# SpamAssassin rules file: scores. ########################################################################### # Default scores. Note that if a test is named in the files, but a score is # not assigned here, the default score will be set to 1. # The following block of scores were generating using the mass-checking # scripts, and a genetic algorithm, to determine the optimum scores which # resulted in minimum false positives or negatives. The default evolution # parameters are very strongly weighted against false positives. # SUMMARY: 140 / 3537 # # Correctly non-spam: 210220 99.93% (81.74% overall) # Correctly spam: 43288 92.45% (16.83% overall) # False positives: 140 0.07% (0.05% overall, 3280 adjusted) # False negatives: 3537 7.55% (1.38% overall, 9092 adjusted) # Average score for spam: 14.3 nonspam: -2.2 # Average for false-pos: 7.0 false-neg: 2.6 # TOTAL: 257185 100.00% # # Start of GA-evolved scores score 25FREEMEGS_URL 2.666 score ADDRESSES_ON_CD 1.217 score ADVERT_CODE 1.651 score ALL_CAPS_SUBJECT 1.271 score AMAZING 3.140 score ANOTHER_NET_AD 2.996 score AOL_USERS_LINK 0.709 score ASCII_FORM_ENTRY 3.135 score ASKS_BILLING_ADDRESS 0.705 score AUTO_EMAIL_REMOVAL 3.935 score BAD_HELO_WARNING 0.574 score BASE64_ENC_TEXT 3.200 score BE_AMAZED 0.477 score BILLION_DOLLARS 4.682 score BILL_1618 2.000 score BUGGY_CGI 5.009 score BUGZILLA_BUG -2.000 score BULK_EMAIL 0.776 score CALL_FREE 2.221 score CALL_NOW 2.850 score CASHCASHCASH -0.839 score CASINO 0.920 score CBYI 2.813 score CHARSET_FARAWAY_HEADERS 1.525 score CHECK_OR_MONEY_ORDER 3.781 score CLICKSFORMONEY_NET 2.482 score CLICK_BELOW 0.869 score CLICK_HERE_LINK 1.557 score CLICK_TO_REMOVE_2 3.385 score COMMUNIGATE -0.351 score COPYRIGHT_CLAIMED -2.752 score COPY_DVDS 3.723 score CORRUPT_MSGID 1.239 score CTYPE_JUST_HTML 4.459 score CYBER_FIRE_POWER 3.520 score DATE_IN_FUTURE 2.540 score DATE_MISSING 2.195 score DEAR_FRIEND -0.242 score DEAR_SOMEBODY -0.492 score DIFFERENT_REPLY_TO 2.813 score DIRECT_EMAIL 1.171 score DOMAIN_SUBJECT 0.4 score DOMAIN_BODY 0.8 score EARN_PER_WEEK 4.214 score EGP_HTML_BANNER -6.039 score EMAIL_MARKETING 1.951 score EXCUSE_1 2.134 score EXCUSE_10 -0.408 score EXCUSE_12 -0.590 score EXCUSE_13 4.038 score EXCUSE_14 0.369 score EXCUSE_15 2.643 score EXCUSE_16 1.608 score EXCUSE_17 1.812 score EXCUSE_2 3.524 score EXCUSE_3 1.020 score EXCUSE_4 4.133 score EXCUSE_5 1.849 score EXCUSE_6 1.621 score EXCUSE_7 2.328 score EXCUSE_8 4.364 score E_WEBHOSTCENTRAL_URL 4.558 score FAKED_IP_IN_RCVD 1.325 score FAKED_UNDISC_RECIPS 2.305 score FILTERED_BY_WORLDREMOVE 3.954 score FORGED_EUDORAMAIL_RCVD 3.205 score FORGED_GW05_RCVD 2.000 score FORGED_HOTMAIL_RCVD 1.596 score FORGED_YAHOO_RCVD 2.143 score FORM_W_MAILTO_ACTION 2.000 score FOR_FREE 0.955 score FOR_INSTANT_ACCESS 3.205 score FOR_JUST_SOME_AMT -0.148 score FREEWEBCO_NET_URL 1.150 score FREEWEBHOSTINGCENTRAL 1.561 score FREE_CONSULTATION 4.608 score FREE_PRIORITY_MAIL 2.139 score FRIEND_AT_PUBLIC 1.453 score FROM_AND_TO_SAME 0.248 score FROM_BTAMAIL 4.627 score FROM_ENDS_IN_NUMS 1.320 score FROM_HAS_MIXED_NUMS 1.250 score FROM_MALFORMED 3.550 score FROM_MISSING 4.912 score FROM_NAME_EQ_FROM_ADDR 1.824 score FROM_NO_USER 0.462 score FROM_STARTS_WITH_NUMS 1.320 score FRONTPAGE 2.000 score FULL_REFUND 2.814 score GAPPY_SUBJECT 2.172 score GAPPY_TEXT 0.672 score GENTLE_FEROCITY 4.385 score GREAT_OFFER 0.356 score GREEN_EXCUSE_1 2.890 score GREEN_EXCUSE_2 2.418 score GUARANTEE 3.342 score HOME_EMPLOYMENT 6.493 score HR_3113 1.904 score HTML_WITH_BGCOLOR 1.621 score HTTP_CTRL_CHARS_HOST 1.430 score HTTP_ESCAPED_HOST 1.820 score HTTP_NUMBER_WORD 1.308 score HTTP_USERNAME_USED 0.791 score HTTP_WITH_EMAIL_IN_URL 1.773 score INCREASE_SALES -1.273 score INCREASE_TRAFFIC 2.723 score INTL_EXEC_GUILD 3.521 score INVALID_DATE 3.173 score INVALID_DATE_ODD_MONTH 1.177 score INVALID_DATE_TZ_ABSURD 1.989 score INVALID_MSGID 1.735 score INVESTOR_SPEC_SHEET 2.913 score IN_ACCORDANCE_WITH_LAWS 1.610 score IN_REP_TO -5.029 score JAVASCRIPT 0.083 score JODY 2.569 score KIFF 3.368 score KNOWN_BAD_DIALUPS 0.658 score LARGE_HEX -0.815 score LIMITED_TIME_ONLY 3.342 score LINES_OF_YELLING 2.659 score LINES_OF_YELLING_2 1.000 score LINES_OF_YELLING_3 1.000 score LONG_NUMERIC_HTTP_ADDR 2.139 score LOTS_OF_CC_LINES 0.060 score MAILTO_LINK -0.226 score MAILTO_TO_REMOVE -0.107 score MAILTO_TO_SPAM_ADDR 1.075 score MAILTO_WITH_SUBJ 1.692 score MAILTO_WITH_SUBJ_REMOVE 0.426 score MAIL_IN_ORDER_FORM 4.836 score MANY_FROMS 3.240 score MASS_EMAIL 1.107 score MAY_BE_FORGED 1.076 score MDAEMON_2_7_4 1.127 score MICRO_CAP_WARNING 6.133 score MIME_NULL_BLOCK -0.809 score MISSING_HEADERS 2.314 score MONEY_MAKING 4.326 score MONSTERHUT 1.910 score MORTGAGE_RATES 5.839 score MSGID_HAS_NO_AT -0.320 score MSGID_SPAMSIGN_1 3.127 score MSG_ID_ADDED_BY_MTA 0.857 score MSG_ID_ADDED_BY_MTA_2 1.785 score MURKOWSKI_CRUFT 1.404 score MYCASINOBUILDER 3.646 score NEW_DOMAIN_EXTENSIONS 5.129 score NIGERIAN_SCAM_2 4.918 score NONEXISTENT_CHARSET 4.496 score NORMAL_HTTP_TO_IP 2.522 score NO_QS_ASKED 4.876 score NO_REAL_NAME 0.553 score NUMERIC_HTTP_ADDR 2.477 score ONCE_IN_LIFETIME -0.405 score ONE_HUNDRED_PC_FREE 2.208 score ONE_HUNDRED_PC_GUAR 3.326 score ONE_TIME_MAILING 1.329 score OPPORTUNITY -0.651 score OPT_IN 2.038 score ORDER_STATUS 1.311 score PARA_A_2_C_OF_1618 6.035 score PENIS_ENLARGE 1.515 score PENIS_ENLARGE2 1.156 score PENNIES_A_DAY 5.209 score PGP_SIGNATURE -5.054 score PLING 0.987 score PLING_PLING 0.644 score POPLAUNCH 4.468 score PORN_1 0.841 score PORN_3 1.896 score PORN_4 2.347 score PORN_6 -0.991 score PORN_7 0.991 score PORN_8 -0.994 score POST_IN_RCVD 2.903 score PREST_NON_ACCREDITED 1.864 score PRINT_FORM_SIGNATURE 0.424 score PRODUCED_AND_SENT_OUT 6.784 score PROFITS -0.162 score PURE_PROFIT 4.907 score RATWARE 2.277 score REALLY_UNSAFE_JAVASCRIPT 1.104 score RELAYING_FRAME 2.545 score REMOVAL_INSTRUCTIONS 1.232 score REMOVE_IN_QUOTES 2.145 score REMOVE_PAGE 4.109 score REMOVE_SUBJ 4.542 score REPLY_REMOVE_SUBJECT 4.570 score REPLY_TO_EMPTY 4.256 score RESISTANCE_IS_FUTILE 6.803 score SAFEGUARD_NOTICE 1.538 score SECTION_301 1.650 score SENT_IN_COMPLIANCE 0.486 score SHOES_GUY 6.807 score SHORT_RECEIVED_LINE 2.855 score SLIGHTLY_UNSAFE_JAVASCRIPT 1.259 score SMTPD_IN_RCVD 0.532 score SOCIAL_SEC_NUMBER 3.645 score SPAM_FORM 0.082 score SPAM_FORM_RETURN 3.493 score STAINLESS_STEEL 4.000 score STOCK_ALERT 2.744 score STOCK_PICK 2.723 score STRONG_BUY 6.053 score SUBJ_2_CREDIT 5.376 score SUBJ_ALL_CAPS 1.981 score SUBJ_ENDS_IN_Q_MARK 0.011 score SUBJ_FULL_OF_8BITS 3.172 score SUBJ_HAS_Q_MARK 1.315 score SUBJ_HAS_SPACES 2.469 score SUBJ_HAS_UNIQ_ID 2.321 score SUBJ_MISSING 0.110 score SUBJ_REMOVE -0.471 score SUPERLONG_LINE 0.661 score SUSPICIOUS_CC_RECIPS -0.321 score SUSPICIOUS_RECIPS 1.110 score S_1618 0.858 score TAKE_ACTION_NOW 6.228 score THE_FOLLOWING_FORM 3.466 score THIS_AINT_SPAM 2.000 score TONER 3.957 score TO_BE_REMOVED_REPLY 0.707 score TO_EMPTY 4.525 score TO_MALFORMED -0.050 score TO_NO_USER 3.272 score TO_UNSUB_REPLY 0.574 score TRACE_BY_SSN 2.861 score TRACKER_ID -3.369 score UCE_MAIL_ACT 1.000 score UNDISC_RECIPS 1.023 score UNIVERSITY_DIPLOMAS 2.000 score UNSUB_PAGE 3.247 score UNSUB_SCRIPT 3.168 score US_DOLLARS 4.498 score VERY_SUSP_CC_RECIPS 2.262 score VERY_SUSP_RECIPS 1.335 score VIAGRA 1.512 score VJESTIKA 1.739 score WANTS_CREDIT_CARD 1.000 score WEB4PORNO_URL 5.015 score WEB_BUGS 1.287 score WE_HATE_SPAM 4.562 score WE_HONOR_ALL 4.476 score WORK_AT_HOME 2.000 score WWW_NETSITESFORFREE_NET 1.990 score WWW_REMOVEYOU_COM 1.912 score X_EM_VER_PRESENT 1.482 score X_MAILER_GIBBERISH 4.169 score X_MSMAIL_PRIORITY_HIGH 1.523 score X_PMFLAGS_PRESENT 1.587 score X_PRIORITY_HIGH -1.168 score YAHOO_MSGID_ADDED 1.391 score YELLOWSUN 3.902 score YOUR_INCOME 3.047 score YOU_HAVE_BEEN_SELECTED 3.195 score YR_MEMBERSHIP_EXCH 4.244 # End of GA-evolved scores. # some non-GA-generated scores: either network tests, occuring with # very low frequency, or very frequently causing false positives. score INVALID_DATE_NO_TZ 2.0 score FORGED_RCVD_FOUND 0.5 score BUGGY_CGI_PT 4.0 score BUGGY_CGI_DE 4.0 score BUGGY_CGI_DE_2 4.0 score BUGGY_CGI_DE_3 4.0 score FROM_FORGED_HOTMAIL 0.0 score NO_MX_FOR_FROM 1.8 score RAZOR_CHECK 3.0 score RCVD_IN_RELAYS_ORDB_ORG 2.0 score RCVD_IN_OSIRUSOFT_COM 2.0 score X_OSIRU_SPAM_SRC 3.0 score X_OSIRU_SPAMWARE_SITE 5.0 score ROUND_THE_WORLD 3.0 score RCVD_IN_RFCI 0.5 score RCVD_IN_ORBS 1.0 #score RCVD_IN_ORBZ 1.0 # unscored by default -- commercial services. If you pay for these, # give them a score so they will be checked. score RCVD_IN_RBL 0.0 score RCVD_IN_RSS 0.0 score RCVD_IN_DUL 0.0 score RCVD_IN_BL_SPAMCOP_NET 0.0 ########################################################################### # Compensation for common false positives. score BALANCE_FOR_LONG -2.0 score UNIFIED_PATCH -5.0 score DIFF_C_PATCH -5.0 score MAILMAN_CONFIRM -4.0 score EVITE -5.0 # We never change the whitelist/blacklist scores score USER_IN_BLACKLIST 10.0 score USER_IN_WHITELIST -100.0 # Not really false positives but the user wants spam! score USER_IN_WHITELIST_TO -6.0 # they want some spam score USER_IN_MORE_SPAM_TO -20.0 # they want more spam score USER_IN_ALL_SPAM_TO -100.0 # they want all spam, go figure :) ########################################################################### # Missed scores: score A_HREF_TO_IP 2.5 score BRAND_NEW_PAGER 4.9 score BUGGY_CGI_ES 1.0 score BUGGY_CGI_ES_2 1.0 score CHARSET_FARAWAY 0.8 score CHARSET_FARAWAY_BODY 2.1 score CLICK_TO_REMOVE_MAILTO 1.0 score EMAIL_HARVEST 1.0 score EU_200_32_CE 1.0 score EU_EMAIL_OPTOUT 1.8 score EXCUSE_11 1.0 score EXCUSE_18 1.0 score EXCUSE_9 1.0 score FREQ_SPAM_PHRASE 0.0 score FROM_UGETMORE 1.0 score HUNZA_DIET_BREAD 0.0 score INTERNET_TERROR_RANT 1.0 score ITS_EFFECTIVE 1.0 score JUST_MAILED_PAGE 0.2 score LASER_PRINTER 3.9 score NIGERIAN_SCAM 1.0 score NO_SELLING 1.0 score ONLINE_BIZ_OPS 1.0 score PORN_2 2.2 score PRINT_OUT_AND_FAX 1.0 score Q_FOR_SELLER 1.0 score RCVD_IN_VISI 1.0 score SEXY_PICS 0.0 score SPAM_FORM_INPUT 1.0 score SPAM_PHRASES_020 0.0 score SPAM_PHRASES_040 0.0 score SPAM_PHRASES_100 0.0 score TO_INVESTORS 0.0 score UNNEEDED_HTML_ENCODING 1.0 score URGENT_BIZ 1.0 score WWW_AUTOREMOVE_COM 1.9 score WWW_CLIK4YOU_COM 1.0 score WWW_DIRECTFORCEMARKETING_COM 1.0 score WWW_TRAFFICWOW_NET 1.0 score X_UIDL_SPAMSIGN 1.0 score SIGNATURE_DELIM -1.0 score MAJORDOMO -1.0