# SpamAssassin score file # # Please don't modify this file as your changes will be overwritten with # the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # ########################################################################### # Default scores. Note that if a test is named in the files, but a score is # not assigned here, the default score will be set to 1. # The following block of scores were generated using the mass-checking # scripts, and a perceptron to determine the optimum scores which # resulted in minimum false positives or negatives. The scores are # weighted to produce roughly 1 false positive in 2500 non-spam messages # using the default threshold of 5.0. # Start of generated scores. score ACT_NOW_CAPS 0.120 0.001 0.001 0.001 score ADVANCE_FEE_2 1.607 0.647 1.189 1.392 score ADVANCE_FEE_3 2.872 1.760 3.330 3.336 score ADVANCE_FEE_4 3.024 3.040 3.515 3.727 score BAD_CREDIT 1.501 0.129 1.539 0.001 score BAD_ENC_HEADER 2.480 2.255 2.960 3.100 score BANG_GUAR 0.001 0.139 0.504 0.001 score BANG_OPRAH 1.233 0.366 1.386 0.001 score BILLION_DOLLARS 0.001 score BODY_ENHANCEMENT 1.090 0.001 1.163 0.001 score BODY_ENHANCEMENT2 1.821 0.618 2.045 0.736 score CONFIRMED_FORGED 0.690 0.001 1.059 0.001 score CUM_SHOT 2.320 2.095 2.683 2.708 score DATE_SPAMWARE_Y2K 1.859 1.822 1.944 0.745 score DEAR_FRIEND 0.811 0.858 0.976 1.632 score DEAR_SOMETHING 1.605 1.612 1.901 2.100 score DIET_1 0.633 0.001 0.485 0.001 score DIGEST_MULTIPLE 0.001 0.233 0.001 0.765 score DRUGS_ANXIETY 1.841 0.001 2.422 0.404 score DRUGS_ANXIETY_EREC 0.657 0.104 1.067 0.234 score DRUGS_ANXIETY_OBFU 0.128 0.001 0.101 1.691 score DRUGS_DIET 1.544 0.991 1.661 0.629 score DRUGS_DIET_OBFU 2.109 2.354 2.354 2.294 score DRUGS_ERECTILE 2.160 0.100 2.372 0.493 score DRUGS_ERECTILE_OBFU 1.833 2.046 1.816 2.408 score DRUGS_MANYKINDS 0.001 score DRUGS_MUSCLE 0.537 0.001 0.371 0.001 score DRUGS_SLEEP_EREC 2.438 2.657 2.712 2.737 score DRUGS_SMEAR1 1.310 1.372 1.576 1.337 score DRUG_DOSAGE 2.337 1.592 2.745 2.242 score DRUG_ED_CAPS 0.547 0.352 1.011 0.501 score DRUG_ED_GENERIC 2.140 1.814 2.461 1.807 score DRUG_ED_ONLINE 2.160 2.160 2.498 2.700 score DRUG_ED_SILD 1.440 0.001 1.594 0.001 score EMAIL_ROT13 1.600 1.680 1.850 2.000 score EMPTY_MESSAGE 1.426 1.496 1.734 2.308 score EM_ROLEX 2.160 1.271 2.590 1.570 score ENGLISH_UCE_SUBJECT 1.415 0.250 1.850 0.740 score EXCUSE_24 1.440 1.520 1.757 1.900 score EXCUSE_4 0.001 0.985 0.001 0.697 score EXCUSE_REMOVE 1.345 0.001 1.573 0.110 score EXTRA_MPART_TYPE 0.847 0.815 0.733 1.091 score FAKE_HELO_MAIL_COM_DOM 2.160 2.160 2.498 2.700 score FAKE_OUTBLAZE_RCVD 2.480 2.480 2.867 3.100 score FIN_FREE 1.019 0.611 1.313 0.469 score FORGED_AOL_TAGS 1.696 0.281 1.844 1.582 score FORGED_IMS_HTML 2.184 2.265 2.518 1.937 score FORGED_IMS_TAGS 2.054 2.117 2.321 1.768 score FORGED_MSGID_AOL 1.440 1.436 1.665 1.619 score FORGED_MSGID_EXCITE 2.400 2.400 2.775 3.000 score FORGED_MSGID_HOTMAIL 2.560 2.459 2.960 2.618 score FORGED_MSGID_MSN 2.000 1.956 2.312 2.035 score FORGED_MSGID_YAHOO 3.200 3.158 3.700 3.712 score FORGED_MUA_AOL_FROM 2.880 1.027 3.035 2.167 score FORGED_MUA_EUDORA 2.440 1.944 2.867 2.484 score FORGED_MUA_IMS 2.480 1.198 2.459 1.751 score FORGED_MUA_MOZILLA 1.520 0.539 1.757 1.593 score FORGED_MUA_OIMO 1.205 0.981 1.708 2.223 score FORGED_MUA_OUTLOOK 3.360 3.360 3.885 4.056 score FORGED_MUA_THEBAT_BOUN 2.253 2.281 2.564 2.163 score FORGED_MUA_THEBAT_CS 1.760 1.760 2.035 2.200 score FORGED_OUTLOOK_HTML 3.246 2.514 3.872 2.713 score FORGED_OUTLOOK_TAGS 3.044 2.369 3.537 2.492 score FORGED_QUALCOMM_TAGS 2.080 1.809 2.312 1.783 score FORGED_TELESP_RCVD 1.280 0.001 1.470 0.001 score FORGED_THEBAT_HTML 2.560 2.387 2.960 2.500 score FORWARD_LOOKING 1.207 1.434 1.692 1.048 score FREE_PORN 0.001 0.001 0.143 0.001 score FREE_QUOTE_INSTANT 1.178 0.001 1.422 0.001 score FROM_BLANK_NAME 1.659 1.467 0.936 1.534 score FROM_DOMAIN_NOVOWEL 1.582 1.592 1.903 2.100 score FROM_EXCESS_BASE64 0.647 1.052 1.190 1.309 score FROM_LOCAL_DIGITS 0.001 score FROM_LOCAL_HEX 2.000 1.343 2.240 1.305 score FROM_LOCAL_NOVOWEL 2.480 2.331 2.867 2.861 score FROM_NO_USER 0.001 score FROM_OFFERS 1.680 1.641 1.865 1.960 score FROM_STARTS_WITH_NUMS 1.337 0.283 1.829 0.724 score GAPPY_SUBJECT 1.600 1.625 1.785 1.995 score GUARANTEED_100_PERCENT 0.810 0.001 1.392 0.001 score HEADER_SPAM 3.200 3.115 3.700 3.789 score HELO_DYNAMIC_CHELLO_NL 1.624 0.001 2.035 0.170 score HELO_DYNAMIC_DHCP 3.280 2.664 3.792 3.066 score HELO_DYNAMIC_DIALIN 2.080 2.080 2.405 2.600 score HELO_DYNAMIC_HCC 3.280 3.280 3.792 4.100 score HELO_DYNAMIC_HEXIP 1.280 1.280 1.480 1.600 score HELO_DYNAMIC_HOME_NL 1.600 1.600 1.850 2.000 score HELO_DYNAMIC_IPADDR 3.360 3.360 3.885 4.200 score HELO_DYNAMIC_IPADDR2 3.280 3.213 3.792 3.818 score HELO_DYNAMIC_ROGERS 1.840 1.203 2.127 1.580 score HELO_DYNAMIC_SPLIT_IP 2.880 2.880 3.330 2.191 score HG_HORMONE 1.784 1.472 2.024 2.060 score HIDE_WIN_STATUS 0.001 score HTML_MIME_NO_HTML_TAG 0.001 0.512 0.001 1.082 score HTML_MISSING_CTYPE 2.080 2.010 2.405 2.518 score HTML_SHORT_CENTER 2.240 2.105 2.590 2.179 score HTML_SHORT_LINK_IMG_1 2.333 0.275 2.743 0.948 score HTML_SHORT_LINK_IMG_2 2.296 0.951 2.739 1.582 score HTML_SHORT_LINK_IMG_3 0.913 0.518 1.675 0.881 score HTML_TITLE_SUBJ_DIFF 1.547 0.551 1.224 0.266 score HTTP_77 2.242 2.658 2.644 2.346 score HTTP_ESCAPED_HOST 0.001 0.001 0.124 0.001 score HTTP_EXCESSIVE_ESCAPES 1.329 1.146 1.145 1.572 score IMPOTENCE 2.093 0.592 2.443 0.627 score INVALID_DATE 1.700 1.760 2.005 2.193 score INVALID_DATE_TZ_ABSURD 1.360 1.346 1.573 1.700 score INVALID_MSGID 1.705 1.710 2.054 2.185 score INVALID_TZ_CST 2.043 0.153 2.419 0.867 score INVALID_TZ_EST 2.720 0.737 3.145 1.883 score INVESTMENT_ADVICE 2.960 2.960 3.423 3.700 score IP_LINK_PLUS 0.467 1.047 1.372 1.248 score JAPANESE_UCE_SUBJECT 1.280 1.360 1.480 1.700 score JOIN_MILLIONS 0.178 0.001 0.463 0.001 score JS_FROMCHARCODE 1.200 0.001 1.480 1.600 # n=1 score KOREAN_UCE_SUBJECT 2.480 2.480 2.867 3.100 score LIVE_PORN 0.530 0.332 0.782 0.001 score LONGWORDS 3.120 2.957 3.530 3.789 score LOW_PRICE 0.001 score MALE_ENHANCE 2.480 2.480 2.867 3.100 score MARKETING_PARTNERS 1.482 1.435 1.757 1.765 score MILLION_USD 2.359 1.606 2.824 1.816 score MIME_BOUND_DD_DIGITS 3.600 3.600 4.162 4.500 score MIME_BOUND_DIGITS_15 2.400 2.400 2.775 2.949 score MIME_BOUND_MANY_HEX 2.160 2.144 2.498 2.700 score MIME_HEADER_CTYPE_ONLY 0.001 0.001 0.182 0.001 score MIME_HTML_ONLY_MULTI 0.001 score MISSING_DATE 0.001 score MISSING_MIMEOLE 1.664 1.394 1.970 1.612 score MISSING_SUBJECT 1.729 1.345 2.035 1.816 score MONEY_BACK 0.843 0.001 0.645 0.001 score MORE_SEX 2.240 2.035 2.590 1.950 score MSGID_DOLLARS_RANDOM 3.200 3.200 3.700 3.780 score MSGID_FROM_MTA_HEADER 0.001 0.001 0.274 0.001 score MSGID_MULTIPLE_AT 2.880 1.375 3.187 1.914 score MSGID_RANDY 2.794 2.165 3.412 2.880 score MSGID_SHORT 2.480 2.465 2.821 3.100 score MSGID_SPAM_CAPS 3.520 3.520 4.070 4.400 score MSGID_SPAM_LETTERS 2.400 2.349 2.867 3.021 score MSGID_YAHOO_CAPS 2.466 1.273 2.720 2.399 score MULTI_FORGED 1.325 1.031 1.754 1.275 score NA_DOLLARS 0.868 0.609 1.529 1.285 score NONEXISTENT_CHARSET 1.280 1.280 1.480 1.506 score NORMAL_HTTP_TO_IP 0.001 score NOT_ADVISOR 2.160 2.160 2.498 2.700 score NO_MEDICAL 1.200 1.259 1.480 1.363 score NO_PRESCRIPTION 3.200 2.888 3.700 3.887 score NUMERIC_HTTP_ADDR 1.253 0.585 1.249 0.472 score OBFUSCATING_COMMENT 0.806 1.117 1.379 1.690 score OBSCURED_EMAIL 1.680 1.680 1.834 2.100 score ONE_TIME 1.840 1.138 2.118 1.569 score ONLINE_PHARMACY 2.720 2.102 3.145 2.043 score PERCENT_RANDOM 2.880 1.439 3.196 2.300 score PLING_QUERY 0.001 0.326 0.623 0.514 score PREST_NON_ACCREDITED 1.280 1.280 1.480 1.600 score PREVENT_NONDELIVERY 1.515 1.640 1.737 1.600 score PRICES_ARE_AFFORDABLE 1.964 0.522 2.312 0.995 score RATWARE_EGROUPS 2.640 2.487 3.052 2.563 score RATWARE_GECKO_BUILD 1.751 1.426 1.966 1.691 score RATWARE_HASH_DASH 0.001 # n=0 n=1 n=2 n=3 score RATWARE_MOZ_MALFORMED 1.840 1.820 2.035 1.847 score RATWARE_MPOP_WEBMAIL 0.001 0.118 0.417 0.111 score RATWARE_MS_HASH 2.425 1.379 2.691 1.910 score RATWARE_OE_MALFORMED 2.400 2.400 2.775 3.000 score RATWARE_OUTLOOK_NONAME 3.120 1.861 3.471 2.777 score RATWARE_RCVD_AT 2.880 2.590 3.330 2.292 score RATWARE_RCVD_PF 2.880 2.880 3.330 3.600 score RATWARE_ZERO_TZ 3.280 3.087 3.792 3.196 score RCVD_AM_PM 1.760 1.726 2.035 1.662 score RCVD_DOUBLE_IP_LOOSE 0.163 0.001 0.293 0.001 score RCVD_DOUBLE_IP_SPAM 3.506 3.455 4.070 3.690 score RCVD_FAKE_HELO_DOTCOM 2.160 1.652 2.590 2.281 score REFINANCE_NOW 1.520 0.872 1.576 1.050 score REFINANCE_YOUR_HOME 1.760 0.980 2.035 0.302 score REMOVE_BEFORE_LINK 3.120 2.152 3.700 2.692 score REPLICA_WATCH 2.320 2.320 2.683 2.900 score REPTO_OVERQUOTE_THEBAT 2.240 2.146 2.628 2.641 score REPTO_QUOTE_AOL 0.001 score REPTO_QUOTE_IMS 0.001 score REPTO_QUOTE_MSN 2.800 2.800 3.237 3.249 score REPTO_QUOTE_QUALCOMM 0.343 0.001 0.221 0.001 score REPTO_QUOTE_YAHOO 2.126 2.181 3.428 2.124 score RUDE_HTML 2.344 1.362 2.902 2.041 score SPOOF_COM2COM 2.320 1.938 2.683 2.450 score SPOOF_COM2OTH 0.537 0.001 0.001 0.001 score SPOOF_NET2COM 1.806 1.106 1.870 1.541 score STOCK_ALERT 1.680 1.760 2.035 2.200 score STRONG_BUY 2.160 2.080 2.498 2.690 score SUBJECT_DIET 1.812 0.623 2.127 1.330 score SUBJECT_DRUG_GAP_C 2.880 1.035 3.140 0.614 score SUBJECT_DRUG_GAP_L 1.840 1.840 2.118 2.300 score SUBJECT_DRUG_GAP_S 1.729 0.378 2.498 1.581 score SUBJECT_DRUG_GAP_VA 2.437 2.442 2.743 2.619 score SUBJECT_DRUG_GAP_X 2.262 2.334 2.447 2.401 score SUBJECT_SEXUAL 2.160 2.160 2.498 2.684 score SUBJ_AS_SEEN 1.511 0.001 1.757 0.001 score SUBJ_BUY 1.311 0.116 0.701 0.255 score SUBJ_DOLLARS 0.650 0.381 0.636 0.301 score SUBJ_YOUR_DEBT 1.405 0.577 1.757 1.106 score SUBJ_YOUR_FAMILY 1.600 0.338 1.850 1.157 score TO_MALFORMED 0.001 score TRACKER_ID 2.000 1.295 2.292 1.032 score UNCLAIMED_MONEY 1.920 1.920 2.220 2.400 score UNCLOSED_BRACKET 2.480 2.480 2.867 2.900 score UPPERCASE_50_75 0.206 0.591 0.001 0.368 score UPPERCASE_75_100 1.394 1.040 0.809 1.371 score URG_BIZ 0.395 0.269 0.699 0.351 score URI_HEX 0.001 score URI_NOVOWEL 1.885 0.997 2.405 0.884 score URI_NO_WWW_BIZ_CGI 2.480 2.480 2.867 3.000 score URI_NO_WWW_INFO_CGI 3.280 3.241 3.792 4.100 score URI_UNSUBSCRIBE 2.560 2.069 2.809 3.200 score US_DOLLARS_3 0.214 0.001 0.152 0.001 score VIA_GAP_GRA 2.480 2.419 2.867 2.529 score WEIRD_PORT 0.001 score WEIRD_QUOTING 1.120 1.200 1.295 1.341 score WITH_LC_SMTP 1.440 1.440 1.665 1.621 score X_IP 2.803 1.848 3.286 2.305 score X_MESSAGE_INFO 3.520 3.520 4.070 4.400 score X_PRIORITY_CC 2.320 2.320 2.683 2.900 score YAHOO_DRS_REDIR 1.007 0.313 1.189 1.103 score YAHOO_RD_REDIR 0.001 # n=0 n=1 n=2 n=3 # End of generated scores. ########################################################################### ifplugin Mail::SpamAssassin::Plugin::BodyEval # score BLANK_LINES_80_90 0.272 0.107 0.810 0.001 score MPART_ALT_DIFF 0.425 0.137 1.142 0.001 score MPART_ALT_DIFF_COUNT 1.649 0.001 1.607 0.708 # endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::HTMLEval # score HTML_COMMENT_SAVED_URL 0.001 0.647 1.197 0.273 score HTML_COMMENT_SHORT 0.001 score HTML_EMBEDS 0.495 0.273 0.292 0.325 score HTML_EXTRA_CLOSE 2.880 2.699 3.330 3.600 score HTML_FONT_FACE_BAD 0.001 0.452 0.231 0.156 score HTML_FONT_LOW_CONTRAST 1.335 0.766 1.890 0.194 score HTML_FONT_SIZE_HUGE 0.001 0.001 0.128 0.314 score HTML_FONT_SIZE_LARGE 1.415 1.575 1.182 1.238 score HTML_FORMACTION_MAILTO 1.760 1.760 2.035 2.200 score HTML_IMAGE_ONLY_04 2.820 2.880 3.330 3.600 score HTML_IMAGE_ONLY_08 2.581 2.435 3.469 3.126 score HTML_IMAGE_ONLY_12 2.294 1.639 2.046 1.867 score HTML_IMAGE_ONLY_16 0.668 0.627 0.338 0.497 score HTML_IMAGE_ONLY_20 1.108 0.640 1.416 1.157 score HTML_IMAGE_ONLY_24 1.316 0.930 1.771 1.841 score HTML_IMAGE_ONLY_28 1.438 1.014 1.732 1.900 score HTML_IMAGE_ONLY_32 1.423 0.836 1.610 1.052 score HTML_IMAGE_RATIO_02 1.245 0.192 1.800 0.463 score HTML_IMAGE_RATIO_04 0.877 0.001 1.057 0.001 score HTML_IMAGE_RATIO_06 0.001 0.001 0.139 0.001 score HTML_IMAGE_RATIO_08 0.001 score HTML_OBFUSCATE_05_10 1.421 1.169 1.522 1.449 score HTML_OBFUSCATE_10_20 1.936 1.397 2.371 1.770 score HTML_OBFUSCATE_20_30 2.720 2.720 3.145 3.400 score HTML_OBFUSCATE_30_40 2.480 2.480 2.867 2.859 score HTML_OBFUSCATE_50_60 2.049 2.061 2.342 2.031 score HTML_OBFUSCATE_70_80 1.440 1.507 1.680 1.472 score HTML_OBFUSCATE_90_100 0.001 # n=0 n=1 n=2 n=3 score HTML_BADTAG_40_50 0.001 score HTML_BADTAG_50_60 1.604 0.263 1.811 0.987 score HTML_BADTAG_60_70 1.727 0.819 1.873 1.679 score HTML_BADTAG_90_100 1.074 0.846 1.098 1.399 score HTML_NONELEMENT_30_40 0.001 score HTML_NONELEMENT_40_50 0.001 0.001 0.001 0.126 score HTML_NONELEMENT_60_70 0.001 0.316 0.001 0.001 score HTML_NONELEMENT_80_90 0.001 score HTML_TAG_BALANCE_BODY 0.001 0.180 0.351 0.228 score HTML_TAG_BALANCE_HEAD 2.143 1.159 2.498 1.447 score HTML_TAG_EXIST_BGSOUND 1.920 1.920 2.220 2.107 # # HTML control test score HTML_MESSAGE 0.001 endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::DNSEval # score RCVD_IN_BL_SPAMCOP_NET 0.001 1.332 0.001 1.558 score RCVD_IN_DSBL 0.001 1.801 0.001 2.600 score RCVD_IN_IADB_VOUCHED 0.001 -1.825 0.001 -2.200 score RCVD_IN_NJABL_CGI 0.001 # n=1 n=3 score RCVD_IN_NJABL_MULTI 0.001 # n=1 n=3 score RCVD_IN_NJABL_PROXY 0.001 0.327 0.001 0.721 score RCVD_IN_NJABL_RELAY 0.001 score RCVD_IN_NJABL_SPAM 0.001 1.905 0.001 2.775 score RCVD_IN_SBL 0.001 2.712 0.001 3.160 score RCVD_IN_SORBS_BLOCK 0.001 # n=1 n=3 score RCVD_IN_SORBS_DUL 0.001 1.988 0.001 2.046 score RCVD_IN_SORBS_HTTP 0.001 score RCVD_IN_SORBS_MISC 0.001 score RCVD_IN_SORBS_SMTP 0.001 0.001 0.001 0.201 score RCVD_IN_SORBS_SOCKS 0.001 1.823 0.001 2.159 score RCVD_IN_SORBS_WEB 0.001 1.236 0.001 1.456 score RCVD_IN_SORBS_ZOMBIE 0.001 0.240 0.001 0.258 score RCVD_IN_WHOIS_BOGONS 0.001 1.811 0.001 2.430 score RCVD_IN_WHOIS_INVALID 0.001 2.151 0.001 2.234 score RCVD_IN_XBL 0.001 3.114 0.001 3.897 score RCVD_IN_PBL 0.001 1.713 0.001 1.946 score DNS_FROM_AHBL_RHSBL 0.001 0.306 0.001 0.231 score DNS_FROM_RFC_BOGUSMX 0.001 2.034 0.001 1.945 score DNS_FROM_RFC_DSN 0.001 2.872 0.001 2.597 score DNS_FROM_SECURITYSAGE 0.001 2.001 0.001 1.513 score NO_DNS_FOR_FROM 0.001 2.603 0.001 3.200 # # Bonded Sender: http://www.bondedsender.com/ score RCVD_IN_BSP_OTHER 0 -0.1 0 -0.1 score RCVD_IN_BSP_TRUSTED 0 -4.3 0 -4.3 # Habeas: http://www.habeas.com/ score HABEAS_ACCREDITED_COI 0 -8.0 0 -8.0 score HABEAS_ACCREDITED_SOI 0 -4.3 0 -4.3 score HABEAS_CHECKED 0 -0.2 0 -0.2 # CompleteWhois: http://www.completewhois.com/ score RCVD_IN_WHOIS_HIJACKED 0 1.0 0 1.0 # MAPS # MAPS is a commercial service. If you pay for these, assign a score # so they will be checked. score RCVD_IN_MAPS_RBL 0 score RCVD_IN_MAPS_DUL 0 score RCVD_IN_MAPS_RSS 0 score RCVD_IN_MAPS_NML 0 endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::HeaderEval # score DATE_IN_FUTURE_03_06 2.061 2.007 2.275 1.961 score DATE_IN_FUTURE_06_12 1.680 1.498 1.883 1.668 score DATE_IN_FUTURE_12_24 2.320 2.316 2.775 2.767 score DATE_IN_FUTURE_24_48 2.080 2.080 2.498 2.688 score DATE_IN_FUTURE_48_96 1.680 1.680 1.942 2.100 score DATE_IN_FUTURE_96_XX 1.920 1.888 2.276 2.403 score DATE_IN_PAST_03_06 0.736 0.001 1.122 0.478 score DATE_IN_PAST_06_12 0.846 0.746 0.926 0.827 score DATE_IN_PAST_12_24 0.960 0.881 1.036 1.247 score DATE_IN_PAST_24_48 0.801 0.805 0.976 0.880 score DATE_IN_PAST_96_XX 1.752 1.572 2.101 2.020 score FORGED_HOTMAIL_RCVD2 1.653 0.549 2.127 1.162 score FORGED_YAHOO_RCVD 1.506 0.928 1.794 1.849 score FROM_ILLEGAL_CHARS 3.280 3.280 3.792 4.100 score HEADER_COUNT_CTYPE 1.336 1.440 1.665 1.800 score HEAD_ILLEGAL_CHARS 1.652 1.519 1.796 1.606 score LOCALPART_IN_SUBJECT 1.559 1.561 1.757 1.900 score MISSING_HEADERS 0.001 0.189 0.001 0.001 score MSGID_OUTLOOK_INVALID 2.080 2.027 2.405 2.600 score RATWARE_EFROM 2.880 2.880 3.330 3.600 score RATWARE_NAME_ID 3.280 3.280 3.792 4.100 score ROUND_THE_WORLD 0.001 1.267 0.001 1.495 score ROUND_THE_WORLD_LOCAL 1.840 1.429 2.127 1.659 score SORTED_RECIPS 2.800 1.530 3.237 1.960 score SUBJ_ALL_CAPS 1.049 1.166 0.459 0.997 score SUBJ_ILLEGAL_CHARS 3.360 3.360 3.978 4.279 score SUSPICIOUS_RECIPS 2.240 0.849 2.267 1.757 score UNRESOLVED_TEMPLATE 1.520 0.687 1.923 1.324 # # ok_locales score CHARSET_FARAWAY_HEADER 3.200 endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::MIMEEval # score MIME_BAD_ISO_CHARSET 3.360 3.360 3.885 4.185 score MIME_BASE64_BLANKS 0.001 0.001 0.184 0.224 score MIME_BASE64_TEXT 2.048 1.522 2.749 1.885 score MIME_HTML_MOSTLY 1.703 0.699 2.309 1.102 score MIME_HTML_ONLY 0.414 0.001 0.389 0.001 score MIME_QP_LONG_LINE 0.159 0.001 0.234 0.001 score MISSING_MIME_HB_SEP 0.001 # # ok_locales score CHARSET_FARAWAY 3.200 # we dare you score HEAD_LONG 2.5 score MISSING_HB_SEP 2.5 endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::RelayEval # score ALL_TRUSTED -1.360 -1.440 -1.665 -1.800 score FAKE_HELO_EMAIL_COM 1.440 1.440 1.665 1.335 score FAKE_HELO_EXCITE 0.001 score FAKE_HELO_LYCOS 0.001 score FAKE_HELO_MAIL_COM 1.920 1.920 2.220 2.369 score FAKE_HELO_MSN 2.080 2.060 2.358 2.509 score FAKE_HELO_YAHOO_CA 1.186 1.353 1.466 1.599 score NO_RDNS_DOTCOM_HELO 0.356 0.001 0.001 0.001 score RCVD_HELO_IP_MISMATCH 3.200 3.200 3.700 4.000 score RCVD_ILLEGAL_IP 1.585 0.234 1.813 0.288 score RCVD_NUMERIC_HELO 1.440 1.253 1.665 1.500 # # Informational rules about Received header parsing score NO_RELAYS -0.001 score UNPARSEABLE_RELAY 0.001 endif ########################################################################### ifplugin Mail::SpamAssassin::Plugin::URIEval # score HTTPS_IP_MISMATCH 1.920 1.920 2.220 2.400 # endif ########################################################################### # Scores for tests that are scored manually or with isolated rescore runs. # Most are net tests, userconf tests, tests occuring with very low frequency, # or tests with many false positives. # GTUBE - Generic Test for Unsolicited Bulk Email score GTUBE 1000.000 # we dare you score FRAGMENTED_MESSAGE 2.5 score HIGH_CODEPAGE_URI 2.5 # make the Bayes scores unmutable (as discussed in bug 4505) ifplugin Mail::SpamAssassin::Plugin::Bayes score BAYES_00 0 0 -2.312 -2.599 score BAYES_05 0 0 -1.110 -1.110 score BAYES_20 0 0 -0.740 -0.740 score BAYES_40 0 0 -0.185 -0.185 score BAYES_50 0 0 0.001 0.001 score BAYES_60 0 0 1.0 1.0 score BAYES_80 0 0 2.0 2.0 score BAYES_95 0 0 3.0 3.0 score BAYES_99 0 0 3.5 3.5 endif # Informational rules about Received header parsing score NO_RECEIVED -0.001 # Informational rule, typically means corrupt corpus/input score NO_HEADERS_MESSAGE 0.001 # ok_locales score HTML_CHARSET_FARAWAY 0.500 score MIME_CHARSET_FARAWAY 2.450 # rescore never changes the whitelist/blacklist scores ifplugin Mail::SpamAssassin::Plugin::WLBLEval score USER_IN_BLACKLIST 100.000 score USER_IN_WHITELIST -100.000 score USER_IN_DEF_WHITELIST -15.000 score USER_IN_BLACKLIST_TO 10.000 # not really false positives but the user wants spam! score USER_IN_WHITELIST_TO -6.000 score USER_IN_MORE_SPAM_TO -20.000 score USER_IN_ALL_SPAM_TO -100.000 endif ifplugin Mail::SpamAssassin::Plugin::WhiteListSubject score SUBJECT_IN_WHITELIST -100 score SUBJECT_IN_BLACKLIST 100 endif # Mail::SpamAssassin::Plugin::WhiteListSubject ifplugin Mail::SpamAssassin::Plugin::DKIM score USER_IN_DKIM_WHITELIST -100.000 score USER_IN_DEF_DKIM_WL -7.500 score ENV_AND_HDR_DKIM_MATCH -7.500 endif # Mail::SpamAssassin::Plugin::DKIM ifplugin Mail::SpamAssassin::Plugin::DomainKeys score USER_IN_DK_WHITELIST -100.000 score USER_IN_DEF_DK_WL -7.500 score ENV_AND_HDR_DK_MATCH -7.500 endif # Mail::SpamAssassin::Plugin::DomainKeys ifplugin Mail::SpamAssassin::Plugin::SPF score USER_IN_SPF_WHITELIST -100.000 score USER_IN_DEF_SPF_WL -7.500 score ENV_AND_HDR_SPF_MATCH -7.500 endif # Mail::SpamAssassin::Plugin::SPF # DKIM ifplugin Mail::SpamAssassin::Plugin::DKIM score DKIM_POLICY_SIGNALL 0.001 score DKIM_POLICY_SIGNSOME 0.001 score DKIM_POLICY_TESTING 0.001 score DKIM_SIGNED 0.001 score DKIM_VERIFIED -0.001 endif # Mail::SpamAssassin::Plugin::DKIM # DomainKeys ifplugin Mail::SpamAssassin::Plugin::DomainKeys score DK_POLICY_SIGNALL 0.001 score DK_POLICY_SIGNSOME 0.001 score DK_POLICY_TESTING 0.001 score DK_SIGNED 0.001 score DK_VERIFIED -0.001 endif # Mail::SpamAssassin::Plugin::DomainKeys # Hashcash ifplugin Mail::SpamAssassin::Plugin::Hashcash score HASHCASH_20 -0.500 score HASHCASH_21 -0.700 score HASHCASH_22 -1.000 score HASHCASH_23 -2.000 score HASHCASH_24 -3.000 score HASHCASH_25 -4.000 score HASHCASH_HIGH -5.000 score HASHCASH_2SPEND 0.100 endif # Mail::SpamAssassin::Plugin::Hashcash # SPF # Note that the benefit for a valid SPF record is deliberately minimal; it's # likely that more spammers would quickly move to setting valid SPF records # otherwise. The penalties for an *incorrect* record, however, are large. ;) ifplugin Mail::SpamAssassin::Plugin::SPF score SPF_PASS -0.001 score SPF_HELO_PASS -0.001 # score SPF_FAIL 0.001 1.333 0.001 1.142 score SPF_HELO_FAIL 0.001 0.001 0.001 0.001 score SPF_HELO_NEUTRAL 0.001 0.001 0.001 0.001 score SPF_HELO_SOFTFAIL 0.001 2.078 0.001 2.432 score SPF_NEUTRAL 0.001 1.379 0.001 1.069 score SPF_SOFTFAIL 0.001 1.470 0.001 1.384 # endif # Mail::SpamAssassin::Plugin::SPF # URIDNSBL ifplugin Mail::SpamAssassin::Plugin::URIDNSBL # score URIBL_AB_SURBL 0 3.306 0 3.812 score URIBL_JP_SURBL 0 3.360 0 4.087 score URIBL_OB_SURBL 0 2.617 0 3.008 score URIBL_PH_SURBL 0 2.240 0 2.800 score URIBL_SBL 0 1.094 0 1.639 score URIBL_SC_SURBL 0 3.600 0 4.498 score URIBL_WS_SURBL 0 1.533 0 2.140 score URIBL_BLACK 0 3.0 0 3.0 score URIBL_GREY 0 1.0 0 1.0 score URIBL_RED 0.001 # endif # Mail::SpamAssassin::Plugin::URIDNSBL # ReplaceTags ifplugin Mail::SpamAssassin::Plugin::ReplaceTags # score FUZZY_AFFORDABLE 1.840 1.840 2.035 2.199 score FUZZY_AMBIEN 0.001 0.454 0.367 0.416 score FUZZY_BILLION 2.400 0.914 2.727 1.925 score FUZZY_CPILL 1.848 0.881 1.727 0.518 score FUZZY_CREDIT 1.983 1.556 2.538 1.079 score FUZZY_ERECT 2.720 2.640 3.052 3.400 score FUZZY_GUARANTEE 2.880 2.960 3.330 3.658 score FUZZY_MEDICATION 2.720 2.720 3.145 3.400 score FUZZY_MILLION 2.880 2.880 3.330 3.600 score FUZZY_MONEY 2.240 2.240 2.590 2.800 score FUZZY_MORTGAGE 2.960 2.960 3.423 3.655 score FUZZY_OBLIGATION 2.640 2.555 3.052 3.272 score FUZZY_OFFERS 2.080 1.439 2.405 1.768 score FUZZY_PHARMACY 2.560 2.560 2.960 3.200 score FUZZY_PHENT 2.560 1.155 2.960 1.799 score FUZZY_PRESCRIPT 2.880 2.880 3.330 3.600 score FUZZY_PRICES 2.544 2.531 2.960 3.200 score FUZZY_REFINANCE 2.528 1.512 2.960 2.060 score FUZZY_REMOVE 2.160 2.128 2.498 2.663 score FUZZY_ROLEX 2.193 0.972 2.683 0.514 score FUZZY_SOFTWARE 2.160 2.160 2.498 2.675 score FUZZY_THOUSANDS 2.240 2.240 2.590 2.800 score FUZZY_VLIUM 1.736 0.612 1.691 0.229 score FUZZY_VIOXX 0.001 0.001 0.219 0.001 score FUZZY_VPILL 2.153 0.729 2.837 0.924 score FUZZY_XPILL 2.880 2.643 2.731 3.337 score SUBJECT_FUZZY_CHEAP 2.036 1.821 2.462 1.996 score SUBJECT_FUZZY_MEDS 2.812 2.873 3.330 3.600 score SUBJECT_FUZZY_PENIS 1.967 2.062 2.405 2.532 score SUBJECT_FUZZY_TION 1.590 1.468 1.856 2.080 score SUBJECT_FUZZY_VPILL 2.070 1.644 2.011 1.846 # endif # Mail::SpamAssassin::Plugin::ReplaceTags # DCC ifplugin Mail::SpamAssassin::Plugin::DCC score DCC_CHECK 0 1.37 0 2.17 endif # Mail::SpamAssassin::Plugin::DCC # Pyzor ifplugin Mail::SpamAssassin::Plugin::Pyzor # score PYZOR_CHECK 0 2.834 0 3.700 # endif # Mail::SpamAssassin::Plugin::Pyzor # Razor2 ifplugin Mail::SpamAssassin::Plugin::Razor2 score RAZOR2_CHECK 0 0.5 0 0.5 score RAZOR2_CF_RANGE_51_100 0 0.5 0 0.5 score RAZOR2_CF_RANGE_E4_51_100 0 1.5 0 1.5 score RAZOR2_CF_RANGE_E8_51_100 0 1.5 0 1.5 endif # Mail::SpamAssassin::Plugin::Razor2 # TextCat ifplugin Mail::SpamAssassin::Plugin::TextCat score UNWANTED_LANGUAGE_BODY 2.800 score BODY_8BITS 1.500 endif # Mail::SpamAssassin::Plugin::TextCat # AntiVirus ifplugin Mail::SpamAssassin::Plugin::AntiVirus score MICROSOFT_EXECUTABLE 0.100 score MIME_SUSPECT_NAME 0.100 endif # Mail::SpamAssassin::Plugin::AntiVirus # VBounce - anti-bounce message ruleset. All of these are informational, # and should not be scored as antispam rules; instead the user needs # to detect messages that hit ANY_BOUNCE_MESSAGE, and filter them aside # as spurious bounces. # score BOUNCE_MESSAGE 0.1 score CRBOUNCE_MESSAGE 0.1 score VBOUNCE_MESSAGE 0.1 score ANY_BOUNCE_MESSAGE 0.1 # It's still quite common for non-spam senders to send mail from hosts with # no rDNS, or "dynamic-looking" rDNS. Lock these down to low values; # some sites can increase them as a matter of local policy, and they # make great fodder for meta rules, too. # score RDNS_NONE 0.1 score RDNS_DYNAMIC 0.1