#LAST UPDATED 10/22/2007
REVDNS		END	NOTCONTAINS	.aol.com

TESTSFAILED	10	PCRE		(FILTER-(SCAM|STOCKS|DRUGS))
TESTSFAILED	10	PCRE		(SNIFFER)

TESTSFAILED	1	PCRE		(CASA)

TESTSFAILED	-1	CONTAINS	NOPOSTMASTER
TESTSFAILED	-2	CONTAINS	FROMNOMATCH
TESTSFAILED	-2	CONTAINS	MAILPOLICE-WEBMAIL

#GENUINE AOL ADDRESS http://postmaster.aol.com/faq/mailerfaq.html#syntax
MAILFROM	-5	PCRE	([a-z][a-z0-9]{2,15}\@aol\.com)

BODY		-5	CONTAINS 	http://presence.webmail.aol.com/mailsig/?sn=

HEADERS		-2	PCRE	(X-Spam-Flag: NO)
HEADERS		10	PCRE	(X-Spam-Flag: YES)


#-------------------------------------------------------------------#
#	SPAM SIGNATURES		 				    #
#-------------------------------------------------------------------#

#UNLIKLEY URL ExTENSIONS
BODY		5	PCRE	(?i:/sunny\.php)
BODY		5	PCRE	(?i:friends\.links\.php)
BODY		5	PCRE	(?i:http://.+\.(info|biz))
BODY		5	PCRE	(?i:http://.+co/)
BODY		5	PCRE	(?i:http://bit\.ly)
BODY		5	PCRE	(?i:http://j.mp)
BODY		5	PCRE	(?i:http://www.(google|facebook).com/url\?)
BODY		5	PCRE	(http://[youtbe ]{8,10}\.com)