#anti nimda and friends /^Content-Type: multipart\/related;.*type=\"multipart\/alternative\";.*boundary=\"====_ABC1234567890DEF_====\".*$/ REJECT You have a virus #anti spammer robots /^X-Mailer: .*(PSS Bulk Mailer|ccMail Link|IXO-Mail|MMailer|K-ML|GoldMine|MAGIC|bomber|expeditor|Brooklyn North|Broadcast|DMailer|Extractor|EMailing List Pro|News Breaker|dbMail|Unity|PG-MAILINGLIST PRO|Dynamic| Splio|Sarbacane|sMailing|Broadc@st|WorkZ|ABMailer|QuickSender).*$/ DISCARD #mplayer ml /^Received:.*mail.mplayerhq.hu.*$/ REJECT I'm not subscribed #anonymizers /^Received: .*(barbarella\.super\.nu|cameleon.org|remailer\.privacy\.at).*$/ REJECT #Spamming domains (stupid companies) /^Received: .*avoska\.net.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*yourwebsite\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*gastone\.it.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*waloa\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*cornut\.fr.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*microtronique\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*caminarsoftware\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*\.lk.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*\.quik\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*rootsystems\.net.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*webhostingtalk\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*mail\.liekki\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*h8h\.com.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*port\.net.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*\.eth\.net.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*hamilton\.net.*$/ REJECT You are banned due to stupid spamming habits /^Received: .*indiatimes\.com.*$/ REJECT bouncetime.com /^Received: .*e-newsletters.*$/ REJECT newsletters forbidden /^Received: .*usbid\.com.*$/ REJECT /^Received: .*\.ixo\.com.*$/ REJECT /^Received: .*dsl.brasiltelecom.net.br.*$/ REJECT #Spamming domains using multiple smtp servers /^From: .*uol\.com\.co.*$/ REJECT You are banned due to stupid spamming habits /^From: .*clubsurf\.com.*$/ REJECT You are banned due to stupid spamming habits /^From: .*ecplaza\.net.*$/ REJECT You are banned due to stupid spamming habits /^From: .*advancenet\.net.*$/ REJECT You are banned due to stupid spamming habits /^From: .*pc-look\.com.*$/ REJECT Shut up stupid spammer /^From: .*pc-zone\.com.*$/ REJECT Shut up stupid spammer /^From: .*zone pc.*$/ REJECT Shut up stupid spammer /^From: .*fabricehalimi@aol\.com.*$/ REJECT Go spam elsewhere #/^From: .*yahoo.com\.*$/ REJECT Sorry, too much spam from yahoo, find another email address to mail me. /^From: .*aufeminin\.com.*$/ REJECT No mail allowed from aufeminin.com, stop spamming me please /^From: .*fullpromote.*$/ REJECT Welcome to fullreject.com /^From: .*@eyou\.com.*$/ REJECT enothing /^From: .*noxservices\.com.*$/ REJECT Shut up stupid spammer #Typical spam Subjects /^Subject: .*penis.*enlargement.*$/ REJECT My sexual life is ok, thanks for bothering /^Subject: .*penis.*growth.*$/ REJECT My sexual life is ok, thanks for bothering /^Subject: .*viagra.*$/ REJECT My sexual life is ok, thanks for bothering /^Subject: .*sex.*free.*$/ REJECT My sexual life is ok, thanks for bothering /^Subject: .*free.*sex.*$/ REJECT My sexual life is ok, thanks for bothering /^Subject: (ADV:|AD:|ADV |AD ).*$/ REJECT You are not the contents of your wallet /^Subject: .*special offer.*$/ REJECT special bounce /^Subject: .*need money.*$/ REJECT no /^Subject: .*Phentermine.*$/ REJECT I'm not fat /^Subject: .*Video.*botschaft.*$/ REJECT fuck off /^Subject: .*penis.*$/ REJECT NO /^Subject: .*member.*pill.*$/ REJECT o0o #Spam often have many spaces to hide a reference at the end /^Subject: .* .*/ REJECT Mail detected as spam - hint, change subject #American, Canadian and people using dollars as your currency, #you could get false positives here ! /^Subject: .* \$.*$/ REJECT Don't mail with dollars in subject, it makes your mail a spam. #People I don't like /^From: .*Sunpai@gmx\.net.*$/ REJECT I do not like you /^From: .*ESoft@gmx\.fr.*$/ REJECT I do not like you /^From: .*charles.*gepner.*$/ REJECT I do not like you /^From: .*gepner.*$/ REJECT I do not like you /^From: .*sunyx@gmx.net.*$/ REJECT I do not like you /^From: .*labl@skynet\.be.*$/ REJECT Stick your vinyls up where i think /^From: .*hermantom@dunasoft\.com.*$/ REJECT u R not on 1rc /^From: .*amiltrader@runbox\.com.*$/ REJECT fuck off #Strange From: and To: headers /^To: .*ndisclosed.*$/ REJECT My name isn't Undisclosed Recipients. /^To: $/ REJECT I have a name /^To: .*yahoogroups.*$/ REJECT not subscribed myself #/^From: $/ REJECT I am sure you have a name /^From: .*bons-plans@voyages-sncf\.com.*$/ REJECT j'aime pas le train /^From: .*@photo-de-classe.com.*$/ REJECT trop de spam, merci /^From: .*@copainsdavant\.com.*$/ REJECT Je me suis desinscrit #attachments /^(.*)name=\"(.*)\.(exe|lnk|dll|shs|vbe|hta|com|vbs|vbe|js|jse|bat|cmd|vxd|scr|shm|pif|chm)\"$/ REJECT Your attachment looks like a virus to me. /^(.*)name=(.*)\.(exe|lnk|dll|eml|shs|vbe|hta|com|vbs|vbe|js|jse|bat|cmd|vxd|scr|shm|pif|chm)$/ REJECT Your attachment looks like a virus to me. #stupid charsets /^Content-Type:.*charset="iso-2022-jp".*$/ REJECT I don't speak japanese #false Originating-IP /^X-Originating-IP:..[a-z].*$/ REJECT ip /^X-Originating-IP:.*IP.*$/ REJECT ip #known spam /^X-Spam-Level: \*\*\*\*\*\*\*\*/ REJECT Spam #virus-alerts /^Subject: virus alert/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: RAV AntiVirus scan results/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Norton AntiVirus detected a virus in a message you sent/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Norton AntiVirus detected and quarantined a virus in a message/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Security Alert - ScanMail for Lotus Notes/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Virus Detected by Network Associates, Inc. Webshield SMTP / REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Network Associates Webshield - e-mail Content Alert/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: InterScan NT Alert/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: Symantec AVF detected a repairable\/quarantined virus in a message you sent/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: You sent an e-mail with a virus/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: BitDefender found an infected object/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: MDaemon Warning - Virus Found/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: MDaemon Notification -- Attachment Removed/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject:.*Virus found in a message you sent.*$/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Message-ID:.*RND-TEST/ REJECT Message Rejected, Invalid Anti-Viral Notification Message /^Subject: (ADV:|AD:|ADV |AD ).*$/ REJECT Message Rejected, You are not your Ikea(tm) catalogue /^Subject: \{Virus\?\}/ REJECT Bogus antivirus warning (1) /^Subject: Virus Detected by Network Associates, Inc\. Webshield/ REJECT Bogus antivirus warning (2) /^Subject: ---- Virus Detected ----$/ REJECT Bogus antivirus warning (3) /^Subject: Virus detected$/ REJECT Bogus antivirus warning (4) /^Subject: Virus Alert$/ REJECT Bogus antivirus warning (5) /^Subject: InterScan NT Alert$/ REJECT Bogus antivirus warning (6) /^Subject: Virus found in the message$/ REJECT Bogus antivirus warning (7) /^Subject: Message quarantined$/ REJECT Bogus antivirus warning (8) /^Subject: VIRUS ALERT!/ REJECT Bogus antivirus warning (9) /^Subject: Virus found in e-mail \(/ REJECT Bogus antivirus warning (10) /^Subject: MDaemon Warning - Virus Found/ REJECT Bogus antivirus warning (11) /^Subject: Warning: E-mail viruses detected$/ REJECT Bogus antivirus warning (12) /^Subject: ScanMail Message: To Sender virus found/ REJECT Bogus antivirus warning (13) /^Subject: Norton Anti ?Virus detected/ REJECT Bogus antivirus warning (14) /^Subject: VIRUS .*IN YOUR MAIL$/ REJECT Bogus antivirus warning (15) /^Subject: Antigen found VIRUS/ REJECT Bogus antivirus warning (16) /^Subject: Filter incident$/ REJECT Bogus antivirus warning (17) /^Subject: Vírus figyelmeztetés! Virus warning!$/ REJECT Bogus antivirus warning (18) /^Subject: Symantec AVF detected/ REJECT Bogus antivirus warning (19) /^Subject: Returned due to virus;/ REJECT Bogus antivirus warning (20) /^Subject: Anti-Virus Notification/ REJECT Bogus antivirus warning (21) /^Subject: BANNED FILENAME .*IN MAIL FROM YOU/ REJECT Bogus antivirus warning (22) /^Subject: File blocked - ScanMail for Lotus/ REJECT Bogus antivirus warning (23) /^Subject: NAV detected a virus/ REJECT Bogus antivirus warning (24) /^Subject: VIRUS .+ IN MAIL FROM YOU/ REJECT Bogus antivirus warning (26) /^Subject: Virus Notification:/ REJECT Bogus antivirus warning (27) /^Subject: Virus found in a message you sent/ REJECT Bogus antivirus warning (28) /^Subject: Virus found in sent message/ REJECT Bogus antivirus warning (29) /^Subject: VIRUS EN SU CORREO/ REJECT Bogus antivirus warning (30) /^Subject: Warning: antivirus system report$/ REJECT Bogus antivirus warning (31) /^Subject: MDaemon Notification -- Attachment Removed$/ REJECT Bogus antivirus warning (32) /^Subject: Information - Antivirus$/ REJECT Bogus antivirus warning (33) /^Subject: Symantec AntiVirus detected a violation/ REJECT Bogus antivirus warning (34) /^Subject: WARNING: YOU WERE SENT A VIRUS/ REJECT Bogus antivirus warning (35) /^Subject: SAV detected a violation in a document/ REJECT Bogus antivirus warning (36) /^Subject: MailMarshal has detected a suspect attachment/ REJECT Bogus antivirus warning (37) /^Subject: A virus was detected in your mail/ REJECT Bogus antivirus warning (38) /^Subject: Recipient Virus-alert/ REJECT Bogus antivirus warning (39) /^Subject: Virus Found in message/ REJECT Bogus antivirus warning (40) /^Subject: E-?mail viruses detected/ REJECT Bogus antivirus warning (41) /^Subject: Undelivered mail: VIRUS FOUND/ REJECT Bogus antivirus warning (42) /^Subject: Quarantined Mail: virus from/ REJECT Bogus antivirus warning (43) /^Subject: Attenzione Virus/ REJECT Bogus antivirus warning (44) /^Subject: \[MailServer Notification\]To Sender virus found/ REJECT Bogus antivirus warning (45) /^Subject: virus in verschickter Nachricht gefunden/ REJECT Bogus antivirus warning (46) /^Subject: MailMarshal has detected a Virus in your message/ REJECT Bogus antivirus warning (47) /^Subject: Virus encontrado en el mensaje enviado/ REJECT Bogus antivirus warning (48) /^Subject: Security Alert - ScanMail for Lotus Notes/ REJECT Bogus antivirus warning (49) /^Subject: Virus Infection Alert/ REJECT Bogus antivirus warning (50) /^Subject: Warning - Virus Detected:/ REJECT Bogus antivirus warning (51) /^Subject: Skynet Mail Protection scan results/ REJECT Bogus antivirus warning (52) /^X-BLTSYMAVREINSERT/ REJECT Bogus antivirus warning (53) /^X-Virus-Scan-Result: Repaired/ REJECT Bogus antivirus warning (54) /^X-.*-MailScanner: Found to be infected/ REJECT Bogus antivirus warning (55) /^X-Scanned: Symantec Antivirus Scan - Virus found/ REJECT Bogus antivirus warning (56) /^X-Sender: NetMail AntiVirus Agent/ REJECT Bogus antivirus warning (57) /^X-Auto-Generated: Sophos antivirus plugin/ REJECT Bogus antivirus warning (58) /^Subject: Virusveszely! Virus warning!/ REJECT Bogus antivirus warning (59) /^Subject: Virus in mail from you\./ REJECT Bogus antivirus warning (60) /^Subject: Virus infection notice/ REJECT Bogus antivirus warning (61) /^Subject: Possible virus found in message you sent/ REJECT Bogus antivirus warning (62) /^Subject: AntiVir ALERT/ REJECT Bogus antivirus warning (63) /^Subject: Centrale Anti-Virus melding/ REJECT Bogus antivirus warning (64) /^Subject: Vexira ALERT/ REJECT Bogus antivirus warning (65) /^X-ELTE-VirusStatus: was_infected/ REJECT Bogus antivirus warning (66) /^Subject: You sent potentially unsafe content/ REJECT Bogus antivirus warning (67) /^Subject: Hov, du har sendt Jubii en virus !!!$/ REJECT Bogus antivirus warning (68) /^Subject: \[message from .*virus detect system\]$/ REJECT Bogus antivirus warning (69) /^Subject: Net Integrator Virus Alert$/ REJECT Bogus antivirus warning (70) /^Subject: AntiVirus Alert!$/ REJECT Bogus antivirus warning (72) /^Subject: \{ALERTA DE VIRUS\}/ REJECT Bogus antivirus warning (73) /^Subject: Virus in una mail per lei/ REJECT Bogus antivirus warning (74) /^Subject: .*AntiVirus scan results/ REJECT Bogus antivirus warning (75) /^X-Mailer: ravmd\// REJECT Bogus antivirus warning (76) /^Subject:.*ALERTE \- Vous avez envoye un mail avec virus/ REJECT Bogus antivirus warning (77) /^Subject:.*ALERTE\: un virus a / REJECT Bogus antivirus warning (78) /^Subject:.*ALERT\! Virus found in your mail/ REJECT Bogus antivirus warning (79) /^Subject:.*Anti-Virus Notification/ REJECT Bogus antivirus warning (80) /^Subject:.*Antigen Notification/ REJECT Bogus antivirus warning (81) /^Subject:.*Antigen found VIRUS/ REJECT Bogus antivirus warning (82) /^Subject:.*Antivirus stopped your message/ REJECT Bogus antivirus warning (83) /^Subject:.*Email Quarantined Due to Virus/ REJECT Bogus antivirus warning (84) /^Subject:.*Failed to clean virus file/ REJECT Bogus antivirus warning (85) /^Subject:.*Inflex scan report \[\d+\]/ REJECT Bogus antivirus warning (86) /^Subject:.*InterScan NT Alert/ REJECT Bogus antivirus warning (87) /^Subject:.*MMS Notification/ REJECT Bogus antivirus warning (88) /^Subject:.*MailSure Virus Alert/ REJECT Bogus antivirus warning (89) /^Subject:.*Ochrona antywirusowa/ REJECT Bogus antivirus warning (90) /^Subject:.*\! Virus Notify \!/ REJECT Bogus antivirus warning (91) /^Subject:.*SAV detected a violation in a / REJECT Bogus antivirus warning (92) /^Subject:.*VIRUS NO SEU EMAIL/ REJECT Bogus antivirus warning (93) /^Subject:.*Virus Check Alert/ REJECT Bogus antivirus warning (94) /^Subject:.*Virus Notification from Redstone/ REJECT Bogus antivirus warning (95) /^Subject:.*Virus Quarantine Notification/ REJECT Bogus antivirus warning (96) /^Subject:.*Virus in Ihrer Nachricht/ REJECT Bogus antivirus warning (97) /^Subject:.*Votre message contient un virus/ REJECT Bogus antivirus warning (98) /^Subject:.*Warning\: E-mail viruses detected/ REJECT Bogus antivirus warning (99) /^Subject:.*WorldSecure Server notification/ REJECT Bogus antivirus warning (100) /^Subject:.*\[SmartFilter\] Virus Alert / REJECT Bogus antivirus warning (101) /^Subject:.*\[Virus detected\]/ REJECT Bogus antivirus warning (102) /^Subject:.*virus trouve dans le message envoye/ REJECT Bogus antivirus warning (103) /^Subject:.*virus trovato in un messaggio inviato/ REJECT Bogus antivirus warning (104) /^Subject: HBOS plc Automated Email Administrator/ REJECT Bogus antivirus warning (105) /^Subject: Virus found:/ REJECT Bogus antivirus warning (106) /^Subject: Your mail server sent us a virus/ REJECT Bogus antivirus warning (107) /^Subject: This is an alert from eSafe$/ REJECT Bogus antivirus warning (108) /^Subject: Virus encontrado/ REJECT Bogus antivirus warning (109) /^Subject: Notification du serveur antivirus/ REJECT Bogus antivirus warning (110) /^Subject: NAV ha rilevato un virus in un documento inviato$/ REJECT Bogus antivirus warning (111) /^Subject: Network Associates Webshield - e-mail Content Alert$/ REJECT Bogus antivirus warning (112) /^Subject: Symantec AntiVirus\/Filtering for Domino detected a virus/ REJECT Bogus antivirus warning (113) /^Subject: Eclipse Internet VIRUSshield detected VIRUS/ REJECT Bogus antivirus warning (114) /^Subject: VIRUS MESSAGE$/ REJECT Bogus antivirus warning (115) /^Subject: Internet Mail Failure - Virus Alert$/ REJECT Bogus antivirus warning (116) /^Subject: FOUND VIRUS IN YOUR MAIL TO:/ REJECT Bogus antivirus warning (117) /^Subject: ALERT - Virus .+ found/ REJECT Bogus antivirus warning (118) /^Subject: Suppresion du Virus/ REJECT Bogus antivirus warning (119) /^Subject: Tipo de arquivo anexo nao permitido!/ REJECT Bogus antivirus warning (120) /^Subject: \[.+: Virus detected\]$/ REJECT Bogus antivirus warning (121) /^Subject: RAV[0-9]+ Antivirus notification/ REJECT Bogus antivirus warning (122) /^Subject: ATTENZIONE: Ricevuto VIRUS da/ REJECT Bogus antivirus warning (123) /^Subject: Warning: antivirus system report/ REJECT Bogus antivirus warning (124) /^Subject: WARNING: We blocked a virus that was sent to you/ REJECT Bogus antivirus warning (125) /^Subject: ScanMail Message: To Sender, virus found and action taken/ REJECT Bogus antivirus warning (126) /^Subject: Warning: A possible virus has been detected in one of your/ REJECT Bogus antivirus warning (127) /^Subject: Symantec har fundet en virus i den mail du har sendt/ REJECT Bogus antivirus warning (128) # 129 may catch too much, enable if you wish by removing '# ' # /^Subject: Content violation/ REJECT Bogus antivirus warning (129) /^Subject: Rejected Mail: attachment from/ REJECT Bogus antivirus warning (130) /^Subject: Returned mail: Possible Virus Infection/ REJECT Bogus antivirus warning (131) /^Subject: VIRUS \(.*\) FROM <.*>/ REJECT Bogus antivirus warning (132) /^Subject: Symantec Mail Security detected/ REJECT Bogus antivirus warning (133) /^Subject: Attachments not Delivered by MailScan/ REJECT Bogus antivirus warning (134) /^Subject: .+action taken by attachment blocking feature/ REJECT Bogus antivirus warning (135) /^Subject: You sent infected message/ REJECT Bogus antivirus warning (136) /^Subject: .+e-mail Content Alert$/ REJECT Bogus antivirus warning (137) /^Subject: VIRUSALARM/ REJECT Bogus antivirus warning (138) /^Subject: Virusdetection:/ REJECT Bogus antivirus warning (139) /^Subject: Recipient Virus-alert/ REJECT Bogus antivirus warning (140) /^Subject: Norton AntiVirus quarantined an attachment in a message/ REJECT Bogus antivirus warning (141) /^Subject: MailMonitor for Exchange has processed a suspicious mail/ REJECT Bogus antivirus warning (142) /^Subject: WARNING: YOU MAY HAVE A VIRUS/ REJECT Bogus antivirus warning (143) /^X-Tnz-Problem-Type: 40/ REJECT Bogus antivirus warning (144) /^Subject: Discarded Mail: virus from/ REJECT Bogus antivirus warning (145) /^Subject: SafeInternetEmail Notification/ REJECT Bogus antivirus warning (146)