# <A NAME="#SBSFH001">SBSFH001</A>
#
# Consumer Venue (regtoday1.net)
#
# Updated and domains verified 10/21/02
# Last reported spam: 10/21/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ! SBSFH001 ?? no
{
 :0
 * ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]regtoday1\.net([^a-z0-9\.]|$)
 { CVENUE=yes }

 :0
 * LEANTAG ?? no
 * !CVENUE ?? yes
 {
  :0 BH
  * !^Subject:.*\(fwd\)
  * !--.*forwarded message --
  * !^forwarded message:
  * !^-----BEGIN PGP SIGNED MESSAGE-----
  * -1000^0
  *  -500^0   ^Subject: Re:
  *  -200^1   ^[:;#>]
  *  1100^1   (^|[^-_0-9a-z])Consumer Venue([^a-z0-9\.]|$)
  *  1100^1   (^|[^-_0-9a-z])regtoday1\.net([^a-z0-9\.]|$)
  { CVENUE=yes }
 }

 :0
 * CVENUE ?? yes
 {
  :0 f
  | ${FORMAIL} -A"X-SBRule: Consumer Venue"

  :0
  { SPAMTAG=yes }

  :0
  * SRC ?? yes
  * !ADMINTAG ?? yes
  * !BULKTAG ?? yes
  {
   :0
   { SPAMPID=`echo $$` }

   :0 c:
   spamtemp.${SPAMPID}

   :0 c: spamtemp.${SPAMPID}.lock
   | (${FORMAIL} -rt \
      -I"From: ${ALTFROM}" \
      -I"To: postmaster@regtoday1.net" \
      -A"Cc: abuse@verio.net,abuse@xo.com" \
      -A"X-Loop: ${NOLOOP}";\
      cat ${SBDIR}/spam;\
      cat spamtemp.${SPAMPID};\
      ${RM} -f spamtemp.${SPAMPID}) \
      | ${SENDMAIL} -oi -t
  }

  :0
  * SRB ?? yes
  { BOUNCETHIS=yes }
 }
}

# cramz.net/listverify.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 8/04/02
# Other Relevant Info:
#    Both hosted by pajo.com :(
# Status: Active Spammer
#
:0 BH
* LEANTAG ?? no
* !^Subject:.*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  1100^1   (^|[^-_0-9a-z])cramz\.net([^a-z0-9\.]|$)
*  1100^1   (^|[^-_0-9a-z])listverify\.com([^a-z0-9\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: cramz.net/listverify.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@pajo.com" \
     -I"Cc: abuse@genuity.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# CustomerBlastCrew
#
# Updated and domains verified 2/21/03
# Last reported spam: 2/21/03
# Other Relevant Info:
#
#   2/21/03:
#    Spamming for the Mini Remote Control Race Cars crowd.
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]customerblastcrew\.com([^a-z0-9\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: customerblastcrew.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@customerblastcrew.com,CustBlast@cs.com" \
     -A"Cc: abuse@burst.net,abuse@hostnoc.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# customer-email.com
#
# Updated and domains verified 11/09/02
# Last reported spam: 11/06/02
# Other Relevant Info:
#   10/26/00:
#     Spammers-for-hire for Microsoft's bCentral service. :(
#   10/05/02:
#     Spamming for IBM, other mainsleaze stuff.
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.32\.31\.159|\
          cq0\.net([^a-z0-9\.]|$)|\
          customer-email\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: customer-email.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@customer-email.com" \
     -A"Cc: abuse@qwest.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# dartmail.net/flonetwork.com (Doubleclick/Media Synergy)
#
# Updated and domains verified 12/06/02
# Last reported spam: 12/13/02
# Other Relevant Info:
#
#    6/12/00:
#     Spammers-for-hire for mainsleaze companies, most recently Barnes & Noble
#
#    10/05/02:
#     Still spamming for B&N, and now for AOL as well.
#     Media Synergy apparently has hooked up with Doubleclick
#     and dartmail.net, they're all one spamhaus now. :(
#
#    11/07/02:
#     Spamming for a presumably New York-based bookstore for an event
#     with Rudolph Guiliani.
#
#    12/06/02:
#     Spamming for a week or so for chapters.ca, aka chapters.indigo.ca.
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](205\.150\.6\.|\
          209\.58\.86\.|\
          209\.167\.79\.|\
          216\.73\.8[0-9]\.|\
          216\.73\.9[0-5]\.|\
          dartmail\.net([^a-z0-9\.]|$)|\
          flonetwork\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Dartmail/Flonetwork"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@dartmail.net,abuse@flonetwork.com,postmaster@flonetwork.com,webmaster@flonetwork.com" \
     -A"Cc: ang@doubleclick.net,hostmaster@doubleclick.net,postmaster@doubleclick.net" \
     -A"Cc: abuse@uu.net,abuse@uunet.ca" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# digital-promotions.com
#
# Updated and domains verified 8/04/02
# Last reported spam: 9/25/02
# Other Relevant Info:
#    6/20/00: Spamming on behalf of dreamlife.com.
#    8/13/02: Spamming on behalf of one-time-offer.com/webloyalty.com.
#    9/25/02: Spamming on behalf of the "American Health Association"
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](206\.26\.21[8-9]\.|\
           digital-promotions\.com([^a-z0-9\.]|$))
{ DIGITALPROMOTIONS=yes }

:0
* LEANTAG ?? no
* DIGITALPROMOTIONS ?? no
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   digital-promotions\.com([^a-z0-9\.]|$)
 { DIGITALPROMOTIONS=yes }
}

:0
* DIGITALPROMOTIONS ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: digital-promotions.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@digital-promotions.com" \
     -I"To: abuse@sprint.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# E-Dialog
#
# Updated and domains verified 11/13/02
# Last reported spam:  11/13/02
# Other Relevant Info:
#
#   11/13/02:
#     Spammer for hire for Hasbro. :/
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.28\.75\.[0-9][0-9]?[0-9]?|\
          ed[0-9]+\.com([^a-z0-9\.]|$)|\
          e-dialog\.com([^a-z0-9\.]|$))
{ EDIALOG=yes }

:0
* LEANTAG ?? no
* ! EDIALOG ?? yes
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])64\.28\.75\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])ed[0-9]+\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])e-dialog\.com([^a-z0-9\.]|$)
 { EDIALOG=yes }
}

:0
* EDIALOG ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: E-Dialog"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@e-dialog.com" \
     -I"Cc: abuse@exodus.net,abuse@cw.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# emailcourrier.com
#
# Updated and domains verified 12/13/02
# Last reported spam: 12/13/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])emailcourrier\.com([^a-z0-9\.]|$)
{ EMAILCOURRIER=yes }

:0
* LEANTAG ?? no
* ! EMAILCOURRIER ?? yes
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])emailcourrier\.com([^a-z0-9\.]|$)
 { EMAILCOURRIER=yes }
}

:0
* EMAILCOURRIER ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: emailcourrier.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@emailcourrier.com,support@emailcourrier.com" \
     -A"Cc: support@starlan.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# emailfactory.com
#
# Updated and domains verified 11/05/02
# Last reported spam: 11/05/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*(^|[^-_0-9a-z])(allsoldout\.com([^a-z0-9\.]|$)|\
          emailfactory\.com([^a-z0-9\.]|$))
{ EMAILFACTORY=yes }

:0
* LEANTAG ?? no
* ! EMAILFACTORY ?? yes
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])allsoldout\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emailfactory\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emf[0-9]+\.com([^a-z0-9\.]|$)
 { EMAILFACTORY=yes }
}

:0
* EMAILFACTORY ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: emailfactory.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@emailfactory.com" \
     -A"Cc: abuse@cogentco.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# email-publisher.com
#
# Updated and domains verified 12/07/02
# Last reported spam: 12/07/02
# Other Relevant Info:
#     Spam-for-hire wing of Topica. :(
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]email-publisher\.com([^a-z0-9\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: email-publisher.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@email-publisher.com" \
     -A"Cc: abuse@upnetworks.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Equalamail/Coopt (Marketing Services/Promotion Services)
#
# Updated and domains verified 12/12/02
# Last reported spam: 12/12/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.119\.203\.1[6-8][0-9]|\
          64\.119\.203\.19[0-2]|\
          64\.191\.23\.152|\
          64\.191\.46\.[0-9][0-9]?[0-9]?|\
          209\.196\.35\.[0-9][0-9]?[0-9]?|\
          anythingemail\.com([^a-z0-9\.]|$)|\
          coopt\.com([^a-z0-9\.]|$)|\
          dealsservice\.net([^a-z0-9\.]|$)|\
          equalamail\.com([^a-z0-9\.]|$)|\
          emailsvc\.net([^a-z0-9\.]|$)|\
          greatpromo\.net([^a-z0-9\.]|$)|\
          marketsvc\.net([^a-z0-9\.]|$)|\
          offerdeals\.com([^a-z0-9\.]|$)|\
          offermarket\.net([^a-z0-9\.]|$)|\
          offers2you\.net([^a-z0-9\.]|$)|\
          promocast\.net([^a-z0-9\.]|$)|\
          promosvc\.com([^a-z0-9\.]|$)|\
          promovalue\.com([^a-z0-9\.]|$)|\
          svcoffer\.com([^a-z0-9\.]|$)|\
          topromotion\.net([^a-z0-9\.]|$)|\
          valuecastinc\.com([^a-z0-9\.]|$)|\
          valuepromotions\.net([^a-z0-9\.]|$)|\
          @equalamail\.)
{ EQUALAMAIL=yes }

:0
* LEANTAG ?? no
* ! EQUALAMAIL ?? yes
* !^Subject: .*\(fwd\)
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])64\.119\.203\.1[6-8][0-9]([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])64\.119\.203\.19[0-2]([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])64\.191\.23\.152([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])64\.191\.46\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])209\.196\.35\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])anythingemail\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])coopt\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])dealsservice\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])equalamail\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emailsvc\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])greatpromo\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])marketsvc\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])offerdeals\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])offermarket\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])offers2you\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])promocast\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])promosvc\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])promovalue\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])svcoffer\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])topromotion\.net([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])valuecastinc\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])valuepromotions\.net([^a-z0-9\.]|$)
 *  1100^1   ^The following offer was mailed by (the COOPTnetwork|EqualaMAIL)([^a-z0-9\.]|$)
 *   300^1   (^|[^-_0-9a-z])COOPTnetwork([^a-z0-9\.]|$)
 *   300^1   (^|[^-_0-9a-z])EqualaMAIL([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emf[0-9]+\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emf[0-9]+\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])emf[0-9]+\.com([^a-z0-9\.]|$)
 { EQUALAMAIL=yes }
}

:0
* EQUALAMAIL ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: COOPT/Equalamail"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@coopt.com,abuse@emailsvc.net,abuse@marketsvc.net,abuse@promosvc.com,abuse@svcoffer.com" \
     -I"Cc: postmaster@equalamail.com,support@equalamail.marketsvc.net,abuse@valuepromotions.net" \
     -A"Cc: abuse@interliant.com,abuse@verio.net,abuse@burst.net,ip@iwayhosting.net" \
     -A"Cc: abuse@hostnoc.net,abuse@www.covesoft.com,abuse@verizon.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Fax.com
#
# Updated and domains verified 5/14/01
# Last reported spam:
# Other Relevant Info:
#     Junk-faxers-for-hire whose web site states they are moving into bulk
#     email.  Anyone who will break the law to send junk faxes will
#     certainly not care about spam, so I'm listing these slimeballs
#     pre-emptively.
# Status: Unknown
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.231\.24\.1[6-8][0-9]|\
          216\.231\.24\.19[0-1]|\
          fax\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: fax.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@fax.com" \
    -A"Cc: abuse@savvis.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# GetResponse.com
#
# Updated and domains verified 2/20/03
# Last reported spam: 2/20/03
# Other Relevant Info:
#
#   2/20/03:
#    Spammer offering autoresponders, etc.
#
# Status: Active
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](207\.8\.198\.[0-9][0-9]?[0-9]?|\
          getresponse\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: getresponse.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@getresponse.com" \
    -A"Cc: abuse@netaxs.com" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# GNUZ World Enterprises
#
# Updated and domains verified 12/12/02
# Last reported spam: 12/12/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](202\.56\.41\.[0-9][0-9]?[0-9]?|\
          203\.34\.81\.[0-9][0-9]?[0-9]?|\
          e-mail-server\.net([^a-z0-9\.]|$)|\
          fastnooz\.com([^a-z0-9\.]|$)|\
          gnuz\.net([^a-z0-9\.]|$)|\
          mx-man\.net([^a-z0-9\.]|$)|\
          mx-post\.net([^a-z0-9\.]|$)|\
          onlinefastmail\.net([^a-z0-9\.]|$)|\
          postingz\.net([^a-z0-9\.]|$)|\
          postout\.net([^a-z0-9\.]|$)|\
          quick-mails\.net([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: GNUZ World Enterprises"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: admin@gnuz.net,postmaster@my-post.net,postmaster@quick-mails.net" \
     -A"Cc: abuse@brisbanehosting.com,admin@brisbanehosting.com,techsupport@intrapower.com.au" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# idsbi.com/OptInBig/OptInRealBig
#
# Updated and domains verified 12/06/02
# Last reported spam: 12/10/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](66\.62\.16[0-3]\.|\
          idsbi\.com([^a-z0-9\.]|$)|\
          optinbig\.com([^a-z0-9\.]|$)|\
          optinrealbig\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: IDSBI"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@optinrealbig.com,abuse@optinbig.com,postmaster@idsbi.com" \
     -A"Cc: abuse@cari.net,abuse@iamerica.net,postmaster@iamerica.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# iexpect.com
#
# Updated and domains verified 11/09/02
# Last reported spam: 11/05/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]iexpect\.com([^a-z0-9\.]|$)
{ IEXPECT=yes }

:0 BH
* LEANTAG ?? no
* !IEXPECT ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   iexpect\.com([^a-z0-9\.]|$)
{ IEXPECT=yes }
}

:0
* IEXPECT ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: iexpect.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@iexpect.com" \
     -I"Cc: abuse@exodus.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
      ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Imatcher
#
# Updated and domains verified 10/05/02
# Last reported spam: 7/29/02
# Other Relevant Info:
#    10/05/02:
#     Aggressive, totally unrepentant spammers. :(
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](208\.253\.17[2-5]\.|\
          imatcher\.(com|org)([^a-z0-9\.]|$))
{ IMATCHER=yes }

:0 BH
* LEANTAG ?? no
* !IMATCHER ?? yes
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])208\.253\.17[2-5]\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])imatcher\.(com|org)([^a-z0-9\.]|$)
{ IMATCHER=yes }
}

:0
* IMATCHER ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Imatcher"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: paul@imatcher.org," \
     -A"Cc: abuse@uu.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# I-NetValues
#
# Updated and domains verified 12/09/02
# Last reported spam: 12/07/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](61\.129\.77\.75|\
           216\.219\.172\.22[4-9]|\
           216\.219\.172\.2[3-5][0-9]|\
           216\.219\.172\.260|\
           permissionemails\.com([^a-z0-9\.]|$))
{ PERMISSIONEMAILS=yes }

:0
* LEANTAG ?? no
* PERMISSIONEMAILS ?? no
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])61\.129\.77\.75([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])216\.219\.172\.22[4-9]([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])216\.219\.172\.2[3-5][0-9]([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])216\.219\.172\.260([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])permissionemails\.com([^a-z0-9\.]|$)
 { PERMISSIONEMAILS=yes }
}

:0
* PERMISSIONEMAILS ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: I-NetValues"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@permissionemails.com,inetvalues@aol.com" \
     -I"To: abuse@fiberpipeline.net,postmaster@shaidc.com,abuse@online.sh.cn,webmaster@online.sh.cn,abuse@shaidc.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# iwon.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 10/05/02
# Other Relevant Info:
#     7/31/02:
#       Company that bought what was left of Excite@Home,
#       apparently has turned to spamming to pay for it. :/
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](63\.236\.75\.|\
          208\.45\.133\.|\
          blastdirect\.com([^a-z0-9\.]|$)|\
          iwon\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Blastdirect/Iwon"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@blastdirect.com,abuse@iwon.com,postmaster@iwon.com" \
     -A"Cc: abuse@qwest.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# mailadv.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 11/10/01
# Other Relevant Info:
#       11/11/01 -- spamming on behalf of Verisign, but have their own
#         netblocks, domains, etc.
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](199\.233\.145\.|\
          204\.27\.144\.|\
          macdirect\.com([^a-z0-9\.]|$)|\
          mailadv\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: mailadv.com"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@mailadv.com,postmaster@macdirect.com" \
    -A"Cc: support@voicenet.net,postmaster@voicenet.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# merchantmail.com/m0.net etc.
#
# Updated and domains verified 2/18/03
# Last reported spam: 9/29/02
# Other Relevant Info:
#
#    10/20/00 -- too much spam is coming from this bulk mail house, although
#     they claim to be legitimate and may be trying to be, for all I know.
#     I've gotten eight or ten pieces of spam from them in the last month,
#     though, from mainsleaze customers whose business they are still handling,
#     and got no response to any of my complaints.  Enough is enough, guys.
#
#    10/05/02:
#     Spamming for Palm computers, Apple, and other legitimate businesses.
#     Also spamming for Citibank.  :/  I block these guys, but think that
#     loud complaints to their customers for paying them to spam is a
#     better tactic.
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Received:).*[^0-9a-z](209\.10\.39\.17[6-9]|\
          209\.10\.39\.18[0-3]|\
          209\.10\.46\.15[2-9]|\
          209\.10\.47\.6[4-9]|\
          209\.10\.47\.[7-8][0-9]|\
          209\.10\.47\.9[0-5]|\
          209\.10\.200\.6[4-9]|\
          209\.10\.200\.7[0-9]|\
          209\.11\.133\.12[8-9]|\
          209\.11\.133\.1[3-8][0-9]|\
          209\.11\.133\.19[0-1]|\
          209\.11\.133\.24[8-9]|\
          209\.11\.133\.25[0-5]|\
          209\.11\.13[6-9]\.[0-9][0-9]?[0-9]?|\
          209\.11\.141\.1[6-9]|\
          209\.11\.141\.2[0-9]|\
          209\.11\.141\.3[0-1]|\
          209\.11\.16[4-7]\.[0-9][0-9]?[0-9]?|\
          digital-impact\.(com|net)([^a-z0-9\.]|$)|\
          m0\.(com|net)([^a-z0-9\.]|$)|\
          merchantmail\.(com|net)([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Digital Impact/Merchantmail/M0"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@merchantmail.net" \
    -I"Cc: abuse@globix.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# MerlinEmail
#
# Updated and domains verified 12/13/02
# Last reported spam: 12/13/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Received:).*[^0-9a-z](65\.77\.47\.[0-9][0-9]?[0-9]?|\
          merlinemail\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: MerlinEmail"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@merlinemail.com" \
     -I"Cc: abuse@wcg.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Messagereach.com
#
# Updated and domains verified 10/05/02
# Last reported spam: 10/02/02
# Other Relevant Info:
#    3/17/00 -- another "direct marketing" bulk email opt-out spamhaus.
#    11/08/01 -- spamming for Looksmart, and found xpedite.com. :)
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](137\.236\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          205\.183\.255\.[0-9][0-9]?[0-9]?|\
          messagereach\.com([^a-z0-9\.]|$)|\
          xmr3\.com([^a-z0-9\.]|$)|\
          xpedite\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Messagereach"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@messagereach.com" \
    -I"Cc: abuse@genuity.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Mindshare Designs
#
# Updated and domains verified 12/09/02
# Last reported spam: 12/05/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](216\.39\.115\.[5-7][0-9]|\
          216\.39\.115\.8[0-5]|\
          mb00\.net([^a-z0-9\.]|$)|\
          mindsharedesign\.com([^a-z0-9\.]|$)|\
          pm0\.net([^a-z0-9\.]|$)|\
          postmastergeneral\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Mindshare Design/PostmasterGeneral"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@mindsharedesign.com,nospam@mindsharedesign.com" \
     -A"Cc: abuse@sprintlink.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Netcreations/PostmasterDirect
#
# Updated and domains verified 10/05/02
# Last reported spam: 9/04/02
# Other Relevant Info:
#    Site that claimed/tried to go straight and failed. :(
#    6/10/00 -- Try, try again.  No spam from this source for a while.
#    5/14/01 -- Unfortunately, they started spamming again. :(
#    10/01/02 -- and hasn't stopped. <sigh>
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.14\.49\.[0-9][0-9]?[0-9]?|\
          209\.208\.237\.[0-9][0-9]?[0-9]?|\
          216\.74\.149\.[0-9][0-9]?[0-9]?|\
          netcreations\.com([^a-z0-9\.]|$)|\
          postmasterdirect\.com([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Netcreations/PostmasterDirect"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@postmasterdirect.com" \
    -I"Cc: abuse@exodus.net,abuse@genuity.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Networkpromotion.com
#
# Updated and domains verified 9/10/02
# Last reported spam: 9/10/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](142\.166\.[0-9][0-9]?[0-9]?\.|\
          networkpromotion\.com([^a-z0-9\.]|$))
{ NETWORKPROMOTION=yes }

:0 BH
* LEANTAG ?? no
* !^Subject:.*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  1100^1   networkpromotion\.com([^a-z0-9\.]|$)
{ NETWORKPROMOTION=yes }

:0
* NETWORKPROMOTION ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: Networkpromotion"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@networkpromotion.com" \
    -I"Cc: abuse@gt.ca,abuse@c1.ca" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# N0o1
#
# Updated and domains verified 10/14/02
# Last reported spam: 10/14/02
# Other Relevant Info:
#    10/14/02:
#      Spammer for hire that works with "partners", appears
#      to be trying to look/operate like Tropica does. :/
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.78\.146\.[0-9][0-9]?[0-9]?|\
          n0o1\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: N0o1"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@n0o1.com" \
     -I"Cc: abuse@viawest.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# OffersMax (John Bell)
#
# Updated and domains verified 10/11/02
# Last reported spam: 10/11/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](bnb[0-9]\.com([^a-z0-9\.]|$)|\
          omx[0-9]\.com([^a-z0-9\.]|$)|\
          thekha\.com([^a-z0-9\.]|$))
{ OFFERSMAX=yes }

:0
* LEANTAG ?? no
* !OFFERSMAX ?? yes
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])bnb[0-9]\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])omx[0-9]\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])thekha\.com([^a-z0-9\.]|$)
 { OFFERSMAX=yes }
}

:0
* OFFERSMAX ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: OffersMax"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: admin@thekha.com,postmaster@thekha.com" \
     -I"Cc: abuse@cogentco.com,abuse@uu.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Opti-Target/SubscriberBase
#
# Updated and domains verified 12/09/02
# Last reported spam: 12/11/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](63\.209\.206\.[0-9][0-9]?[0-9]?|\
          216\.19\.16[3-4]\.[0-9][0-9]?[0-9]?|\
          opti[0-9]+.com([^a-z0-9\.]|$)|\
          optilc\.com([^a-z0-9\.]|$)|\
          ot[0-9]+.com([^a-z0-9\.]|$)|\
          sbase[0-9]+.com([^a-z0-9\.]|$)|\
          subscriberbase\.com([^a-z0-9\.]|$)|\
          optitarget-)
{ OPTITARGET=yes }

:0
* LEANTAG ?? no
* !OPTITARGET ?? yes
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])63\.209\.206\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])216\.19\.16[3-4]\.[0-9][0-9]?[0-9]?([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])opti[0-9]+.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])optilc.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])ot[0-9]+.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])sbase[0-9]+.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])subscriberbase\.com([^a-z0-9\.]|$)
 { OPTITARGET=yes }
}

:0
* OPTITARGET ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Opti-Target"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: publishers@subscriberbase.com,advertisers@subscriberbase.com,busdev@subscriberbase.com" \
     -A"Cc: abuse@level3.net,spamtool@level3.net,abuse@exodus.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Penn Media/Pulse Direct
#
# Updated and domains verified 12/11/02
# Last reported spam: 12/11/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](209\.125\.134\.[0-9][0-9]?[0-9]?|\
          pennmedia\.com([^a-z0-9\.]|$)|\
          pulsetv\.com([^a-z0-9\.]|$)|\
          sendoutmail\.com([^a-z0-9\.]|$))
{ PENNMEDIA=yes }

:0
* LEANTAG ?? no
* ! PENNMEDIA ?? yes
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   (^|[^-_0-9a-z])bnb[0-9]\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])omx[0-9]\.com([^a-z0-9\.]|$)
 *  1100^1   (^|[^-_0-9a-z])thekha\.com([^a-z0-9\.]|$)
 { PENNMEDIA=yes }
}

:0
* PENNMEDIA ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Penn Media/Pulse Direct"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@pulsetv.com,wes@pennmedia.com,info@sendoutmail.com" \
     -I"Cc: abuse@newedgenetworks.com,abuse@genuity.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Permissionmarketing.org
#
# Updated and domains verified 2/20/03
# Last reported spam: 2/20/03
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]permissionmarketing\.org([^a-z0-9\.]|$)
{ PERMISSIONMARKETING=yes }

:0
* LEANTAG ?? no
* ! PERMISSIONMARKETING ?? yes
{
 :0 BH
 * !^Subject:.*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *  -500^0   ^Subject: Re:
 *  -200^1   ^[:;#>]
 *  1100^1   ()<TITLE>Negocios Internacionales</TITLE>
 *  1100^1   (^|[^-_0-9a-z])permissionmarketing\.org([^a-z0-9\.]|$)
 { PERMISSIONMARKETING=yes }
}

:0
* PERMISSIONMARKETING ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Permissionmarketing.org"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@permissionmarketing.org,luis.cozza@imagebrain.com" \
     -I"Cc: abuse@iplan.com.ar,abuse@register.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Pexicom
#
# Updated and domains verified 12/12/02
# Last reported spam: 12/12/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.125\.181\.[0-9][0-9]?[0-9]?|\
          pexicom\.com([^a-z0-9\.]|$)|\
          pxlg\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Pexicom"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@pexicom.com,postmaster@pxlg.com" \
     -I"Cc: abuse@above.net,abuse@mfnx.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# thesuperspecialsales.com
#
# Updated and domains verified 10/15/02
# Last reported spam: 10/15/02
# Other Relevant Info:
#   10/15/02
#     These guys are all over the place!
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.49\.243\.[0-9][0-9]?[0-9]?|\
          thesuperspecialsales\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: thesuperspecialsales.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@thesuperspecialsales.com" \
     -A"Cc: abuse@rackspace.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# tremedousbuys.com
#
# Updated and domains verified 10/15/02
# Last reported spam: 10/15/02
# Other Relevant Info:
#   10/15/02
#     Yet another rackspace spammer. :/
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](66\.216\.117\.[0-9][0-9]?[0-9]?|\
          eu30\.com([^a-z0-9\.]|$)|\
          tremendousbuys\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: tremendousbuys.com"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@eu30.com,postmaster@tremendousbuys.com" \
     -A"Cc: abuse@rackspace.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# UnityMail.net
#
# Updated and domains verified 11/05/02
# Last reported spam: 7/01/02
# Other Relevant Info:
#    Spamming for NARAL and apparently other "Radical" or Leftist causes
#    Spamming for something called donordigital.com
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](207\.239\.241\.3[2-9]|\
          207\.239\.241\.[4-9][0-9]|\
          207\.239\.241\.1[0-1][0-9]|\
          207\.239\.241\.12[0-7]|\
          unitymail\.net([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: UnityMail"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
{
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@inflow.com" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
}

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# XeroWarp
#
# Updated and domains verified 12/11/02
# Last reported spam: 12/11/02
# Other Relevant Info:
#
# Status: Active Spammers
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.94\.60\.19[3-9]|\
          64\.94\.60\.2[0-1][0-9]|\
          64\.94\.60\.220|\
          xerowarp\.(com|net)([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: XeroWarp"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: postmaster@xerowarp.com,postmaster@xerowarp.net" \
     -A"Cc: abuse@internap.com" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# YesMail
#
# Updated and domains verified 10/05/02
# Last reported spam: 8/19/02
# Other Relevant Info:
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.37\.207\.|\
          ym[0-1]\.(com|net)([^a-z0-9\.]|$)|\
          yesmail\.com([^a-z0-9\.]|$))
{ YESMAIL=yes }

:0 BH
* LEANTAG ?? no
* !^Subject:.*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*   600^1   EmailOffersOnDemand
*   600^1   YesMail
{ YESMAIL=yes }


:0
* YESMAIL ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: YesMail"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@yesmail.com,postmaster@yesmail.com" \
     -I"Cc: abuse@cw.net,abuse@exodus.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}
