From a550fdad9a0f3c26e8861e25493b50561c082ed1 Mon Sep 17 00:00:00 2001
From: Marcel Naeve <marcel@naeve.info>
Date: Tue, 29 Oct 2024 18:46:22 +0100
Subject: [PATCH] =?UTF-8?q?Erste=20regeln=20zum=20spamfilter=20regelsatz?=
 =?UTF-8?q?=20hinzugef=C3=BCgt.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 spamfilter.sieve | 75 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100644 spamfilter.sieve

diff --git a/spamfilter.sieve b/spamfilter.sieve
new file mode 100644
index 0000000..9fcb116
--- /dev/null
+++ b/spamfilter.sieve
@@ -0,0 +1,75 @@
+require ["body","fileinto","envelope"];
+
+# rule:[SPAM - Flagged]
+if header :contains "X-Spam-Flag" "YES"
+{
+	fileinto "INBOX.SPAM";
+    stop;
+}
+# rule:[known SPAM - SPF reply - from]
+if anyof (header :contains "from" ["alpoz.com","beycloud.net"], header :contains "subject" ["Undelivered Mail Returned to Sender","Delivery Status Notification"])
+{
+	fileinto "INBOX.SPAM";
+    stop;
+}
+# rule:[Mail was processed by an unknown host or a host that is often used for Spams]
+if header :matches "Received" ["from *otvk.pl (*?)","from localhost.localdomain (*?)","from shawcable.net (*?)"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Message-ID contains a dot and @]
+if not header :matches "Message-Id" "*?@*?.??*"
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Keywords that are contained in subject]
+if header :contains "subject" ["Mr.Sung Lee","datingfuhildo.ru","firsteuro-consulting.com","uvipeliterubypalace.pl","Top money making industry","Buy shares under","Hottest top stock is S CX N","worldofconsult.com","avipeliterubypalace.pl","Josef Nakladal","Profit Generating Industry","datinglisa.ru","josefnak@yahoo.de","Oil player","Who is Making Money"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Keywords that are contained in message text]
+if body :text :contains ["my intimate photos","viagra","cialis","Mr.Sung Lee","datingfuhildo.ru","firsteuro-consulting.com","uvipeliterubypalace.pl","Top money making industry","Buy shares under","Hottest top stock is S CX N","worldofconsult.com","avipeliterubypalace.pl","Josef Nakladal","Profit Generating Industry","datinglisa.ru","josefnak@yahoo.de","Oil player","Who is Making Money","ask that you keep this award away from public"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Keywords that matches]
+if anyof (header :matches "subject" ["S?C?X?N","GT?RL"], body :text :contains ["S?C?X?N","GT?RL"])
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Field Message-ID is empty]
+if header :is "Message-Id" ""
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[Received from unknown]
+if header :contains "Received" ["unknown","User"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[well-known SPAM X-Mailer]
+if header :contains "X-Mailer" ["The Bat","Microsoft Outlook Express","JavaMailer"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[known SPAM User-Agents]
+if header :contains "User-Agent" ["The Bat","Microsoft Outlook Express","JavaMailer"]
+{
+	fileinto "INBOX.SPAM";
+	stop;
+}
+# rule:[well-known SPAM Newsletters]
+if header :contains "to" ["dasistgut.net"]
+{
+	fileinto "INBOX.SPAM";
+    stop;
+}
+