Page History

*bigevil.cf*[BR] bigevil is a set of URIs that have been found in spam messages.[BR] Created by: Chris Santerre [BR] Contact: goober+sawiki@moglobal.com [BR] License Type: GPL (For now) [BR] Status: Active [BR] Auto-update: Yes - Please try to keep checks down to no more then once every 12 hours [BR] Available at: http://www.rulesemporium.com/rules/bigevil.cf [BR] Mirror: \[http://alex.zeitform.de/mirror/bigevil.cf\][BR] Mirror: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  Extras: Chris has been kind enough to mirror many of these rulesets on his site, as well as many other custom rules[BR] More information on Chris' rules: http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm [BR] Note: bigevil has gone through a lot of tweaking to lower the memory required to run this large list, this is very helpful is you have a high volume of mail to handle.[BR] Sample Results:  [MasscheckBigEvil] (Version 2.12h)

: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  More information on Tim's rules: http://www.timj.co.uk/linux/sa.php [BR] Note: Main aim is to catch warnings generated by virus scanners along the lines of "you sent us virus", which are sent to the (usually faked) 'senders' of virus-infected e-mails. Contains many "black-and-white" very-high-scoring rules.  (see also http://www.exit0.us/index.php/VirusBounceRules) [BR] Sample Results:  [MasscheckBogusVirus] (version 1.69 2004-03-04) [BR]

*chickenpox.cf* [or th.is kind of garb+age"[BR|BR] chickenpox is a set of rules designed to catch spam like "l.ooks f] Created by: Jennifer Wheeler [BR] Contact: TBD [BR] License Type: TBD [BR] Status: *Locked* [BR] Auto-update: *No* [BR] Available at: http://www.emtinc.net/includes/chickenpox.cf [BR] Mirror: \[http://www.rulesemporium.com/rules.htm rulesemporium.com\][BR] *NOTE: Early versions of Mirror: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  *NOTE: Early versions of Rules Du Jour included this set in it's default config.  This set is now considered "stable" and is no longer actively updated.  Please do not use auto-update scripts*[BR] More information on Jennifer's rules: http://www.emtinc.net/spamhammers.htm [BR] Sample Results:  [MasscheckChickenpox] (Version 1.15 2004-02-06)

*evilnumbers.cf* [BR] evilnumbers is a collection of phone numbers, PO boxes and street addresses harvested from spam.[BR] Created by: Matt Yackley [BR] Contact: sare@yackley.org [BR] License Type: Artistic [BR] Status: Active [BR] Auto-update: Yes - Please try to keep checks down to no more then once every 12 hours [BR] Available at: http://www.rulesemporium.com/rules/evilnumbers.cf [BR] Mirror: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  Extras: Localized language packs available at the link below. [BR] Mirror: \[http://www.yackley.org/sa-rules yackley.org\][BR] More information on Matt Yackley's rules: http://www.yackley.org/sa-rules [BR] Sample Results:  [MasscheckEvilNumbers] (Version: 1.12k 03/31/2004) [BR]

*sa-random.cf* [BR] sa-random searches for spamware mistakes like: %RANDOM_WORD [BR] Created by: William Stearns [BR] Contact: wstearns@pobox.com [BR] License Type: GPL [BR] Status: Active [BR] Auto-update: Yes - Please try to keep checks down to no more then once every 4 hours [BR] Auto-update: Preferred method *rsync* via zaphod.stearns.org::wstearns/sa-blacklist/ [BR] Available at: http://www.stearns.org/sa-blacklist/random.current.cf [BR] Available at: ftp://ftp.stearns.org/pub/wstearns/sa-blacklist/random.current.cf [BR] Mirror: \[ftp://ftp.bascom.com/pub/wstearns/sa-blacklist/ ftp.bascom.com\] [BR] More information on Bill's rules: http://www.stearns.org/sa-blacklist/README [BR] Sample Results:  [MasscheckRandom] (release: 2004030501)

shouldn't be together.[BR] Created by: Fred Tarasevicius [BR] Contact: tech2@i-is.com [BR] License Type: TBD [BR] Status: TBD [BR] Auto-update: TBD [BR] Available at: http://www.rulesemporium.com/rules/99_FVGT_Tripwire.cf [BR] Mirror

: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  Note: These rules are based on the English language, due to the number of rules that can be triggered, problem have been reported by exim users that it can cause the header to go over the byte limit of the exim header limits, also MS Outlook can have problems with rules that look for "message headers" due to a unknown size limit in the amount of headers it will search.[BR] Sample Results:  [MasscheckTripwire] (Version 1.17)

*weeds.cf 1&2* [BR] weeds looks for alphabet decimal and hex characters, lower and uppercase. [BR] Created by: Jennifer Wheeler[BR] Contact: TBD [BR] License Type: TBD [BR] Status: *Locked* [BR] Auto-update: *No* [BR] Available at: http://www.emtinc.net/includes/weeds.cf or set 2 at: http://www.emtinc.net/includes/weeds2.cf [BR] Mirror: \[http://www.rulesemporium.com/rules.htm rulesemporium.com\][BR] Mirror: \[http://www.exit0.us/rules www.exit0.us/rules\][BR]  More information on Jennifer's rules: http://www.emtinc.net/spamhammers.htm [BR] *NOTE: Early versions of Rules Du Jour included this set in it's default config.  This set is now considered "stable" and is no longer actively updated.  Please do not use auto-update scripts*[BR] Note: Weeds2 is a more restrictive set, DO NOT run both sets at the same time.[BR] Sample Results:  [MasscheckWeeds] (Version 1.0, 2003-11-13)