View | Details | Raw Unified | Return to bug 6171
Collapse All | Expand All

(-)spamassassin-trunk/rules/20_drugs.cf (-3 / +3 lines)
Lines 112-129 Link Here
112
body __DRUGS_ERECTILE_C	/\bCialis\b/i
112
body __DRUGS_ERECTILE_C	/\bCialis\b/i
113
body __DRUGS_ERECTILE_L	/\bLevitra\b/i
113
body __DRUGS_ERECTILE_L	/\bLevitra\b/i
114
#  obfu/plain and mis-spelled Viagra variants
114
#  obfu/plain and mis-spelled Viagra variants
115
body __DRUGS_ERECTILE1	/(?:\b|\s)[_\W]{0,3}(?:\\\/|V)[_\W]{0,3}[ij1!|l\xEC\xED\xEE\xEF][_\W]{0,3}[a40\xE0-\xE6@][_\W]{0,3}[xyz]?[gj][_\W]{0,3}r[_\W]{0,3}[a40\xE0-\xE6@][_\W]{0,3}x?[_\W]{0,3}(?:\b|\s)/i
115
body __DRUGS_ERECTILE1  /(?:\b|\s)[_\W]{0,3}(?:\\\/|V)[_\W]{0,3}[ij1!|l\xEC\xED\xEE\xEF][_\W]{0,3}[a40\xE0-\xE6@][_\W]{0,3}[xyz]?[gj][_\W]{0,3}r[_\W]{0,3}[a40\xE0-\xE6@][_\W]{0,3}x?(?:\b|\s|_|(?<=viagra))/i
116
body __DRUGS_ERECTILE2	/\bV(?:agira|igara|iaggra|iaegra)\b/i
116
body __DRUGS_ERECTILE2	/\bV(?:agira|igara|iaggra|iaegra)\b/i
117
#  cialis variants (spelling correct now)
117
#  cialis variants (spelling correct now)
118
# note: the rather strange pre-amble is to avoid FPs on french words containing high-ascii chars surrounding
118
# note: the rather strange pre-amble is to avoid FPs on french words containing high-ascii chars surrounding
119
# "cialis".
119
# "cialis".
120
body __DRUGS_ERECTILE3 /(?:\A|[\s\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f])[_\W]{0,3}C[_\W]{0,3}[ij1!|l\xEC\xED\xEE\xEF][_\W]{0,3}[a4\xE0-\xE6@][_\W]{0,3}l?[l!|1][_\W]{0,3}[i1!|l\xEC-\xEF][_\W]{0,3}s[_\W]{0,3}(?:\b|\s)/i
120
body __DRUGS_ERECTILE3 /(?:\A|[\s\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f])[_\W]{0,3}C[_\W]{0,3}[ij1!|l\xEC\xED\xEE\xEF][_\W]{0,3}[a4\xE0-\xE6@][_\W]{0,3}l?[l!|1][_\W]{0,3}[i1!|l\xEC-\xEF][_\W]{0,3}s(?-i:\b|\s|_|(?<=s)[A-Z]|(?<=S)[a-z])/i
121
body __DRUGS_ERECTILE4	/\bC(?:alis|ilias|ilais)\b/i
121
body __DRUGS_ERECTILE4	/\bC(?:alis|ilias|ilais)\b/i
122
# generic names
122
# generic names
123
#sildenafil citrate
123
#sildenafil citrate
124
body __DRUGS_ERECTILE5	/\b_{0,3}s[_\W]?[i1!|l\xEC-\xEF][_\W]?l[_\W]?d[_\W]?[e3\xE8-\xEB][_\W]?n[_\W]?[a4\xE0-\xE6@][_\W]?f[_\W]?[i1!|l\xEC-\xEF][_\W]?l c[_\W]?[i1!|l\xEC-\xEF][_\W]?t[_\W]?r[_\W]?[a4\xE0-\xE6@][_\W]?t[_\W]?[e3\xE8-\xEB]_{0,3}(?:\b|\s)/i
124
body __DRUGS_ERECTILE5	/\b_{0,3}s[_\W]?[i1!|l\xEC-\xEF][_\W]?l[_\W]?d[_\W]?[e3\xE8-\xEB][_\W]?n[_\W]?[a4\xE0-\xE6@][_\W]?f[_\W]?[i1!|l\xEC-\xEF][_\W]?l c[_\W]?[i1!|l\xEC-\xEF][_\W]?t[_\W]?r[_\W]?[a4\xE0-\xE6@][_\W]?t[_\W]?[e3\xE8-\xEB]_{0,3}(?:\b|\s)/i
125
#Levitra
125
#Levitra
126
body __DRUGS_ERECTILE6	/\b_{0,3}L[_\W]?[e3\xE8-\xEB][_\W]?(?:\\\/|V)[_\W]?[i1!|l\xEC-\xEF][_\W]?t[_\W]?r[_\W]?[a4\xE0-\xE6@][_\W]?(?:\b|\s)/i
126
body __DRUGS_ERECTILE6  /\b_{0,3}L[_\W]?[e3\xE8-\xEB][_\W]?(?:\\\/|V)[_\W]?[i1!|l\xEC-\xEF][_\W]?t[_\W]?r[_\W]?[a4\xE0-\xE6@][_\W]?(?-i:\b|\s|_|(?<=a)[A-Z]|(?=<A)[a-z])/i
127
#tadalafil
127
#tadalafil
128
body __DRUGS_ERECTILE8 /\b_{0,3}T[_\W]?[a4\xE0-\xE6@][_\W]?d[_\W]?[a4\xE0-\xE6@][_\W]?l[_\W]?[a4\xE0-\xE6@][_\W]?f[_\W]?[i1!|l\xEC-\xEF][_\W]?l_{0,3}\b/i
128
body __DRUGS_ERECTILE8 /\b_{0,3}T[_\W]?[a4\xE0-\xE6@][_\W]?d[_\W]?[a4\xE0-\xE6@][_\W]?l[_\W]?[a4\xE0-\xE6@][_\W]?f[_\W]?[i1!|l\xEC-\xEF][_\W]?l_{0,3}\b/i
129
# gapped/obfu viagra variants using funky html-style character codes
129
# gapped/obfu viagra variants using funky html-style character codes
(-)spamassassin-trunk/rules/25_replace.cf (-1 / +1 lines)
Lines 69-75 Link Here
69
# fuzzy header tests
69
# fuzzy header tests
70
70
71
header SUBJECT_FUZZY_MEDS	Subject =~ /<M><E><D><S>/i
71
header SUBJECT_FUZZY_MEDS	Subject =~ /<M><E><D><S>/i
72
describe SUBJECT_FUZZY_MEDS	Attempt to obfuscate words in Subject:
72
describe SUBJECT_FUZZY_MEDS	Word 'meds', possibly obfuscated, in Subject:
73
replace_rules SUBJECT_FUZZY_MEDS
73
replace_rules SUBJECT_FUZZY_MEDS
74
74
75
header __SUBJECT_FUZZY_VPILL	Subject =~ /<inter W2><post P3>(?!viagra)<V><I><A><G><R><A>/i
75
header __SUBJECT_FUZZY_VPILL	Subject =~ /<inter W2><post P3>(?!viagra)<V><I><A><G><R><A>/i

Return to bug 6171