1# ONLINE-GAMBLING-PATTERNS.RC 2# 3# Last updated: 7/19/2011 4 5LOCALSCORE=0 6 7# From/Reply-To Patterns 8# 9:0 10* ^(From|Reply-To):.*[^0-9a-z](casino|gambl(e|er|ing)|jackpots?|lott(o|ery))[-_0-9a-z]* 11{ 12 SBLOG="C3T-${TESTNAME} (From/Reply-To keywords)" 13 INCLUDERC=${SBDIR}/functions/loglevel.rc 14 15 :0 16 * $ ${LOCALSCORE}^0 17 * 2^0 18 { LOCALSCORE=$= } 19} 20 21# Subject Patterns 22:0 23* ^Subject:.*[-_0-9a-z]*(casino|gambl(e|er|ing)|jackpots?|lott(o|ery)|odds|play|VIP)[-_0-9a-z]* 24* ! ^(From|Reply-To|Subject):.*[^0-9a-z]([0-9a-z][-_0-9a-z.])*(C[1il����][a������]l[1il����]s|\ 25 V[1il����][a������]gr[a������])([^0-9a-z]|$) 26* ! ^Subject:.*[^0-9a-z]Dear [0-9a-z][0-9a-z]*, your [0-9][0-9]% OFF coupon([^0-9a-z]|$) 27* ! ^X-SBRule: Pattern Match \(Advance Fee Fraud/ 28{ 29 SBLOG="C3T-${TESTNAME} (Subject Header Keywords)" 30 INCLUDERC=${SBDIR}/functions/loglevel.rc 31 32 :0 33 * $ ${LOCALSCORE}^0 34 * 3^0 35 { LOCALSCORE=$= } 36} 37 38# Body keywords 39# 40:0 41* LEANTAG ?? ^no$ 42* ! H ?? ^X-SBRule: Pattern Match \(Advance Fee Fraud/ 43* -1000^0 44* B ?? 400^1 (^|[^-_0-9a-z])bet([^a-z0-9.]|\. |\.$|$) 45* B ?? 400^1 (^|[^-_0-9a-z])better your (chances|odds)([^a-z0-9.]|\. |\.$|$) 46* B ?? 100^0 (^|[^-_0-9a-z])bonus([^a-z0-9.]|\. |\.$|$) 47* B ?? 400^1 (^|[^-_0-9a-z])casinos?([^a-z0-9.]|\. |\.$|$) 48* B ?? 400^1 (^|[^-_0-9a-z])card stud([^a-z0-9.]|\. |\.$|$) 49* B ?? 400^1 (^|[^-_0-9a-z])gambl(er?s?|ing)([^a-z0-9.]|\. |\.$|$) 50* B ?? 400^0 (^|[^-_0-9a-z])improve your (chances|odds)([^a-z0-9.]|\. |\.$|$) 51* B ?? 400^1 (^|[^-_0-9a-z])jackpots?([^a-z0-9.]|\. |\.$|$) 52* B ?? 400^1 (^|[^-_0-9a-z])lott(ery|o)([^a-z0-9.]|\. |\.$|$) 53* B ?? 400^1 (^|[^-_0-9a-z])match bonus([^a-z0-9.]|\. |\.$|$) 54* B ?? 400^1 (^|[^-_0-9a-z])online (casinos?|lott(o|er(y|ies))gambling)([^a-z0-9.]|\. |\.$|$) 55* B ?? 400^1 (^|[^-_0-9a-z])ozlotto([^a-z0-9.]|\. |\.$|$) 56* B ?? 400^1 (^|[^-_0-9a-z])poker([^a-z0-9.]|\. |\.$|$) 57* B ?? 400^1 (^|[^-_0-9a-z])PowerBall([^a-z0-9.]|\. |\.$|$) 58* B ?? 400^1 (^|[^-_0-9a-z])VIP (club|lounge|room)([^a-z0-9.]|\. |\.$|$) 59* B ?? 400^1 (^|[^-_0-9a-z])win(ers?|ning)([^a-z0-9.]|\. |\.$|$) 60* B ?? 500^0 (^|[^-_0-9a-z])[0-9a-z]*[-_0-9a-z]*(casino|gambl(e|ing)|lott(ery|o))[-_0-9a-z]*(\.|=2E)[a-z][a-z][a-z]?[a-z]?([^a-z0-9.]|\. |\.$|$) 61* B ?? 500^0 (^|[^-_0-9a-z])[0-9a-z]*[-_0-9a-z]*(casino|gambl(e|ing)|lott(ery|o))[-_0-9a-z]*@([0-9a-z][-_0-9a-z\.]+)+(\.|=2E)[a-z][a-z][a-z]?[a-z]?([^a-z0-9.]|\. |\.$|$) 62{ 63 SBLOG="C3T-${TESTNAME} (Body Keywords)" 64 INCLUDERC=${SBDIR}/functions/loglevel.rc 65 66 :0 67 * $ ${LOCALSCORE}^0 68 * 5^0 69 { LOCALSCORE=$= } 70} 71 72:0 73* -6^0 74* $ ${LOCALSCORE}^0 75{ 76 TESTNAME="${TESTNAME}" 77 TESTSCORE=${TESTSCORE} 78 LT4=yes 79} 80 81 :0 E 82 * -3^0 83 * $ ${LOCALSCORE}^0 84 { 85 TESTNAME="Probable ${TESTNAME}" 86 TESTSCORE=${TESTSCORE2} 87 LT4=yes 88 } 89