debian_pkg-listmaster/spamassassin_config/common/scam_spam

# Nigerian-type spam

body		MURPHY_SCAM1	/I am.*(son|daughter|wife)/i
describe	MURPHY_SCAM1	Family relation
score		MURPHY_SCAM1	0.1

body		MURPHY_SCAM2	/confidential transaction/i
score		MURPHY_SCAM2	0.1

body		MURPHY_SCAM3	/may be surprise/i
score		MURPHY_SCAM3	0.1

body		MURPHY_SCAM4	/(Robert Mugabe|Richard Taylor)/i
score		MURPHY_SCAM4	0.1

body		MURPHY_SCAM5	/(zimbabwe|nigeria)/i
score		MURPHY_SCAM5	0.1

meta		MURPHY_SCAM_META1	(MURPHY_SCAM1 + MURPHY_SCAM2 + MURPHY_SCAM3 + MURPHY_SCAM4 + MURPHY_SCAM5) > 1
score		MURPHY_SCAM_META1	3.0

header RESPOND		Subject =~ /^Respond/
describe RESPOND	respond 419 scam spam
score REPSOND		2

# cjwatson, 2003/10/18
header NIGERIAN_XIAN	Subject =~ /^DONATION FOR THE LORD/
describe NIGERIAN_XIAN	The 419 scam with a Christian twist
score NIGERIAN_XIAN	4

# cjwatson, 2004-02-10
header BIZ_PROP		Subject =~ /Business Proposition:Respond ASAP/i
describe BIZ_PROP	419 variant
score BIZ_PROP		4

# cjwatson, 2004-03-05
header NEW_PUB_COMP	Subject =~ /NEW PUBLIC COMPNAY ALERT/
describe NEW_PUB_COMP	Filesharing spam
score NEW_PUB_COMP	3

# don 2008-06-13
header ACCOUNTUPDATE	subject =~ /^\s*Account\s+Update\s*$/i
describe ACCOUNTUPDATE	Yeah, we don't send account updates
score ACCOUNTUPDATE	4

# formorer 2010-01-27
header NUVOMESS		subject =~ /^Nuovo messaggio$/i
describe NUVOMESS	Phishing spam
score NUVOMESS		4