# active ruleset list, automatically generated from http://ruleqa.spamassassin.org/ # with results from: day 1: bb-doc bb-fredt bb-guenther_fraud bb-kmcgrail bb-trec_enron bb-zmi wt-en1 wt-en2 wt-en3 wt-jp1 wt-jp2; day 2: bb-doc bb-fredt bb-guenther_fraud bb-kmcgrail bb-trec_enron bb-zmi; day 3: bb-doc bb-fredt bb-guenther_fraud # tflags userconf ALL_TRUSTED # good enough AXB_HELO_HOME_UN # good enough BANKING_LAWS # tflags learn BAYES_00 # tflags learn BAYES_05 # tflags learn BAYES_20 # tflags learn BAYES_40 # tflags learn BAYES_50 # tflags learn BAYES_60 # tflags learn BAYES_80 # tflags learn BAYES_95 # tflags learn BAYES_99 # tflags userconf CHARSET_FARAWAY # tflags userconf CHARSET_FARAWAY_HEADER # tflags userconf CORRUPT_FROM_LINE_IN_HDRS # good enough DEAR_BENEFICIARY # good enough DEAR_WINNER # tflags net DIGEST_MULTIPLE # tflags net DKIM_ADSP_ALL # tflags net DKIM_ADSP_CUSTOM_HIGH # tflags net DKIM_ADSP_CUSTOM_LOW # tflags net DKIM_ADSP_CUSTOM_MED # tflags net DKIM_ADSP_DISCARD # tflags net DKIM_ADSP_NXDOMAIN # tflags net DKIM_SIGNED # tflags net DKIM_VALID # tflags net DKIM_VALID_AU # tflags net DNS_FROM_AHBL_RHSBL # tflags net DNS_FROM_RFC_BOGUSMX # tflags net DNS_FROM_RFC_DSN # tflags publish DOS_ANAL_SPAM_MAILER # good enough DOS_RCVD_IP_TWICE_C # good enough DRUGS_STOCK_MIMEOLE # tflags userconf ENV_AND_HDR_SPF_MATCH # good enough FAKE_REPLY_C # good enough FH_FAKE_RCVD_LINE_B # good enough FH_FROM_GIVEAWAY # good enough FH_HAS_XAIMC # good enough FH_HAS_XID # good enough FH_HELO_ALMOST_IP # good enough FH_HELO_EQ_D_D_D_D # good enough FH_HOST_IN_ADDRARPA # good enough FILL_THIS_FORM # good enough FILL_THIS_FORM_FRAUD_PHISH # good enough FILL_THIS_FORM_LOAN # good enough FILL_THIS_FORM_LONG # good enough FM_LOTTO_YOU_WON # good enough FM_SCHOOLING # good enough FORGED_RELAY_MUA_TO_MX # good enough FORM_FRAUD # tflags userconf FRAGMENTED_MESSAGE # tflags userconf FROM_DOMAIN_NOVOWEL # tflags userconf FROM_LOCAL_NOVOWEL # good enough FROM_MISSP_DYNIP # good enough FROM_MISSP_FREEMAIL # good enough FROM_MISSP_MSFT # good enough FSL_HELO_DEVICE # good enough FSL_UA # tflags userconf GTUBE # tflags userconf HASHCASH_20 # tflags userconf HASHCASH_21 # tflags userconf HASHCASH_22 # tflags userconf HASHCASH_23 # tflags userconf HASHCASH_24 # tflags userconf HASHCASH_25 # tflags userconf HASHCASH_2SPEND # tflags userconf HASHCASH_HIGH # tflags userconf HEAD_LONG # good enough HELO_LH_HOME # good enough HELO_LOCALHOST # good enough HK_LOTTO # good enough HK_LOTTO_NAME # good enough HK_NAME_FM_DR # good enough HK_NAME_FREE # good enough HK_SCAM_N1 # good enough HK_SCAM_N15 # good enough HK_SCAM_N2 # good enough HK_SCAM_N3 # good enough HK_SCAM_N8 # good enough HK_SCAM_S25 # good enough HK_SPAMMY_FILENAME # tflags userconf HTML_CHARSET_FARAWAY # good enough JM_FAKE_PSMTP_RCVD # good enough KAM_LOTTO1 # good enough KAM_LOTTO2 # good enough KAM_LOTTO3 # good enough KB_DATE_CONTAINS_TAB # good enough KB_FORGED_MOZ4 # good enough KB_RATWARE_MSGID # good enough KB_RATWARE_OUTLOOK_MID # good enough KHOP_SC_TOP200 # good enough KHOP_SC_TOP_CIDR16 # good enough KHOP_SC_TOP_CIDR8 # good enough LOTTERY_1 # good enough LOTTERY_PH_004470 # good enough LOTTO_AGENT # good enough LOTTO_DEPT # good enough LOTTO_URI # good enough MANY_SPAN_IN_TEXT # tflags userconf MIME_CHARSET_FARAWAY # tflags userconf MISSING_HB_SEP # good enough MONEY_FORM # good enough MONEY_FROM_MISSP # good enough MONEY_PERCENT # good enough MSOE_MID_WRONG_CASE # tflags net NO_DNS_FOR_FROM # tflags userconf NO_RECEIVED # tflags userconf NO_RELAYS # tflags net PYZOR_CHECK # tflags net RAZOR2_CF_RANGE_51_100 # tflags net RAZOR2_CF_RANGE_E4_51_100 # tflags net RAZOR2_CF_RANGE_E8_51_100 # tflags net RAZOR2_CHECK # tflags net RCVD_IN_BL_SPAMCOP_NET # tflags net RCVD_IN_CSS # tflags net RCVD_IN_DNSWL_HI # tflags net RCVD_IN_DNSWL_LOW # tflags net RCVD_IN_DNSWL_MED # tflags net RCVD_IN_DNSWL_NONE # tflags net RCVD_IN_IADB_DK # tflags net RCVD_IN_IADB_DOPTIN # tflags net RCVD_IN_IADB_DOPTIN_GT50 # tflags net RCVD_IN_IADB_DOPTIN_LT50 # tflags net RCVD_IN_IADB_EDDB # tflags net RCVD_IN_IADB_EPIA # tflags net RCVD_IN_IADB_GOODMAIL # tflags net RCVD_IN_IADB_LISTED # tflags net RCVD_IN_IADB_LOOSE # tflags net RCVD_IN_IADB_MI_CPEAR # tflags net RCVD_IN_IADB_MI_CPR_30 # tflags net RCVD_IN_IADB_MI_CPR_MAT # tflags net RCVD_IN_IADB_ML_DOPTIN # tflags net RCVD_IN_IADB_NOCONTROL # tflags net RCVD_IN_IADB_OOO # tflags net RCVD_IN_IADB_OPTIN # tflags net RCVD_IN_IADB_OPTIN_GT50 # tflags net RCVD_IN_IADB_OPTIN_LT50 # tflags net RCVD_IN_IADB_OPTOUTONLY # tflags net RCVD_IN_IADB_RDNS # tflags net RCVD_IN_IADB_SENDERID # tflags net RCVD_IN_IADB_SPF # tflags net RCVD_IN_IADB_UNVERIFIED_1 # tflags net RCVD_IN_IADB_UNVERIFIED_2 # tflags net RCVD_IN_IADB_UT_CPEAR # tflags net RCVD_IN_IADB_UT_CPR_30 # tflags net RCVD_IN_IADB_UT_CPR_MAT # tflags net RCVD_IN_IADB_VOUCHED # tflags net RCVD_IN_MAPS_DUL # tflags net RCVD_IN_MAPS_NML # tflags net RCVD_IN_MAPS_OPS # tflags net RCVD_IN_MAPS_RBL # tflags net RCVD_IN_MAPS_RSS # tflags net RCVD_IN_NJABL_CGI # tflags net RCVD_IN_NJABL_MULTI # tflags net RCVD_IN_NJABL_PROXY # tflags net RCVD_IN_NJABL_RELAY # tflags net RCVD_IN_NJABL_SPAM # tflags net RCVD_IN_PBL # tflags net RCVD_IN_PSBL # tflags net RCVD_IN_RP_CERTIFIED # tflags net RCVD_IN_RP_RNBL # tflags net RCVD_IN_RP_SAFE # tflags net RCVD_IN_SBL # tflags net RCVD_IN_SORBS_BLOCK # tflags net RCVD_IN_SORBS_DUL # tflags net RCVD_IN_SORBS_HTTP # tflags net RCVD_IN_SORBS_MISC # tflags net RCVD_IN_SORBS_SMTP # tflags net RCVD_IN_SORBS_SOCKS # tflags net RCVD_IN_SORBS_WEB # tflags net RCVD_IN_SORBS_ZOMBIE # tflags net RCVD_IN_XBL # good enough RDNS_LOCALHOST # good enough SPAMMY_XMAILER # tflags net SPF_FAIL # tflags net SPF_HELO_FAIL # tflags net SPF_HELO_NEUTRAL # tflags userconf SPF_HELO_PASS # tflags net SPF_HELO_SOFTFAIL # tflags net SPF_NEUTRAL # tflags userconf SPF_PASS # tflags net SPF_SOFTFAIL # tflags userconf SUBJECT_IN_BLACKLIST # tflags userconf SUBJECT_IN_WHITELIST # good enough TAB_IN_FROM # good enough TINY_FLOAT # good enough TVD_FINGER_02 # good enough AB_TEST_PDF4 # good enough AXB_419_FROM_C1 # good enough DEAR_NOBODY # good enough DOS_FAKE_SQUIRREL # good enough FB_EARN_UP_TO # good enough FB_IMAGIRL # good enough FM_LOTTO_MONEY # good enough FRT_EXPERIENCE # good enough FSL_FREEMAIL_1 # good enough FSL_FREEMAIL_2 # good enough FSL_RCVD_USER # good enough FS_LOW_INTMOR # good enough FS_MAKE_MONEY # good enough HK_FAKENAME_MICROSOFT # good enough HK_FAKENAME_PAYPAL # good enough HK_LOTTO_SUBJECT # good enough HK_NAME_FM_FROM # good enough HK_NAME_FM_MR_MRS # good enough HK_NAME_FROM # good enough HK_NAME_MR_MRS # good enough HK_SCAM_N12 # good enough HK_SCAM_N13 # good enough HK_SCAM_N14 # good enough HK_SCAM_N16 # good enough HK_SCAM_N4 # good enough HK_SCAM_S1 # good enough HK_SCAM_S15 # good enough HK_SCAM_S7 # good enough KHOP_SC_CIDR8 # good enough LONG_FREEMAIL_ADDR # good enough LOTTO_AGENT_RPLY # good enough RP_MINUS # good enough S25R_3 # good enough SANE_6d8469947da377e0a0b4b7fed8f7e1d8 # good enough SANE_8f9d40cc4e21b11c7171a7d6b3eea4c1 # good enough SANE_e3634fb4bb521c6a312bb1d001c20a1d # good enough TVD_BODY_END_STAR # good enough TVD_LONG_WORD5 # good enough TVD_PH_BODY_META # tflags userconf UNPARSEABLE_RELAY # tflags net URIBL_AB_SURBL # tflags net URIBL_BLACK # tflags net URIBL_GREY # tflags net URIBL_JP_SURBL # tflags net URIBL_OB_SURBL # tflags net URIBL_PH_SURBL # tflags net URIBL_RED # tflags net URIBL_RHS_DOB # tflags net URIBL_SBL # tflags net URIBL_SC_SURBL # tflags net URIBL_WS_SURBL # tflags userconf URI_NOVOWEL # tflags userconf USER_IN_ALL_SPAM_TO # tflags userconf USER_IN_BLACKLIST # tflags userconf USER_IN_BLACKLIST_TO # tflags net USER_IN_DEF_DKIM_WL # tflags userconf USER_IN_DEF_SPF_WL # tflags userconf USER_IN_DEF_WHITELIST # tflags net USER_IN_DKIM_WHITELIST # tflags userconf USER_IN_MORE_SPAM_TO # tflags userconf USER_IN_SPF_WHITELIST # tflags userconf USER_IN_WHITELIST # tflags userconf USER_IN_WHITELIST_TO # good enough XMAILER_MIMEOLE_OL_09BB4 # good enough XMAILER_MIMEOLE_OL_1ECD5 # good enough XMAILER_MIMEOLE_OL_20C99 # good enough XMAILER_MIMEOLE_OL_22B61 # good enough XMAILER_MIMEOLE_OL_3D61D # good enough XMAILER_MIMEOLE_OL_4B815 # good enough XMAILER_MIMEOLE_OL_58CB5 # good enough XMAILER_MIMEOLE_OL_7533E # good enough XMAILER_MIMEOLE_OL_812FF # good enough XMAILER_MIMEOLE_OL_83BF7 # good enough XMAILER_MIMEOLE_OL_91287 # good enough XMAILER_MIMEOLE_OL_B4B40 # tflags net __DNS_FROM_RFC_ABUSE # tflags net __DNS_FROM_RFC_POST # tflags net __DNS_FROM_RFC_WHOIS # tflags net __RCVD_IN_BRBL # tflags net __RCVD_IN_DNSWL # tflags net __RCVD_IN_IADB # tflags net __RCVD_IN_NJABL # tflags net __RCVD_IN_SORBS # tflags net __RCVD_IN_ZEN # tflags net __RESIGNER1 # tflags net __RESIGNER2 # tflags net __RFC_IGNORANT_ENVFROM