# $Id: procmailrc,v 1.79 2000/02/28 10:00:35 friedman Exp $
# Noah's junkmail filter

MAILDIR=/com/archive/users/friedman
DEFAULT=/com/mail/friedman

#VERBOSE=on
LOGABSTRACT=no
LOGFILE=procmail.log

SPAM_TAG="X-Procmail-Spam:"

DATE=`date +%Y.%m`
SPAMFILE=spam/$DATE

########################################
# Subjects to junk with extreme prejudice.
########################################

# Junk messages with subject lines in all caps that have at least two words
# (to avoid junking things like keith bostic's QOTD posts)
# This is catching too many legitimate messages.
#:0 HD
#* ^Subject:[ 	]*[A-Z0-9!?,.*---()$/]+[ 	]+[A-Z0-9!?,.* 	---()$/]+$
#$SPAMFILE

RE="^(Subject|X-Mailer):.*"

:0 H
* $ $RE
{
  :0 Hf
  * .*
  | formail -b -f -i "$SPAM_TAG Subject or X-Mailer"

  :0 Hf
  * $ !${RE}(adult|amature|amateur|attract|erotic|free|hot|lewd|nude|saucy|sex).*(action|appeal|celeb|channel|chat|image|inter|life|live|material|only|pic|secret|sex|site|talk|teen|video|web|xxx)
  * $ !${RE}(ad|adv|advertisement)[:.]
  * $ !${RE}(aggressive|no|small).*invest
  * $ !${RE}(annivers|christmas|holiday|xmas|valentine).*gift
  * $ !${RE}(automatic|earn|extra|fast|free|guaranteed|immediate|instant|make|more|over[ -]?night|over[ -]?nite|product|quick|save).*(%|cash|credit|delivery|email.*software|income|money|newsletter|pager|phone|sex|stock)
  * $ !${RE}(build|free|make|cable|scramble|c.a.b.l.e).*(box|b.o.x|jam|scramble|cable|csramble|tv|c.a.b.l.e)
  * $ !${RE}(bulk|mass|target).*mail
  * $ !${RE}(discover|find|investigate|research|trace).*family.*history
  * $ !${RE}(double.*your|marketing).*(internet|secret|service|tool)
  * $ !${RE}(earn|generate|increase|make|maximize|reach).*(hundred|thousand|million|sale|day|week|month|year)
  * $ !${RE}(end|help|quit|stop).*(smoke|smoking)
  * $ !${RE}(home|own).*(based|business|biz|job)
  * $ !${RE}(inkjet|printer|toner)
  * $ !${RE}(internet|secret).*(marketing|report|software)
  * $ !${RE}(introduc|release).*million.*vol
  * $ !${RE}(major|urgent).*buy.*recommend
  * $ !${RE}(no.*porn|no.*pop.?ups).*\1
  * $ !${RE}(smoke|smoking).*(end|help|quit|stop)
  * $ !${RE}(work|business|biz).*(achieve|home|info)
  * $ !${RE}(yeni|etkili|tanitim|imkanlari|farkli|hizli|etkili|basarili|bedava|sifreli|kanallari|futbolu|sevgililer|konusan|turkiye|muhtesem|kampanya)
  * $ !${RE}>>>.*<<<
  * $ !${RE}(advertisement|adverti[sz]ing)
  * $ !${RE}\$[0-9,.].*sale
  * $ !${RE}\$\$\$
  * $ !${RE}all.*about.*know
  * $ !${RE}attention.*(shareholder|investor)
  * $ !${RE}beat.*(IRS|internal.*revenue.*service)
  * $ !${RE}big.*bucks
  * $ !${RE}bonus.*deal
  * $ !${RE}boost.*(biz|business|traffic)
  * $ !${RE}business.*(at.*home|loans|opportunity)
  * $ !${RE}buy.*(home|online)
  * $ !${RE}call.*today
  * $ !${RE}cash.*avail
  * $ !${RE}cent.*(per.*|/)(min|mun|hour|hr|day|mon)
  * $ !${RE}cents.*long.*distance
  * $ !${RE}collectible
  * $ !${RE}credit.*(card|deserve|off.*back|problem)
  * $ !${RE}dealers.*needed
  * $ !${RE}debt.*(consolidat|free|problem)
  * $ !${RE}(discover|hidden).*secrets
  * $ !${RE}don.?t.*get.*ripped.*off
  * $ !${RE}download.*Ia\.n\.i
  * $ !${RE}e-alert:.*buy.*recommendation
  * $ !${RE}e?-?mail.*(marketing.*works|million.*for)
  * $ !${RE}earn.*(at|from).*home
  * $ !${RE}entrepre.*wanted
  * $ !${RE}f[ \t]+r[ \t]+e[ \t]+e
  * $ !${RE}find.*out.*(everything|what.*they.*want.*you.*to.*know)
  * $ !${RE}for.*your.*business
  * $ !${RE}free.*(cd|trial.*)?(catalog|gov.*grants|internet|marketing|membership|subscription)
  * $ !${RE}get.*out.*of.*debt
  * $ !${RE}get.*win.*(95|98|2000|nt|edition|update)
  * $ !${RE}global.*exposure
  * $ !${RE}goldrush.*mail
  * $ !${RE}golf.*ball
  * $ !${RE}group mail [0-9]
  * $ !${RE}health.*wealth
  * $ !${RE}home.*work.*needed
  * $ !${RE}income.*regulation
  * $ !${RE}inet.*review
  * $ !${RE}info.*you.*request
  * $ !${RE}internet.*specialist.*007.*spy
  * $ !${RE}internet.*by.*sic.*codes
  * $ !${RE}intimate.*services
  * $ !${RE}investigate.*anyone
  * $ !${RE}invitation.*friend
  * $ !${RE}(find|know|learn).*(any|every)thing.*about.*(any|every)
  * $ !${RE}(diet|knock|lose).*(lbs|pound|weight)
  * $ !${RE}lx.mp3
  * $ !${RE}mail.*to.*million
  * $ !${RE}mars.*site
  * $ !${RE}merchant.*account
  * $ !${RE}(college|diploma|money|university).*(fast|maker?|making|risk)
  * $ !${RE}money.*you.*(deserve|earn|need|want)
  * $ !${RE}money[!$]
  * $ !${RE}motivated.*for.*success
  * $ !${RE}necessary information!!
  * $ !${RE}no.*suit.*no.*commute
  * $ !${RE}not.*mlm
  * $ !${RE}now.*available.*(million| cd | vol.)
  * $ !${RE}path.*financial.*freedom
  * $ !${RE}pay.*(due|more)
  * $ !${RE}per.*minute.*long.*distance
  * $ !${RE}program.*dss.*channel
  * $ !${RE}protect.*from.*lawsuit
  * $ !${RE}read.*serious.*retir
  * $ !${RE}re:.*how.*it.*going
  * $ !${RE}released.*[0-9]+.*million
  * $ !${RE}save.*on.*long
  * $ !${RE}search.*engine.*secrets
  * $ !${RE}(sizzl|wall.*street).*stock
  * $ !${RE}special.*report
  * $ !${RE}stock.*(advice|alert|hold|invest|new|opportun|tip)
  * $ !${RE}stocking.*stuffers
  * $ !${RE}tax.*strategy
  * $ !${RE}toll.*free
  * $ !${RE}trade.*like.*pro
  * $ !${RE}viagra.*online
  * $ !${RE}virtual.*pet
  * $ !${RE}we.*do.*all.*the.*work.*and.*you.*collect.*all.*the
  * $ !${RE}we.*pay.*(debts|you)
  * $ !${RE}wealth.*secret
  * $ !${RE}web.*site.*(findability|hosting)
  * $ !${RE}weekly.*checks
  * $ !${RE}weight.*loss
  * $ !${RE}win.*free
  * $ !${RE}wow.*what.*story.*online
  * $ !${RE}xxx.*adult
  * $ !${RE}you.*been.*selected
  * $ !${RE}you.*request.*info
  * $ !${RE}your.*invited
  | formail -b -f -I "$SPAM_TAG"

  :0 H
  * $ ^$SPAM_TAG
  $SPAMFILE
}

########################################
# Addresses to junk with extreme prejudice.
########################################

# Removed Message-ID from this list because too many MUAs generate
# forms like 52889042@domain, and that is a useful filter rule to have
# below.
RE="^(From|To|Apparently-To|Reply-To|Sender|Received|X-[^:]*):.*"

:0 H
* $ $RE
{
  :0 Hf
  * .*
  | formail -b -f -i "$SPAM_TAG address header"

  :0 Hf
  * $ !${RE}(4|for)?freedom(now)?@
  * $ !${RE}(america|flash|urgent)mail\.(com|net|org)
  * $ !${RE}(bigbucks?|billyjojimbob|clubmail|discount|golfballs?|webpromos?)@
  * $ !${RE}(business|businesses|public|you)@
  * $ !${RE}(greatbiz|mailpro[^@]*|marketing|mktg|money|nothere|remove|rmvme)@
  * $ !${RE}(maca|tour)peru\.com
  * $ !${RE}(more|)freestuff\.com
  * $ !${RE}(need|)morehits\.(com|net|org)
  * $ !${RE}(netusa|usanet)[123]\.(com|net|org)
  * $ !${RE}(opportunit(ies|y)|profits?|sales|stephlise|ultramax)@
  * $ !${RE}(supernet|idx)\.biz
  * $ !${RE}1stfamily\.com
  * $ !${RE}1vm\.com
  * $ !${RE}4(integrity|sale|u2?|ufree|websites)\.(com|gov|mail|net|org)
  * $ !${RE}@[0-9]+\.(com|net|org)
  * $ !${RE}@bulkmail
  * $ !${RE}@public\.
  * $ !${RE}[0-9]*cust[0-9]*\.tnt.*uu\.net
  * $ !${RE}[@.]gmds\.com
  * $ !${RE}[@.]goc\.com
  * $ !${RE}\<[0-9]+@
  * $ !${RE}abinternet\.net
  * $ !${RE}access20112\.com
  * $ !${RE}accesspro\.(com|net|org)
  * $ !${RE}acomco\.com
  * $ !${RE}advantage-life\.com
  * $ !${RE}ahealthy\.com
  * $ !${RE}aimarketinginc\.com
  * $ !${RE}alpha-services\.com
  * $ !${RE}altavista\.net
  * $ !${RE}answerme\.(com|net|org)
  * $ !${RE}arcturus\.net
  * $ !${RE}argonauts\.net
  * $ !${RE}ascela\.net
  * $ !${RE}asys4u\.com
  * $ !${RE}att(|mail)\.(com|net)
  * $ !${RE}bamerica\.com
  * $ !${RE}bell654\.com
  * $ !${RE}bettergolf\.(com|net|org)
  * $ !${RE}big-web\.com
  * $ !${RE}bigfoot\.com
  * $ !${RE}[ei]?biz(hosting|proplus)?[0-9]*\.(com|org|net)
  * $ !${RE}blmcomputers\.com
  * $ !${RE}bonghits\.com
  * $ !${RE}bulkemailserver\.com
  * $ !${RE}businesslisting\.com
  * $ !${RE}bytewarecafe\.com
  * $ !${RE}cajones\.com
  * $ !${RE}cash-biz\.net
  * $ !${RE}casinopromo\.com
  * $ !${RE}catshop\.com
  * $ !${RE}centurynew\.com
  * $ !${RE}childcare\.com
  * $ !${RE}cisny\.com
  * $ !${RE}\.cjb\.net
  * $ !${RE}compelsa\.com
  * $ !${RE}concepts2001\.com
  * $ !${RE}concptstaff\.com
  * $ !${RE}conradpromotions\.com
  * $ !${RE}consumernet\.com
  * $ !${RE}coqui\.net
  * $ !${RE}coupledanceworld\.com
  * $ !${RE}crushnet\.com
  * $ !${RE}cscent\.net
  * $ !${RE}cyber(tize|)[.-]?(broadcasting|dude|e?mail|pages?|preneur|promo|wizard)\.(com|org|net)
  * $ !${RE}cyber\.mail\.[^.]+\.(com|org|net|cn|uk)
  * $ !${RE}cybertron\.at
  * $ !${RE}cypruscenter\.com
  * $ !${RE}daltek\.net
  * $ !${RE}deliver-e\.com
  * $ !${RE}depth-finder\.com
  * $ !${RE}devshop\.com
  * $ !${RE}dialsprint\.net
  * $ !${RE}digital-coupons\.com
  * $ !${RE}dino-g\.com
  * $ !${RE}directsend\.com
  * $ !${RE}doit(|now)\.com
  * $ !${RE}domainless\.com
  * $ !${RE}dotcom-xpress\.net
  * $ !${RE}dozer@netwizards\.net
  * $ !${RE}dpliv\.com
  * $ !${RE}dreamersonline\.com
  * $ !${RE}dreamgold\.com
  * $ !${RE}dtjmarketing\.com
  * $ !${RE}e-(bizness|sales)\.(com|net|org)
  * $ !${RE}e?mail-?(andnews|center|lacky|man|mole|response)\.(com|net|org)
  * $ !${RE}e?mail-?(city|cty|excite|for[^.]*|loop|machine)\.(com|net|org)
  * $ !${RE}e?mail-?(|concepts|direct|marketing|nowmail)\.(com|net|org)
  * $ !${RE}econopromo\.com
  * $ !${RE}england\.com
  * $ !${RE}enrichyourlife\.com
  * $ !${RE}estop\.net
  * $ !${RE}etmp\.com
  * $ !${RE}excite\.com
  * $ !${RE}ezmailplus\.com
  * $ !${RE}familysolutions\.net
  * $ !${RE}fastservice\.com
  * $ !${RE}firstgear\.com
  * $ !${RE}fomomoney\.com
  * $ !${RE}foreclosure-world\.cc
  * $ !${RE}freedom4u\.com
  * $ !${RE}freedomstarr\.com
  * $ !${RE}freemanchester\.com
  * $ !${RE}friendlyserver\.com
  * $ !${RE}fullmkt\.com
  * $ !${RE}furnituredirect\.com
  * $ !${RE}future\.net\.tr
  * $ !${RE}gambler\.ru
  * $ !${RE}gate401\.com
  * $ !${RE}gaura\.com
  * $ !${RE}gen-biz\.com
  * $ !${RE}getit2*\.com
  * $ !${RE}getmore(4u|)\.net
  * $ !${RE}gjamescleaning\.com\.au
  * $ !${RE}(direct|global)-?(ads|data|group|impact)\.(com|net|org)
  * $ !${RE}globecomm\.net
  * $ !${RE}glodem@wizvax\.net
  * $ !${RE}goldengateway\.com
  * $ !${RE}golfballsunlimitedusa\.(com|net|org)
  * $ !${RE}gracefully\.com
  * $ !${RE}greenapple\.com
  * $ !${RE}harris-marketing\.com
  * $ !${RE}healthynwealthy\.com
  * $ !${RE}herschlag\.com
  * $ !${RE}hitmasters\.com
  * $ !${RE}hitsrus\.com
  * $ !${RE}home\.(com|net)
  * $ !${RE}[@.]host\.(com|net)
  * $ !${RE}hotbot\.(com|net)
  * $ !${RE}hotmail\.(com|net)
  * $ !${RE}hypermart\.net
  * $ !${RE}iamwaiting\.com
  * $ !${RE}ibasis\.net
  * $ !${RE}iemmc\.org
  * $ !${RE}ikansas\.com
  * $ !${RE}iname(|corp)\.com
  * $ !${RE}independentpress\.com
  * $ !${RE}in?direct\.com
  * $ !${RE}info(name|stry)\.com
  * $ !${RE}inkjetnet\.com
  * $ !${RE}intellibase\.com
  * $ !${RE}inter(kosmos|nichemedia|porn|tain)\.(net|org|com)
  * $ !${RE}intrnsales\.com
  * $ !${RE}ipt\.aol\.com
  * $ !${RE}ispam\.net
  * $ !${RE}itcmex\.com
  * $ !${RE}iwarp\.com
  * $ !${RE}join(usnow|)\.com
  * $ !${RE}jtsr-stock\.com
  * $ !${RE}juno\.com
  * $ !${RE}kingcard\.com
  * $ !${RE}krazymirror\.com
  * $ !${RE}laoffices\.com
  * $ !${RE}launcher\.com
  * $ !${RE}link2us\.com
  * $ !${RE}listbot\.com
  * $ !${RE}lustingforyou\.com
  * $ !${RE}lycosmail\.com
  * $ !${RE}mabda\.org
  * $ !${RE}mallmaster[0-9]*\.com
  * $ !${RE}marathon4com\.net
  * $ !${RE}marketing\.com
  * $ !${RE}martianconsulate\.com
  * $ !${RE}mary-world\.com
  * $ !${RE}mass-email\.com
  * $ !${RE}max2001mlm\.com
  * $ !${RE}megpro\.com
  * $ !${RE}melbcup\.com
  * $ !${RE}millionlink\.com
  * $ !${RE}mjmoney\.net
  * $ !${RE}ml\.org
  * $ !${RE}mlm(all|pro)\.(com|net|org)
  * $ !${RE}mlsa-?3\.com
  * $ !${RE}mmaildirect\.com
  * $ !${RE}money(|maker|world)\.(com|net|org)
  * $ !${RE}moon--stone\.com
  * $ !${RE}morenet\.(com|net|org)
  * $ !${RE}myrealbox\.com
  * $ !${RE}ndirect\.co\.uk
  * $ !${RE}neller007\.com
  * $ !${RE}net(2phone|apple|industries|pa|-shoppe|surfpc|world1)\.(com|net)
  * $ !${RE}netscape\.net
  * $ !${RE}netvision\.net\.il
  * $ !${RE}neztek\.com
  * $ !${RE}noisp\.(com|net|org)
  * $ !${RE}nope\.(com|net|org)
  * $ !${RE}noreply\.(com|net|org)
  * $ !${RE}notfalse\.com
  * $ !${RE}nowhere\.(com|net|org)
  * $ !${RE}nvmail\.com
  * $ !${RE}oilpatchnet\.com
  * $ !${RE}online-success\.com
  * $ !${RE}onlinebiz\.net
  * $ !${RE}onthenet\.net
  * $ !${RE}over-?[2-9]0\.com
  * $ !${RE}owlsnest\.com
  * $ !${RE}pacnw\.com
  * $ !${RE}partnersnow\.com
  * $ !${RE}pc-express\.com
  * $ !${RE}pgent\.com
  * $ !${RE}pipeline@tqos\.com
  * $ !${RE}planetmail\.com
  * $ !${RE}poffice\.com
  * $ !${RE}popsite\.net
  * $ !${RE}power2people\.com
  * $ !${RE}preferred-mail\.net
  * $ !${RE}premiumservice\.com
  * $ !${RE}pro-spinners\.com
  * $ !${RE}promo\.(com|net|org)
  * $ !${RE}prospectpipeline\.net
  * $ !${RE}prosperitybooks\.com
  * $ !${RE}pub-ip\.psi\.net
  * $ !${RE}putpeel\.com
  * $ !${RE}qdistributing\.com
  * $ !${RE}qualhost\.com
  * $ !${RE}quantcom\.com
  * $ !${RE}quikmoney\.com
  * $ !${RE}redcomet\.net
  * $ !${RE}regulus\.net
  * $ !${RE}removeme\.com
  * $ !${RE}resifax\.com
  * $ !${RE}savetrees\.com
  * $ !${RE}savoynet\.com
  * $ !${RE}saw\.net
  * $ !${RE}searchengine-help\.com
  * $ !${RE}shop(|pingplanet)\.com
  * $ !${RE}shorline-ent\.com
  * $ !${RE}skinbiology\.com
  * $ !${RE}smartnews\.net
  * $ !${RE}speedmatix\.com
  * $ !${RE}(|sporting)casino\.(com|net|org)
  * $ !${RE}star-man\.com
  * $ !${RE}strutyourstuff\.com
  * $ !${RE}submit\.org
  * $ !${RE}success\.(com|net|org)
  * $ !${RE}sulc\.com
  * $ !${RE}super(cybermall|online)\.(com|net|org)
  * $ !${RE}surfy\.net
  * $ !${RE}(|computer-)sweepstakes?\.(com|net|org|cc|to)
  * $ !${RE}t-1net\.com
  * $ !${RE}tagentp\.com
  * $ !${RE}tal-shahar\.com
  * $ !${RE}tallmall\.com
  * $ !${RE}tbmail\.net
  * $ !${RE}technologist\.com
  * $ !${RE}technomail\.com
  * $ !${RE}tele?bot\.com
  * $ !${RE}texascasino\.com
  * $ !${RE}the.?internet\.com
  * $ !${RE}theglobalmarketer\.com
  * $ !${RE}thehitman\.com
  * $ !${RE}theinfoman\.com
  * $ !${RE}thepres\.com
  * $ !${RE}theweb@([^.,]+\.|)earthlink\.net
  * $ !${RE}timefreedom\.com
  * $ !${RE}totalmarketing\.com
  * $ !${RE}tracker-tech\.com
  * $ !${RE}trafficboost\.com
  * $ !${RE}tsf-marketing\.com
  * $ !${RE}turkfutbolu\.com
  * $ !${RE}txdonofrio\.com
  * $ !${RE}ultra-mail\.com
  * $ !${RE}ultragrafix\.com
  * $ !${RE}ultramax\.net
  * $ !${RE}unbounded\.(com|net|org)
  * $ !${RE}united-cbe\.org
  * $ !${RE}unknown\.(com|net|org)
  * $ !${RE}usa1-inc\.com
  * $ !${RE}usa\.net
  * $ !${RE}users@aol\.com
  * $ !${RE}utfp\.com
  * $ !${RE}uymail\.com
  * $ !${RE}valueweb\.net
  * $ !${RE}vip@allvip\.com
  * $ !${RE}vipcalling\.com
  * $ !${RE}virtualis\.com
  * $ !${RE}vpros\.com
  * $ !${RE}vspn\.net
  * $ !${RE}we-?(deliver|work-for-you)\.(com|net|org)
  * $ !${RE}web-?(host.*|sales|usa|works|wurx)\.(com|net|org)
  * $ !${RE}whitenteeth\.com
  * $ !${RE}whynot\.net
  * $ !${RE}work-?(at-?home|load)\.(com|net|org)
  * $ !${RE}workexchange\.com
  * $ !${RE}worldmarket4u\.com
  * $ !${RE}wwnet\.net
  * $ !${RE}wwwservis\.com
  * $ !${RE}xglobe\.com
  * $ !${RE}xlink\.com
  * $ !${RE}yahoo\.com
  * $ !${RE}yifan\.net
  * $ !${RE}you\.(com|net|org)
  * $ !${RE}your(domain|isp|place)\.(com|net|org)
  | formail -b -f -I "$SPAM_TAG"

  :0 H
  * $ ^$SPAM_TAG
  $SPAMFILE
}

# procmailrc ends here
