## common addresses in spam /^From @execs.com*/ REJECT /^(To|From):.*friend@(public.com|localhost.net)/ REJECT /^(To|From):.*dontreply@/ REJECT /^(To|From):.*@funstuff2000.net/ REJECT /^From:.*infowatch\.net/ REJECT /^To:.*customer@aol/ REJECT /^To: ListMembers@theneteffect/ REJECT /^(To|From):\s*$/ REJECT # all-numeric addresses at these domains are invalid /^(To|From):.*( |<)\d+@(compuserve|hotmail|aol|juno|bigfoot|prodigy)\.com/ REJECT /^(To|From):.*( |<)\d+@(onramp|prodigy|uu)\.net/ REJECT /^To: infomail@recurrent.com/ REJECT /^From:.*@sexyfun.net/ REJECT /^From: (.*?)@prodigy.net.mx/ REJECT ## known spamware /^X-(Advertisement|\d|UltraMail|Bulkmail): / REJECT /^(Received|Message-Id|X-(Mailer|Sender)):.*\b(AutoMail|E-Broadcaster|Emailer Platinum|eMarksman|Extractor|e-Merge|from stealth[^.]|Global Messenger|GroupMaster|Mailcast|MailKing|Match10|MassE-Mail|massmail\.pl|News Breaker|Powermailer|Quick Shot|Ready Aim Fire|WindoZ|WorldMerge|Yourdora)\b/ REJECT /^X-Mailer:.*\b(Aristotle|Avalanche|Blaster|Bomber|DejaVu|eMerge|Extractor|UltraMail|Sonic|Floodgate|GeoList|Mach10|MegaPro|Aureate|MultiMailer|Bluecom|Achi-Kochi Mail|Direct Email|Andrew's SuperCool Blastoise|MailerGear|Advanced Mass Sender)\b/ REJECT /^X-Server: Advanced Direct Remailer/ REJECT /^X-AD2000-(Serial|Register):/ REJECT /^x-mailer: *(CTMailer|MailKing|eMerge|Diffondi|ACE Contact Manager|CyberCreek Avalanche|Achi-Kochi Mail)/ REJECT /^x-mailer: .*(E-mail Magnet|Avalanche|Mailcast|Group Mail|Aristotle Mail|WorldMerge|Extractor Pro|Floodgate Pro|Emailer Platinum.*Internet Marketing|Ellipse Bulk Emailer|RamoMail|MultiMailer|Advanced Mass Sender)/ REJECT ## common spammer mistakes (used to be common, anyway...some are possibly obsolete) /^Comment: Authenticated sender is/ REJECT /^received:.*xxxxxxxxxxxxxxxx/ REJECT /^Received:.*\.{50,}/ REJECT /^Received: (baby|clobberer) \(/ REJECT /^Received:.*(cyber\-bomber|CLOAKED|from unverified source)/ REJECT /^Received:.*\(really \[\d+\/\d+\]\)/ REJECT /^Received:.*from.*SMTP\.XServer.*\(Smail4\.1\.19\.1.*\)/ REJECT /^Received:.*from meh; hehe/ REJECT #/^Received:.*(?