diff options
| author | Vsevolod Stakhov <vsevolod@rambler-co.ru> | 2010-04-20 16:32:23 +0400 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@rambler-co.ru> | 2010-04-20 16:32:23 +0400 |
| commit | 2d8eebcf7a0951d3d1189ddface7678fea76dd4c (patch) | |
| tree | 7a1748e4d3633c3b8def3de8f2a08fb370c7e61d /conf/lua/regexp/fraud.lua | |
| parent | d4b35de4315753629ac5b107968e6194eac85d24 (diff) | |
| download | rspamd-2d8eebcf7a0951d3d1189ddface7678fea76dd4c.tar.gz rspamd-2d8eebcf7a0951d3d1189ddface7678fea76dd4c.zip | |
* Bugfixes:
- handle '\' characters in lua strings correctly
- fix lua initialization
- avoid of using global lua state (global L)
- fix listen sockets hash to allow multiply workers of same type but on different listen sockets
- fix modules options inserting to allow multiply options of the same name
- fix parsing of lua options
- fix lua rules
Diffstat (limited to 'conf/lua/regexp/fraud.lua')
| -rw-r--r-- | conf/lua/regexp/fraud.lua | 66 |
1 files changed, 33 insertions, 33 deletions
diff --git a/conf/lua/regexp/fraud.lua b/conf/lua/regexp/fraud.lua index 5800fa271..40465744f 100644 --- a/conf/lua/regexp/fraud.lua +++ b/conf/lua/regexp/fraud.lua @@ -1,43 +1,43 @@ -- Fraud messages (Nigeria spam, viagra, etc) local reconf = config['regexp'] -local fraud_dbi = '/(?:\bdollars?\b|\busd(?:ollars)?(?:[0-9]|\b)|\bus\$|\$[0-9,.]{6,}|\$[0-9].{0,8}[mb]illion|\$[0-9.,]{2,10} ?m|\beuros?\b|u[.]?s[.]? [0-9.]+ m)/irP' +local fraud_dbi = '/(?:\\bdollars?\\b|\\busd(?:ollars)?(?:[0-9]|\\b)|\\bus\\$|\\$[0-9,.]{6,}|\\$[0-9].{0,8}[mb]illion|\\$[0-9.,]{2,10} ?m|\\beuros?\\b|u[.]?s[.]? [0-9.]+ m)/irP' local fraud_kjv = '/(?:claim|concerning) (?:the|this) money/irP' local fraud_irj = '/(?:finance|holding|securit(?:ies|y)) (?:company|firm|storage house)/irP' local fraud_neb = '/(?:government|bank) of nigeria/irP' local fraud_xjr = '/(?:who was a|as a|an? honest|you being a|to any) foreigner/irP' -local fraud_dpr = '/\b(?:(?:respond|reply) (?:urgently|immediately)|(?:urgent|immediate|earliest) (?:reply|response))\b/irP' -local fraud_pts = '/\b(?:ass?ass?inat(?:ed|ion)|murder(?:e?d)?|kill(?:ed|ing)\b[^.]{0,99}\b(?:war veterans|rebels?))\b/irP' -local fraud_bep = '/\b(?:bank of nigeria|central bank of|trust bank|apex bank|amalgamated bank)\b/irP' -local fraud_tdp = '/\b(?:business partner(?:s|ship)?|silent partner(?:s|ship)?)\b/irP' -local fraud_gan = '/\b(?:charles taylor|serena|abacha|gu[eйи]i|sese[- ]?seko|kabila)\b/irP' -local fraud_irt = '/\b(?:compliments? of the|dear friend|dear sir|yours faithfully|season\'?s greetings)\b/irP' -local fraud_aon = '/\b(?:confidential|private|alternate|alternative) (?:(?:e-? *)?mail)\b/irP' -local fraud_wny = '/\b(?:disburse?(?:ment)?|incurr?(?:ed)?|remunerr?at(?:ed?|ion)|remm?itt?(?:ed|ance|ing)?)\b/irP' -local fraud_ipk = '/\b(?:in|to|visit) your country\b/irP' -local fraud_qxx = '/\b(?:my name is|i am) (?:mrs?|engr|barrister|dr|prince(?:ss)?)[. ]/irP' -local fraud_iou = '/\b(?:no risks?|risk-? *free|free of risks?|100% safe)\b/irP' -local fraud_ezy = '/\b(?:of|the) late president\b/irP' -local fraud_mly = '/\b(?:reply|respond)\b[^.]{0,50}\b(?:to|through)\b[^.]{0,50}\@\b/irP' -local fraud_zfj = '/\b(?:wife|son|brother|daughter) of the late\b/irP' -local fraud_kdt = '/\bU\.?S\.?(?:D\.?)?\s*(?:\$\s*)?(?:\d+,\d+,\d+|\d+\.\d+\.\d+|\d+(?:\.\d+)?\s*milli?on)/irP' -local fraud_ulk = '/\baffidavits?\b/irP' -local fraud_bgp = '/\battached to ticket number\b/irP' -local fraud_fbi = '/\bdisburs/irP' -local fraud_jbu = '/\bforeign account\b/irP' -local fraud_yww = '/\bfurnish you with\b/irP' -local fraud_jyg = '/\bgive\s+you .{0,15}(?:fund|money|total|sum|contact|percent)\b/irP' -local fraud_xvw = '/\bhonest cooperation\b/irP' -local fraud_uuy = '/\blegitimate business(?:es)?\b/irP' -local fraud_snt = '/\blocate(?: .{1,20})? extended relative/irP' -local fraud_ltx = '/\bmilli?on (?:.{1,25} thousand\s*)?(?:(?:united states|u\.?s\.?) dollars|(?i:U\.?S\.?D?))\b/irP' -local fraud_jnb = '/\boperat(?:e|ing)\b[^.]{0,99}\b(?:for(?:ei|ie)gn|off-? ?shore|over-? ?seas?) (?:bank )?accounts?\b/irP' -local fraud_qfy = '/\bover-? *(?:invoiced?|cost(?:s|ing)?)\b/irP' -local fraud_wdr = '/\bprivate lawyer\b/irP' -local fraud_wfc = '/\bsecur(?:e|ing) (?:the )?(?:funds?|monies)\b/irP' -local fraud_aum = '/\bthe desk of\b/irP' -local fraud_mcq = '/\btransaction\b.{1,30}\b(?:magnitude|diplomatic|strict|absolute|secret|confiden(?:tial|ce)|guarantee)/irP' -local fraud_etx = '/\byour\b[^.]{0,99}\b(?:contact (?:details|information)|private (?:e?[- ]?mail|telephone|tel|phone|fax))\b/irP' +local fraud_dpr = '/\\b(?:(?:respond|reply) (?:urgently|immediately)|(?:urgent|immediate|earliest) (?:reply|response))\\b/irP' +local fraud_pts = '/\\b(?:ass?ass?inat(?:ed|ion)|murder(?:e?d)?|kill(?:ed|ing)\\b[^.]{0,99}\\b(?:war veterans|rebels?))\\b/irP' +local fraud_bep = '/\\b(?:bank of nigeria|central bank of|trust bank|apex bank|amalgamated bank)\\b/irP' +local fraud_tdp = '/\\b(?:business partner(?:s|ship)?|silent partner(?:s|ship)?)\\b/irP' +local fraud_gan = '/\\b(?:charles taylor|serena|abacha|gu[eйи]i|sese[- ]?seko|kabila)\\b/irP' +local fraud_irt = '/\\b(?:compliments? of the|dear friend|dear sir|yours faithfully|season\'?s greetings)\\b/irP' +local fraud_aon = '/\\b(?:confidential|private|alternate|alternative) (?:(?:e-? *)?mail)\\b/irP' +local fraud_wny = '/\\b(?:disburse?(?:ment)?|incurr?(?:ed)?|remunerr?at(?:ed?|ion)|remm?itt?(?:ed|ance|ing)?)\\b/irP' +local fraud_ipk = '/\\b(?:in|to|visit) your country\\b/irP' +local fraud_qxx = '/\\b(?:my name is|i am) (?:mrs?|engr|barrister|dr|prince(?:ss)?)[. ]/irP' +local fraud_iou = '/\\b(?:no risks?|risk-? *free|free of risks?|100% safe)\\b/irP' +local fraud_ezy = '/\\b(?:of|the) late president\\b/irP' +local fraud_mly = '/\\b(?:reply|respond)\\b[^.]{0,50}\\b(?:to|through)\\b[^.]{0,50}\\@\\b/irP' +local fraud_zfj = '/\\b(?:wife|son|brother|daughter) of the late\\b/irP' +local fraud_kdt = '/\\bU\\.?S\\.?(?:D\\.?)?\\s*(?:\\$\\s*)?(?:\\d+,\\d+,\\d+|\\d+\\.\\d+\\.\\d+|\\d+(?:\\.\\d+)?\\s*milli?on)/irP' +local fraud_ulk = '/\\baffidavits?\\b/irP' +local fraud_bgp = '/\\battached to ticket number\\b/irP' +local fraud_fbi = '/\\bdisburs/irP' +local fraud_jbu = '/\\bforeign account\\b/irP' +local fraud_yww = '/\\bfurnish you with\\b/irP' +local fraud_jyg = '/\\bgive\\s+you .{0,15}(?:fund|money|total|sum|contact|percent)\\b/irP' +local fraud_xvw = '/\\bhonest cooperation\\b/irP' +local fraud_uuy = '/\\blegitimate business(?:es)?\\b/irP' +local fraud_snt = '/\\blocate(?: .{1,20})? extended relative/irP' +local fraud_ltx = '/\\bmilli?on (?:.{1,25} thousand\\s*)?(?:(?:united states|u\\.?s\\.?) dollars|(?i:U\\.?S\\.?D?))\\b/irP' +local fraud_jnb = '/\\boperat(?:e|ing)\\b[^.]{0,99}\\b(?:for(?:ei|ie)gn|off-? ?shore|over-? ?seas?) (?:bank )?accounts?\\b/irP' +local fraud_qfy = '/\\bover-? *(?:invoiced?|cost(?:s|ing)?)\\b/irP' +local fraud_wdr = '/\\bprivate lawyer\\b/irP' +local fraud_wfc = '/\\bsecur(?:e|ing) (?:the )?(?:funds?|monies)\\b/irP' +local fraud_aum = '/\\bthe desk of\\b/irP' +local fraud_mcq = '/\\btransaction\\b.{1,30}\\b(?:magnitude|diplomatic|strict|absolute|secret|confiden(?:tial|ce)|guarantee)/irP' +local fraud_etx = '/\\byour\\b[^.]{0,99}\\b(?:contact (?:details|information)|private (?:e?[- ]?mail|telephone|tel|phone|fax))\\b/irP' local fraud_pvn = '/as the beneficiary/irP' local fraud_fvu = '/award notification/irP' local fraud_ckf = '/computer ballot system/irP' |