#LAST UPDATED 06/08/2011

REVDNS		END	NOTENDSWITH	.yahoo.com

#-------------------------------------------------------------------#
#	BALANCE WEIGHTS		 				    #
#-------------------------------------------------------------------#

TESTSFAILED	1	PCRE	(BGISOCWL)
TESTSFAILED	1	PCRE	(CASA)

TESTSFAILED	-1	PCRE	(NOPOSTMASTER)
TESTSFAILED	-2	PCRE	(NOABUSE)

TESTSFAILED	-5	PCRE	(IX)

#-------------------------------------------------------------------#
#	BUMP			 				    #
#-------------------------------------------------------------------#

TESTSFAILED	8	PCRE	(FILTER-(ADULT|DRUGS|LOTTO|MEDICAL|SCAM|STOCKS))
TESTSFAILED	8	PCRE	(SNIFFER-(SCAMS|SPAM))

#-------------------------------------------------------------------#
#	MAILFROM		 				    #
#-------------------------------------------------------------------#	

MAILFROM	5	PCRE	(?im:(^|\@)(?!yahoo)[a-z-0-9]+\.((?!yahoo)([a-z]{2,}\.)?[a-z]{2,6}$))

#-------------------------------------------------------------------#
#	ALERTS & GROUPS		 				    #
#-------------------------------------------------------------------#	

HEADERS		3	PCRE	(X-Yahoo-Newman-Property: ymail-[35])

HEADERS		-5	PCRE	(?im:List-Id: <.{1,30}.yahoogroups.com>)
HEADERS		-5	PCRE	(Errors-To: alerts-error@yahoo-inc.com)
HEADERS		-5	PCRE	(Reply-To: "Yahoo! Personals" \<alerts-reply@yahoo-inc\.com\>)
HEADERS		-5	PCRE	(YahooMailWebService)
HEADERS		-2	PCRE	(X-Yahoo-AlertId:)
HEADERS		-2	PCRE	(X-yahoo-newman-property: alerts)

#-------------------------------------------------------------------#
#	SPAM SIGNATURES		 				    #
#-------------------------------------------------------------------#

#UNLIKLEY URL ExTENSIONS
BODY		5	PCRE	(?i:/sunny\.php)
BODY		5	PCRE	(?i:friends\.links\.php)
BODY		5	PCRE	(?i:sites\.friends\.php)
BODY		5	PCRE	(?i:http://.+\.(info|biz))
BODY		5	PCRE	(?i:http://.+co/)
BODY		5	PCRE	(?i:http://bit\.ly)
BODY		5	PCRE	(?i:http://j.mp)
BODY		5	PCRE	(?i:http://www.(google|facebook).com/url\?)
BODY		5	PCRE	(http://[youtbe ]{8,10}\.com)




#-------------------------------------------------------------------#
#	YAHOO CREDITS						    #
#-------------------------------------------------------------------#

#NOTIFICATIONS
BODY		-5	PCRE	(?i:This change request was made on)

#LEGITIMATE SIGNATURES
BODY		-3	PCRE	(----- Original Message ----)
BODY		-5	PCRE	(?i:--- On (Mon|Tue|Wed|Thu|Fri|Sat|Sun), [0-9]{2}/[0-9]/1[0-9], .*<.*@.*> wrote:)

SUBJECT		-8	PCRE	(Keyword News: \[")

REVDNS		-2	PCRE	(n1\.bullet\.sp1\.yahoo\.com)




