<?xml version="1.0" encoding="utf-8"?>
<urldomainblacklist><item><expression>(\w*\.|)getthemoney.org</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)industrygroups.net</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacm-bcs.org</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacm-or.com</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacm-or.org</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacmor.com</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacmor.org</expression><type>Regex</type><comment></comment></item><item><expression>(\w*\.|)nacmoregon.com</expression><type>Regex</type><comment>Chris Schmidt's idea</comment></item><item><expression>(\w*\.|)nacmoregon.org</expression><type>Regex</type><comment></comment></item><item><expression>[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$</expression><type>Regex</type><comment>Peter Lawton's expression for non-bracketed IP addresses.</comment></item><item><expression>^.*?[^a-zA-Z0-9\.\[\]\-\_]</expression><type>Regex</type><comment>No illegal/extended characters.  Fluke and Peter Lawton 4/13/2006</comment></item><item><expression>^.*?[0-9]{8}</expression><type>Regex</type><comment>Fluke3 8/15/2006 was {10}</comment></item><item><expression>^.*?(\.ip\.|fiber.*\.|fios.*\.|ftth.*\.|user.*\.|dns\.|modem.*\.|(^|\.)pool.*\.|static.*\.|dyn.*\.|dhcp.*\.|ppp.*\.|dsl.*\.|dial.*\.|in-addr.*\.|customer.*\.|cpe.*\.|broadband.*\.|dialup.*\.|client\.|cable.*\.(?!comcast)).+\..+</expression><type>Regex</type><comment>Fluke4 8/15/2006 modified to require periods; Chris Schmidt 11/3/2007 requires 2 periods after.</comment></item><item><expression>^.*?(-ip-|fiber-|fios-|ftth-|user-|dns-|^host-|modem-|pool-|static-|dyn-|dhcp-|ppp-|dsl-|dial-|in-addr-|customer-|cpe-|broadband-|fios-|dialup-|cable-).+\..+</expression><type>Regex</type><comment>Fluke4 8/15/2006 modified to require dashes</comment></item><item><expression>^.*?fios.verizon.net</expression><type>Simple</type><comment>Bruce Gingery Spam-L 8/17/2006</comment></item><item><expression>*.tin.it</expression><type>Simple</type><comment>SPAM-L Misc: SMTP relaying tin.it   8/17/2006</comment></item><item><expression>^.*?[0-9]{1,3}(\.|-)[0-9]{1,3}(\.|-)[0-9]{1,3}(\.|-)</expression><type>Regex</type><comment>3 octets</comment></item><item><expression>((?![a-zA-Z0-9\-]\.[a-zA-Z0-9\]]{2,6}$).)*$</expression><type>Regex</type><comment>Fluke negated regex from Spam-L 8/16/2006</comment></item><item><expression>^.*?\-.*\-.*\-.*\-.*\-.*\-.*</expression><type>Regex</type><comment>6 or more hyphens/dashes</comment></item><item><expression>gmail.com</expression><type>Simple</type><comment>gmail.com spam attempts from China 219.148.11.x</comment></item></urldomainblacklist>
