[jboss-cvs] jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default ...

Mon Feb 26 20:59:51 EST 2007

  User: pmuir   
  Date: 07/02/26 20:59:51

  Added:       mail/meldware/mail.ear/mailjmx.sar/default                   
                        RobinsonScanner.properties jasen.dat
                        SenderAddressValidationScanner.properties
                        FromAddressValidationScanner.properties
                        AttachmentScanner.properties RBLScanner.properties
                        HeuristicScanner.properties
                        KeywordScanner.properties
                        TagSrcPortScanner.properties
                        AnomalousCharacterScanner.properties heuristics.dat
                        RecipientScanner.properties
                        ObfuscatedCharacterScanner.properties
                        ImageDominanceScanner.properties
                        InvisiMailScanner.properties
                        TagSrcCgiScanner.properties
                        SenderServerValidationScanner.properties
                        TagFalseAnchorScanner.properties
                        HTMLConcealmentScanner.properties
  Log:
  Upgrade to meldware-m7

  Revision  Changes    Path
  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/RobinsonScanner.properties

  Index: RobinsonScanner.properties
  ===================================================================
  # Configuration for the RobinsonScanner
  # The relative (class path) path to the token map
  # This path MUST be in the classpath
  map-path=default/jasen.dat

  # The minimum number of tokens required to perform an evaluation
  min-tokens=5

  # If the message has fewer than this number of tokens, the result
  # below is returned
  default-prob=0.5

  # The Map Store class to use in this plugin
  map-store-class=org.jasen.core.engine.DiskMapStore

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/jasen.dat

  	<<Binary file>>

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/SenderAddressValidationScanner.properties

  Index: SenderAddressValidationScanner.properties
  ===================================================================
  # The high prob
  max=0.85

  # The lowest possible probability
  min=0.5

  # The "unknown" probability
  medium=0.5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/FromAddressValidationScanner.properties

  Index: FromAddressValidationScanner.properties
  ===================================================================
  # The high prob
  max=0.9

  # The lowest possible probability
  min=0.5

  # The medium probability
  medium=0.66

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/AttachmentScanner.properties

  Index: AttachmentScanner.properties
  ===================================================================
  # Configuration for the AttachmentScanner
  # The extensions to look for
  min=0.5
  max=0.9
  threshold=1
  extensions=exe,scr,vbs,js,bat,pif,reg,ttf

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/RBLScanner.properties

  Index: RBLScanner.properties
  ===================================================================
  # RealTimeBlackholeList Properties File
  # The "unknown" probability
  med-prob=0.5

  # The maximum number of RBL servers that can be specified
  max-rbls=20

  # If true, ALL received headers are parsed.  If false, only the first one is
  check-all-headers=true

  # If true, RBL matches are considered absolute probabilities
  absolute=false

  #######################
  # THE RBL SERVER LIST #
  #######################

  # RECOMMENDED RBL INCLUSIONS

  # Spamhaus... arguably the best
  rbl.1=sbl-xbl.spamhaus.org

  # http://www.ordb.org - Open Relay Database, which lists open relays
  #rbl.2=relays.ordb.org

  # http://spamcop.net/bl.shtml - SpamCop lists mail servers that have a high spam-to-legitimate-mail ratio.
  #rbl.3=bl.spamcop.net

  # OPTIONAL RBL INCLUSIONS

  # http://dsbl.org/ - DSBL publishes the IP addresses of hosts which have sent special test email to listme at listme.dsbl.org
  #rbl.4=list.dsbl.org
  #rbl.5=multihop.dsbl.org
  #rbl.6=unconfirmed.dsbl.org
  #rbl.7=cbl.abuseat.org
  #rbl.8=l1.spews.dnsbl.sorbs.net
  #rbl.9=l2.spews.dnsbl.sorbs.net

  # 127.0.0.2 Verified Open Relay 
  OPEN_RELAY=0.5

  # 127.0.0.3 Dialup Spam Source
  #  Dialup Spam Sources are imported into the Zone file from other sources and some
  #  known sources are manually added to the local include file. 
  DIALUP_SPAM=0.8

  # 127.0.0.4 Confirmed Spam Source
  #  A site has been identified as a constant source of spam, and is manually added.
  #  Submissions for this type of spam require multiple nominations from multiple sites.
  #  Test Blockers also find themselves in this catagory.
  SPAM_SOURCE=0.99

  # 127.0.0.5 Smart Host (In progress)
  #  A Smart host is a site determined to be secure, but relays for those who are not,
  #  defeating one level of security. When this is ready, it will be labeled
  #  outputs.osirusoft.com. NOTE: We strongly discourage using outputs due to it being
  #  way too effective to be useful. 
  SMART_HOST=0.5

  # 127.0.0.6 A Spamware software developer or spamvertized site. This information is maintained by spamsites.org and spamhaus.org. 
  SPAM_WARE=0.99

  # 127.0.0.7 A list server that automatically opts users in without confirmation 
  LIST_SERVER=0.8

  # 127.0.0.8 An insecure formmail.cgi script. (Planned)
  FORM_MAIL=0.99

  # 127.0.0.9 Open proxy servers 
  OPEN_PROXY=0.5

  # The unknown response (no response found or timeout)
  UNKNOWN=0.5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/HeuristicScanner.properties

  Index: HeuristicScanner.properties
  ===================================================================
  # HeuristicScanner config

  # The analyzer FQCN
  analyzer-class=org.jasen.core.parsers.StandardHeuristicAnalyzer

  # The definition set FQCN
  def-class=org.jasen.core.parsers.StandardHeuristicDefinitionSet

  # The classpath relative path to the data file
  data-file=default/heuristics.dat

  # The probability returned if at least "threshold" patterns match
  max=1.0

  # The lowest possible probability
  min=0.5

  # The threshold which indicates high-prob
  threshold=1

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/KeywordScanner.properties

  Index: KeywordScanner.properties
  ===================================================================
  # KeywordScanner config
  keywords=arsebandit,arse-bandit,arse_bandit,arsehole,arse_hole,arse-hole,assbandit,ass-bandit,ass_bandit,ass,asshole,ass_hole,ass-hole,assboy,ass-boy,ass_boy,arseboy,arse-boy,arse_boy,assfuck,ass-fuck,ass_fuck,arsefuck,arse-fuck,arse_fuck,asswipe,ass-wipe,ass_wipe,asswiper,ass-wiper,ass_wiper,arsewipe,arse-wipe,arse_wipe,arsewiper,arse-wiper,arse_wiper,bitch,bitches,blowjob,blow-job,blow_job,bumbandit,bum-bandit,bum_bandit,bunghole,bung-hole,bung_hole,cialis,clit,cockring,cock-ring,cock_ring,cocksuck,cock-suck,cock_suck,cocks,cocksucker,cock-sucker,cock_sucker,cocksmoker,cock-smoker,cock_smoker,cum,cunt,cuntface,cunt-face,cunt_face,cunthead,cunt-head,cunt_head,cunts,d!ckhead,d!ck-head,d!ck_head,d1ckhead,d1ck-head,d1ck_head,dickhead,dick-head,dick_head,dickwad,dick-wad,dick_wad,dipshit,dip-shit,dip_shit,fag,faggot,felch,feltcher,feltching,fistfuck,fist-fuck,fist_fuck,fuckoff,fuck-off,fuck_off,fuckup,fuck-up,fuck_up,fuckhead,fuck-head,fuck_head,fuckwit,fuck-wit,fuck_wit,fuck!
 ,fucks,fucked,fucker,fucking,gangbang,gang-bang,gang_bang,jackoff,jack-off,jack_off,jackshit,jack-shit,jack_shit,jizzum,motherfucker,mother-fucker,mother_fucker,muthafucker,mutha-fucker,mutha_fucker,nigga,nigger,piss,pissant,piss-ant,piss_ant,pissflaps,piss-flaps,piss_flaps,pissflappers,piss-flappers,piss_flappers,pissoff,piss-off,piss_off,pissed,pussy,shit,sh!t,sh1t,sh!tface,sh!t-face,sh!t_face,sh!tfaced,sh!t-faced,sh!t_faced,sh!tforbrains,sh!t-for-brains,sh!t_for_brains,sh!thead,sh!t-head,sh!t_head,sh1tface,sh1t-face,sh1t_face,sh1tfaced,sh1t-faced,sh1t_faced,sh1tforbrains,sh1t-for-brains,sh1t_for_brains,sh1thead,sh1t-head,sh1t_head,shitface,shit-face,shit_face,shitfaced,shit-faced,shit_faced,shitforbrains,shit-for-brains,shit_for_brains,shithead,shit-head,shit_head,shitcan,shit-can,shit_can,shitcan,shit-can,shit_can,shitcan,shit-can,shit_can,shitfit,shit-fit,shit_fit,shitfit,shit-fit,shit_fit,shitfit,shit-fit,shit_fit,shitfight,shit-fight,shit_fight,sh!tfight,sh!t-fight,s!
 h!t_fight,sh1tfight,sh1t-fight,sh1t_fight,shithouse,shit-house,shit_ho
use,sh!thouse,sh!t-house,sh!t_house,sh1thouse,sh1t-house,sh1t_house,shitlist,shit-list,shit_list,sh!tlist,sh!t-list,sh!t_list,sh1tlist,sh1t-list,sh1t_list,shitstain,shit-stain,shit_stain,sh!tstain,sh!t-stain,sh!t_stain,sh1tstain,sh1t-stain,sh1t_stain,shits,sh!ts,sh1ts,shiter,sh1ter,sh!ter,tittyfuck,titty-fuck,titty_fuck,t!ttyfuck,t!tty-fuck,t!tty_fuck,t1ttyfuck,t1tty-fuck,t1tty_fuck,titfuck,tit-fuck,tit_fuck,t!tfuck,t!t-fuck,t!t_fuck,t1tfuck,t1t-fuck,t1t_fuck,viagra,wanker,wankered,wank,wanking

  # The probability returned if at least one word matches
  max=0.8

  # The lowest possible probability
  min=0.5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/TagSrcPortScanner.properties

  Index: TagSrcPortScanner.properties
  ===================================================================
  # Configuration for the TagSourcePortScanner
  min=0.5
  max=0.9
  threshold=1

  # The list of known, acceptable ports
  # Comma separated.  NO SPACES
  # TODO Add 8080?
  ports=80,443,21

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/AnomalousCharacterScanner.properties

  Index: AnomalousCharacterScanner.properties
  ===================================================================
  # Configuration for the AnomalousCharacterScanner
  min=0.5
  max=0.9
  thresholds=10,50
  chars=|,!

  # The calculator to use when computing the final multi point result
  calculator=org.jasen.core.calculators.CompoundCalculator

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/heuristics.dat

  Index: heuristics.dat
  ===================================================================
  re\sf\si\snance
  ra\st\ses
  ap\sp\sroved
  [lL]ow-[rR]ate\sAdvisors\sInc
  l\se\snders
  cred\si\st
  [pP][^a-zA-Z0-9]*[iI1|l!][^a-zA-Z0-9]*[!iI1|lL][^a-zA-Z0-9]*[!iI1|lL][^a-zA-Z0-9]*[sS]
  [vV][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[cC][^a-zA-Z0-9]*[o0O][^a-zA-Z0-9]*[dD][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[nN]
  [vV][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[aA@][^a-zA-Z0-9]*[gG][^a-zA-Z0-9]*[rR][^a-zA-Z0-9]*[aA@]
  [gG]+[rR]+[eE3]+[nN]+\s*[cC]+[aA@]+[rR]+[dD]+
  [cC][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[aA@][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[iI1l|!][^a-zA-Z0-9]*[iI1l|!]*[^a-zA-Z0-9]*[sS5]
  Downl0ad
  SEXUALLY-EXPLICIT
  [sS]t0ck
  re[\|l]eased [gG]round [bB]reaking news about its V[oO0]IP division
  [rR]eferral\s+[wW]ealth\s+[iI]nternational

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/RecipientScanner.properties

  Index: RecipientScanner.properties
  ===================================================================
  # RecipientScanner config
  # The probability returned if at least one word matches
  max=0.8

  # The lowest possible probability
  min=0.5

  # The threshold which indicates high-prob
  threshold=20

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/ObfuscatedCharacterScanner.properties

  Index: ObfuscatedCharacterScanner.properties
  ===================================================================
  # Configuration for the ObfuscatedCharacterScanner
  min=0.5
  max=0.9
  threshold=5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/ImageDominanceScanner.properties

  Index: ImageDominanceScanner.properties
  ===================================================================
  # Configuration for the ImageDominanceScanner
  # The ratio of images to text and its association with a probability
  # This is determined based on the premise that 100% images indicates
  # high spam probability
  # The ratio is determined from the number of images vs the amount of text

  # The highest possible probability
  max=0.8

  # The lowest possible probability
  min=0.5

  # The ratio of images to words which implies high prob
  # This is a real value that describes:
  # "The number of images per word"
  ratio=0.5

  # The number of characters representing an average word
  wordSize=12

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/InvisiMailScanner.properties

  Index: InvisiMailScanner.properties
  ===================================================================
  # Configuration for the InvisiMailScanner

  # The highest possible probability
  max=0.99
  # The lowest possible probability
  min=0.5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/TagSrcCgiScanner.properties

  Index: TagSrcCgiScanner.properties
  ===================================================================
  # Configuration for the TagSourceCgiScanner
  min=0.5
  max=0.8
  threshold=2

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/SenderServerValidationScanner.properties

  Index: SenderServerValidationScanner.properties
  ===================================================================
  # The high prob
  high-prob=0.9

  # The lowest possible probability
  low-prob=0.49

  # The "unknown" probability
  med-prob=0.5

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/TagFalseAnchorScanner.properties

  Index: TagFalseAnchorScanner.properties
  ===================================================================
  max=0.9
  min=0.49
  threshold=1

  1.1      date: 2007/02/27 01:59:51;  author: pmuir;  state: Exp;jboss-seam/mail/meldware/mail.ear/mailjmx.sar/default/HTMLConcealmentScanner.properties

  Index: HTMLConcealmentScanner.properties
  ===================================================================
  # Configuration for the HTMLConcealmentScanner
  min=0.5
  max=0.85
  threshold=5