# SpamAssassin rules file: scores. ########################################################################### # Default scores. Note that if a test is named in the files, but a score is # not assigned here, the default score will be set to 1. # The following block of scores were generating using the mass-checking # scripts, and a genetic algorithm, to determine the optimum scores which # resulted in minimum false positives or negatives. The default evolution # parameters are very strongly weighted against false positives. # SUMMARY: 140 / 3537 # # Correctly non-spam: 210220 99.93% (81.74% overall) # Correctly spam: 43288 92.45% (16.83% overall) # False positives: 140 0.07% (0.05% overall, 3280 adjusted) # False negatives: 3537 7.55% (1.38% overall, 9092 adjusted) # Average score for spam: 14.3 nonspam: -2.2 # Average for false-pos: 7.0 false-neg: 2.6 # TOTAL: 257185 100.00% # # Start of GA-evolved scores score ADDRESSES_ON_CD 3.722 score ADVERT_CODE 1.060 score ALL_CAPS_SUBJECT -0.274 score ALL_NATURAL 1.024 score AMAZING 1.631 score AOL_USERS_LINK 0.901 score ASCII_FORM_ENTRY 0.036 score ASKS_BILLING_ADDRESS 2.627 score AS_SEEN_ON 2.166 score AUTO_EMAIL_REMOVAL 3.044 score BAD_HELO_WARNING 3.082 score BASE64_ENC_TEXT 1.441 score BE_AMAZED -0.260 score BIG_FONT 2.085 score BILLION_DOLLARS 1.072 score BILL_1618 4.827 score BUGGY_CGI 4.066 score BUGZILLA_BUG 1.123 score BULK_EMAIL 1.113 score CALL_FREE 1.052 score CALL_NOW 2.196 score CASHCASHCASH 0.182 score CASINO 1.605 score CBYI 2.502 score CHARSET_FARAWAY 2.070 score CHARSET_FARAWAY_HEADERS 1.817 score CHECK_OR_MONEY_ORDER 3.358 score CLICK_BELOW 1.520 score CLICK_HERE_LINK 1.788 score CLICK_TO_REMOVE_2 2.634 score COMMUNIGATE 1.573 score COPYRIGHT_CLAIMED -1.568 score COPY_ACCURATELY 0.933 score COPY_DVDS 2.746 score CORRUPT_MSGID 2.742 score CTYPE_JUST_HTML 3.154 score DATE_IN_FUTURE 2.318 score DATE_MISSING 0.248 score DEAR_FRIEND 2.069 score DEAR_SOMEBODY -0.468 score DIFFERENT_REPLY_TO 0.037 score DIRECT_EMAIL 2.283 score DOMAIN_BODY 4.782 score DOMAIN_SUBJECT 0.586 score DONT_DELETE 0.916 score EARN_PER_WEEK 4.667 score EJACULATION 3.454 score EMAIL_MARKETING 0.715 score EXCUSE_1 2.270 score EXCUSE_10 0.556 score EXCUSE_11 0.501 score EXCUSE_12 2.847 score EXCUSE_13 1.841 score EXCUSE_14 1.148 score EXCUSE_15 0.377 score EXCUSE_16 1.345 score EXCUSE_17 2.608 score EXCUSE_2 1.340 score EXCUSE_3 2.747 score EXCUSE_4 0.864 score EXCUSE_6 -0.110 score EXCUSE_7 1.380 score FAKED_IP_IN_RCVD 1.101 score FAKED_UNDISC_RECIPS 3.435 score FILTERED_BY_WORLDREMOVE 2.120 score FORGED_EUDORAMAIL_RCVD 2.548 score FORGED_GW05_RCVD 2.857 score FORGED_HOTMAIL_RCVD 0.530 score FORGED_JUNO_RCVD 2.027 score FORGED_YAHOO_RCVD 1.998 score FORM_W_MAILTO_ACTION 2.971 score FOR_FREE 0.211 score FOR_INSTANT_ACCESS 2.554 score FOR_JUST_SOME_AMT 0.783 score FREE_CONSULTATION 4.039 score FREE_MONEY 1.004 score FREE_PRIORITY_MAIL 2.749 score FRIEND_AT_PUBLIC 1.832 score FROM_AND_TO_SAME 0.877 score FROM_BTAMAIL 3.207 score FROM_ENDS_IN_NUMS 1.029 score FROM_HAS_MIXED_NUMS 1.952 score FROM_MALFORMED 2.221 score FROM_MISSING 1.298 score FROM_NAME_EQ_FROM_ADDR 2.391 score FROM_NO_USER 0.899 score FROM_STARTS_WITH_NUMS 1.288 score FRONTPAGE 4.775 score FULL_REFUND 2.846 score GAPPY_SUBJECT 2.670 score GAPPY_TEXT -1.237 score GENTLE_FEROCITY 2.458 score GREAT_OFFER 1.361 score GREEN_EXCUSE_1 3.116 score GREEN_EXCUSE_2 3.013 score GUARANTEE 1.895 score HOME_EMPLOYMENT 2.040 score HR_3113 0.900 score HTML_EMBEDS 0.265 score HTML_WITH_BGCOLOR -0.546 score HTTP_ESCAPED_HOST 1.849 score HTTP_NUMBER_WORD 0.825 score HTTP_USERNAME_USED 0.203 score HTTP_WITH_EMAIL_IN_URL 4.062 score IMPOTENCE 3.132 score INCREASE_SALES 2.930 score INCREASE_TRAFFIC 2.744 score INTL_EXEC_GUILD 0.781 score INVALID_DATE 1.514 score INVALID_DATE_ODD_MONTH 0.572 score INVALID_DATE_TZ_ABSURD 2.126 score INVALID_MSGID 1.523 score INVESTOR_SPEC_SHEET 1.235 score IN_ACCORDANCE_WITH_LAWS 2.595 score IN_REP_TO -4.431 score JAVASCRIPT 1.712 score JAVASCRIPT_URI -1.607 score JODY 2.983 score KIFF 3.150 score KNOWN_BAD_DIALUPS 1.308 score LARGE_HEX 1.108 score LIMITED_TIME_ONLY 0.841 score LINES_OF_YELLING 0.453 score LINES_OF_YELLING_2 0.579 score LINES_OF_YELLING_3 -1.518 score LOTS_OF_CC_LINES 2.481 score MAILTO_LINK 0.044 score MAILTO_TO_REMOVE 1.341 score MAILTO_TO_SPAM_ADDR 1.275 score MAILTO_WITH_SUBJ -0.310 score MAILTO_WITH_SUBJ_REMOVE 1.864 score MAJORDOMO 1.296 score MANY_FROMS 4.409 score MASS_EMAIL 1.166 score MAY_BE_FORGED 1.341 score MDAEMON_2_7_4 1.900 score MICRO_CAP_WARNING 3.987 score MIME_NULL_BLOCK 0.157 score MISSING_HEADERS 0.932 score MONEY_BACK 1.489 score MONEY_MAKING 2.490 score MONSTERHUT 2.657 score MORTGAGE_RATES 4.405 score MSGID_HAS_NO_AT 1.273 score MSGID_SPAMSIGN_1 2.815 score MSG_ID_ADDED_BY_MTA 0.982 score MSG_ID_ADDED_BY_MTA_2 2.405 score MYCASINOBUILDER 3.870 score NEW_DOMAIN_EXTENSIONS 2.527 score NIGERIAN_SCAM_2 4.315 score NIGERIAN_SCAM_3 4.339 score NIGERIAN_SCAM_4 3.002 score NONEXISTENT_CHARSET 1.968 score NORMAL_HTTP_TO_IP 3.022 score NOT_INTENDED 1.782 score NO_CATCH 3.411 score NO_COST 1.036 score NO_DISSAPOINTMENT 1.466 score NO_EXPERIENCE -1.063 score NO_OBLIGATION 2.551 score NO_QS_ASKED -0.773 score NO_REAL_NAME 0.632 score NO_SELLING 3.816 score NUMERIC_HTTP_ADDR 2.417 score ONCE_IN_LIFETIME 0.562 score ONE_HUNDRED_PC_FREE 2.397 score ONE_HUNDRED_PC_GUAR 4.399 score ONE_TIME_MAILING 2.648 score OPPORTUNITY -1.010 score OPT_IN 2.100 score ORDER_STATUS 1.916 score PARA_A_2_C_OF_1618 2.129 score PENIS_ENLARGE2 3.676 score PENNIES_A_DAY 3.379 score PGP_SIGNATURE -2.095 score PLEASE_READ 0.985 score PLING 0.544 score PLING_PLING 0.390 score POPLAUNCH 3.633 score PORN_1 1.053 score PORN_10 0.066 score PORN_11 0.779 score PORN_12 0.626 score PORN_13 4.194 score PORN_3 0.605 score PORN_4 1.391 score PORN_6 2.519 score PORN_7 0.814 score PORN_8 -4.248 score PORN_9 2.192 score POST_IN_RCVD 3.476 score PREST_NON_ACCREDITED 4.210 score PRINT_FORM_SIGNATURE 1.862 score PRODUCED_AND_SENT_OUT 4.129 score PROFITS 0.460 score PURE_PROFIT 2.777 score RATWARE -0.703 score READ_TO_END 3.882 score REALLY_UNSAFE_JAVASCRIPT 3.295 score REAL_THING -0.148 score RELAYING_FRAME -0.584 score REMOVAL_INSTRUCTIONS 3.772 score REMOVE_IN_QUOTES 1.930 score REMOVE_PAGE 3.500 score REMOVE_SUBJ 2.345 score REPLY_REMOVE_SUBJECT 0.288 score REPLY_TO_EMPTY 4.335 score RESISTANCE_IS_FUTILE 4.948 score RISK_FREE 2.151 score SAFEGUARD_NOTICE 0.988 score SECTION_301 0.116 score SEE_FOR_YOURSELF 2.515 score SENT_IN_COMPLIANCE 1.744 score SERIOUS_ONLY 2.652 score SHORT_RECEIVED_LINE 1.805 score SIGNATURE_DELIM 0.753 score SLIGHTLY_UNSAFE_JAVASCRIPT -0.794 score SMTPD_IN_RCVD 1.260 score SOCIAL_SEC_NUMBER 2.305 score SPAM_FORM 3.243 score SPAM_FORM_RETURN 2.787 score STOCK_ALERT 3.696 score STOCK_PICK 2.671 score STRONG_BUY 3.838 score SUBJ_2_CREDIT 2.824 score SUBJ_ALL_CAPS 1.933 score SUBJ_ENDS_IN_Q_MARK -0.050 score SUBJ_FULL_OF_8BITS 3.136 score SUBJ_HAS_Q_MARK 1.021 score SUBJ_HAS_SPACES 2.741 score SUBJ_HAS_UNIQ_ID 2.037 score SUBJ_MISSING 2.428 score SUBJ_REMOVE 0.062 score SUPERLONG_LINE -0.374 score SUSPICIOUS_CC_RECIPS 2.496 score SUSPICIOUS_RECIPS -0.016 score S_1618 2.340 score TAKE_ACTION_NOW 2.257 score THE_FOLLOWING_FORM 1.707 score THIS_AINT_SPAM 1.474 score TONER 3.014 score TO_BE_REMOVED_REPLY -2.150 score TO_EMPTY 2.541 score TO_LOCALPART_EQ_REAL 0.597 score TO_MALFORMED 0.331 score TO_NO_USER 1.928 score TO_UNSUB_REPLY -1.996 score TRACE_BY_SSN 2.013 score TRACKER_ID -4.215 score UCE_MAIL_ACT 1.640 score UNDISC_RECIPS 1.164 score UNIVERSITY_DIPLOMAS 2.715 score UNNEEDED_HTML_ENCODING 2.183 score UNSUB_PAGE 3.529 score UNSUB_SCRIPT 0.420 score URGENT_BIZ 2.586 score URI_IS_POUND 0.869 score US_DOLLARS 2.429 score US_DOLLARS_2 0.198 score US_DOLLARS_3 2.695 score VERY_SUSP_CC_RECIPS 1.572 score VERY_SUSP_RECIPS 2.436 score VIAGRA 2.383 score VJESTIKA 2.807 score WANTS_CREDIT_CARD 1.532 score WEB_BUGS -0.823 score WEIRD_PORT 0.054 score WE_HATE_SPAM 3.024 score WE_HONOR_ALL 4.536 score WORK_AT_HOME 0.365 score WWW_DIRECTFORCEMARKETING_COM 1.986 score WWW_NETSITESFORFREE_NET 1.930 score WWW_REMOVEYOU_COM 1.975 score X_EM_VER_PRESENT 0.832 score X_MAILER_GIBBERISH 0.905 score X_MSMAIL_PRIORITY_HIGH -1.356 score X_PMFLAGS_PRESENT 2.783 score X_PRIORITY_HIGH 1.658 score YAHOO_MSGID_ADDED 0.827 score YELLOWSUN 1.783 score YOUR_INCOME 3.781 score YOU_HAVE_BEEN_SELECTED 2.606 # End of GA-evolved scores. # some non-GA-generated scores: either network tests, occuring with # very low frequency, or very frequently causing false positives. score INVALID_DATE_NO_TZ 2.0 score FORGED_RCVD_FOUND 0.5 score BUGGY_CGI_PT 4.0 score BUGGY_CGI_DE 4.0 score BUGGY_CGI_DE_2 4.0 score BUGGY_CGI_DE_3 4.0 score FROM_FORGED_HOTMAIL 0.0 score NO_MX_FOR_FROM 1.8 score RAZOR_CHECK 3.0 score RCVD_IN_RELAYS_ORDB_ORG 2.0 score RCVD_IN_OSIRUSOFT_COM 2.0 score X_OSIRU_SPAM_SRC 3.0 score X_OSIRU_SPAMWARE_SITE 5.0 score ROUND_THE_WORLD 3.0 score RCVD_IN_RFCI 0.5 score RCVD_IN_ORBS 1.0 #score RCVD_IN_ORBZ 1.0 # unscored by default -- commercial services. If you pay for these, # give them a score so they will be checked. score RCVD_IN_RBL 0.0 score RCVD_IN_RSS 0.0 score RCVD_IN_DUL 0.0 score RCVD_IN_BL_SPAMCOP_NET 0.0 ########################################################################### # Compensation for common false positives. score BALANCE_FOR_LONG -2.0 score UNIFIED_PATCH -5.0 score DIFF_C_PATCH -5.0 score MAILMAN_CONFIRM -4.0 score EVITE -5.0 # We never change the whitelist/blacklist scores score USER_IN_BLACKLIST 10.0 score USER_IN_WHITELIST -100.0 # Not really false positives but the user wants spam! score USER_IN_WHITELIST_TO -6.0 # they want some spam score USER_IN_MORE_SPAM_TO -20.0 # they want more spam score USER_IN_ALL_SPAM_TO -100.0 # they want all spam, go figure :) ########################################################################### # Missed scores: score 25FREEMEGS_URL 2.7 score ANOTHER_NET_AD 3.0 score A_HREF_TO_IP 2.5 score BRAND_NEW_PAGER 4.9 score BUGGY_CGI_ES 1.0 score BUGGY_CGI_ES_2 1.0 score CHARSET_FARAWAY_BODY 2.1 score CLICKSFORMONEY_NET 2.5 score CLICK_TO_REMOVE_MAILTO 1.0 score CYBER_FIRE_POWER 3.5 score EGP_HTML_BANNER -6.0 score EMAIL_HARVEST 1.0 score EU_200_32_CE 1.0 score EU_EMAIL_OPTOUT 1.8 score EXCUSE_18 1.0 score EXCUSE_5 1.8 score EXCUSE_8 4.4 score EXCUSE_9 1.0 score EXCUSE_ES_01 1.0 score EXCUSE_ES_02 1.0 score EXCUSE_ES_03 1.0 score E_WEBHOSTCENTRAL_URL 4.6 score FREEWEBCO_NET_URL 1.1 score FREEWEBHOSTINGCENTRAL 1.6 score FREQ_SPAM_PHRASE 0.0 score FROM_UGETMORE 1.0 score HTTP_CTRL_CHARS_HOST 1.4 score HUNZA_DIET_BREAD 0.0 score INTERNET_TERROR_RANT 1.0 score ITS_EFFECTIVE 1.0 score JUST_MAILED_PAGE 0.2 score LASER_PRINTER 3.9 score LONG_NUMERIC_HTTP_ADDR 2.1 score MAIL_IN_ORDER_FORM 4.8 score MURKOWSKI_CRUFT 1.4 score NIGERIAN_SCAM 1.0 score NIGERIAN_SCAM_5 1.0 score ONLINE_BIZ_OPS 1.0 score PENIS_ENLARGE 1.5 score PORN_2 2.2 score PRINT_OUT_AND_FAX 1.0 score Q_FOR_SELLER 1.0 score RCVD_IN_VISI 1.0 score REMOVE_ES_01 1.0 score REMOVE_ES_02 1.0 score REMOVE_ES_03 1.0 score REMOVE_ES_04 1.0 score SEXY_PICS 0.0 score SHOES_GUY 6.8 score SPAM_FORM_INPUT 1.0 score SPAM_PHRASES_020 0.0 score SPAM_PHRASES_040 0.0 score SPAM_PHRASES_100 0.0 score STAINLESS_STEEL 4.0 score TO_INVESTORS 0.0 score WEB4PORNO_URL 5.0 score WWW_AUTOREMOVE_COM 1.9 score WWW_CLIK4YOU_COM 1.0 score WWW_TRAFFICWOW_NET 1.0 score X_UIDL_SPAMSIGN 1.0 score YR_MEMBERSHIP_EXCH 4.2