# SpamAssassin rules file: scores. # ########################################################################### # Default scores. Note that if a test is named in the files, but a score is # not assigned here, the default score will be set to 1. # The following block of scores were generating using the mass-checking # scripts, and a genetic algorithm, to determine the optimum scores which # resulted in minimum false positives or negatives. The default evolution # parameters are very strongly weighted against false positives. # SUMMARY: 562 / 1510 # # Correctly non-spam: 209798 99.73% (81.57% overall) # Correctly spam: 45315 96.78% (17.62% overall) # False positives: 562 0.27% (0.22% overall, 13206 adjusted) # False negatives: 1510 3.22% (0.59% overall, 2739 adjusted) # Average score for spam: 17.7 nonspam: -6.1 # Average for false-pos: 7.0 false-neg: 1.8 # TOTAL: 257185 100.00% # score 25FREEMEGS_URL -4.606 score ADDRESSES_ON_CD 4.624 score ADVERT_CODE 0.721 score ALL_CAPS_SUBJECT 0.203 score AMAZING 3.875 score ANOTHER_NET_AD 4.944 score AOL_USERS_LINK 0.851 score ASCII_FORM_ENTRY 3.376 score ASKS_BILLING_ADDRESS 1.184 score AUTO_EMAIL_REMOVAL 5.370 score A_HREF_TO_OPT_OUT 6.675 score A_HREF_TO_REMOVE 6.546 score A_HREF_TO_UNSUB 4.102 score BAD_HELO_WARNING 2.163 score BASE64_ENC_TEXT 4.078 score BE_AMAZED -4.581 score BILLION_DOLLARS 4.249 score BILL_1618 2.556 score BUGGY_CGI 6.907 score BULK_EMAIL 1.117 score CALL_FREE 1.565 score CALL_NOW 3.540 score CASHCASHCASH -3.700 score CASINO 1.635 score CBYI 1.008 score CHARSET_FARAWAY_HEADERS 0.795 score CHECK_OR_MONEY_ORDER 3.668 score CLICKSFORMONEY_NET 3.226 score CLICK_BELOW 2.026 score CLICK_HERE_LINK 1.961 score CLICK_TO_REMOVE_2 6.151 score COMMUNIGATE 3.580 score COPYRIGHT_CLAIMED -3.058 score COPY_DVDS 6.301 score CORRUPT_MSGID 2.207 score CTYPE_JUST_HTML 4.235 score CYBER_FIRE_POWER -4.020 score DATE_IN_FUTURE 0.663 score DATE_MISSING 1.281 score DEAR_FRIEND 7.233 score DEAR_SOMEBODY -4.412 score DIFFERENT_REPLY_TO 4.067 score DIRECT_EMAIL -0.338 score EARN_PER_WEEK 7.273 score EGP_HTML_BANNER -4.894 score EMAIL_MARKETING 2.788 score EXCUSE_1 1.332 score EXCUSE_10 -1.408 score EXCUSE_12 1.195 score EXCUSE_13 7.484 score EXCUSE_14 0.516 score EXCUSE_15 5.490 score EXCUSE_16 1.216 score EXCUSE_17 0.315 score EXCUSE_2 2.221 score EXCUSE_3 2.615 score EXCUSE_4 6.866 score EXCUSE_5 13.447 score EXCUSE_6 -1.394 score EXCUSE_7 7.370 score EXCUSE_8 2.989 score E_WEBHOSTCENTRAL_URL 0.849 score FAKED_IP_IN_RCVD 9.924 score FAKED_UNDISC_RECIPS 3.937 score FILTERED_BY_WORLDREMOVE -0.096 score FORGED_EUDORAMAIL_RCVD 3.049 score FORGED_GW05_RCVD 3.360 score FORGED_HOTMAIL_RCVD 0.577 score FORGED_YAHOO_RCVD 1.150 score FORM_W_MAILTO_ACTION 2.555 score FOR_FREE 2.089 score FOR_INSTANT_ACCESS 4.069 score FOR_JUST_SOME_AMT 0.341 score FREEWEBCO_NET_URL 1.376 score FREEWEBHOSTINGCENTRAL 5.340 score FREE_CONSULTATION 15.263 score FREE_PRIORITY_MAIL 4.382 score FRIEND_AT_PUBLIC 3.100 score FROM_AND_TO_SAME 0.606 score FROM_BTAMAIL 6.013 score FROM_ENDS_IN_NUMS 1.088 score FROM_HAS_MIXED_NUMS 2.343 score FROM_MALFORMED 0.405 score FROM_MISSING 3.760 score FROM_NAME_EQ_FROM_ADDR 4.328 score FROM_NO_USER 3.587 score FULL_REFUND 3.370 score GAPPY_SUBJECT 5.098 score GAPPY_TEXT -3.667 score GENTLE_FEROCITY 1.962 score GREAT_OFFER 1.982 score GREEN_EXCUSE_1 6.456 score GREEN_EXCUSE_2 0.232 score GUARANTEE 4.370 score HOME_EMPLOYMENT 2.644 score HR_3113 3.762 score HTML_WITH_BGCOLOR 0.759 score HTTP_CTRL_CHARS_HOST 2.138 score HTTP_ESCAPED_HOST 3.321 score HTTP_NUMBER_WORD -0.102 score HTTP_USERNAME_USED -1.038 score HTTP_WITH_EMAIL_IN_URL 2.035 score INCREASE_SALES 2.052 score INCREASE_TRAFFIC 4.005 score INTL_EXEC_GUILD 1.222 score INVALID_DATE 3.899 score INVALID_DATE_ODD_MONTH 2.379 score INVALID_DATE_TZ_ABSURD 2.294 score INVALID_MSGID 1.461 score INVESTOR_SPEC_SHEET 2.717 score IN_ACCORDANCE_WITH_LAWS -1.971 score IN_REP_TO -13.472 score JAVASCRIPT 1.005 score JODY 6.557 score KIFF 4.568 score KNOWN_BAD_DIALUPS 0.923 score LARGE_HEX -5.894 score LIMITED_TIME_ONLY 3.856 score LINE_OF_YELLING 5.442 score LONG_NUMERIC_HTTP_ADDR 1.754 score LOTS_OF_CC_LINES -1.648 score MAILTO_LINK -0.515 score MAILTO_TO_REMOVE -1.082 score MAILTO_TO_SPAM_ADDR 1.332 score MAILTO_WITH_SUBJ 2.560 score MAILTO_WITH_SUBJ_REMOVE -3.661 score MAIL_IN_ORDER_FORM 9.412 score MANY_FROMS 2.968 score MASS_EMAIL 0.221 score MAY_BE_FORGED 0.210 score MDAEMON_2_7_4 2.967 score MICRO_CAP_WARNING 5.685 score MIME_NULL_BLOCK -3.585 score MISSING_HEADERS 2.625 score MONEY_MAKING 2.127 score MONSTERHUT -8.280 score MORTGAGE_RATES 11.322 score MSGID_HAS_NO_AT -0.727 score MSGID_SPAMSIGN_1 6.140 score MSG_ID_ADDED_BY_MTA 0.670 score MSG_ID_ADDED_BY_MTA_2 0.422 score MURKOWSKI_CRUFT 4.785 score MYCASINOBUILDER 8.238 score NEW_DOMAIN_EXTENSIONS 4.747 score NIGERIAN_SCAM_2 7.050 score NONEXISTENT_CHARSET 7.198 score NORMAL_HTTP_TO_IP 3.117 score NO_QS_ASKED 4.985 score NO_REAL_NAME 0.656 score NUMERIC_HTTP_ADDR 1.746 score ONCE_IN_LIFETIME -4.604 score ONE_HUNDRED_PC_FREE 2.115 score ONE_HUNDRED_PC_GUAR 1.051 score ONE_TIME_MAILING 3.595 score OPPORTUNITY 0.531 score OPT_IN 1.573 score ORDER_STATUS -0.744 score PARA_A_2_C_OF_1618 12.818 score PENIS_ENLARGE 0.584 score PENIS_ENLARGE2 1.562 score PENNIES_A_DAY 7.616 score PGP_SIGNATURE -13.402 score PLING 0.814 score PLING_PLING -0.337 score POPLAUNCH 7.352 score PORN_1 21.701 score PORN_3 -0.888 score PORN_4 -0.055 score PORN_6 -0.736 score PORN_7 1.968 score PORN_8 -5.452 score POST_IN_RCVD 4.423 score PREST_NON_ACCREDITED -0.222 score PRINT_FORM_SIGNATURE 0.421 score PRODUCED_AND_SENT_OUT 9.388 score PROFITS -1.962 score PURE_PROFIT 4.547 score RATWARE 2.756 score REALLY_UNSAFE_JAVASCRIPT 1.435 score RELAYING_FRAME 6.059 score REMOVAL_INSTRUCTIONS 4.184 score REMOVE_IN_QUOTES 3.863 score REMOVE_PAGE 4.871 score REMOVE_SCRIPT 4.854 score REMOVE_SUBJ 4.566 score REPLY_REMOVE_SUBJECT 2.929 score REPLY_TO_EMPTY 4.212 score RESISTANCE_IS_FUTILE 8.868 score SAFEGUARD_NOTICE 4.152 score SECTION_301 -0.355 score SENT_IN_COMPLIANCE -1.484 score SHOES_GUY 7.150 score SHORT_RECEIVED_LINE 3.317 score SLIGHTLY_UNSAFE_JAVASCRIPT -0.429 score SMTPD_IN_RCVD 0.642 score SOCIAL_SEC_NUMBER 4.204 score SPAM_FORM 2.151 score SPAM_FORM_RETURN 10.322 score STOCK_ALERT 3.936 score STOCK_PICK 0.661 score STRONG_BUY 5.412 score SUBJ_2_CREDIT 10.854 score SUBJ_ALL_CAPS 1.873 score SUBJ_ENDS_IN_Q_MARK 0.462 score SUBJ_FULL_OF_8BITS 6.071 score SUBJ_HAS_Q_MARK 1.395 score SUBJ_HAS_SPACES 2.966 score SUBJ_HAS_UNIQ_ID 1.649 score SUBJ_REMOVE 0.402 score SUPERLONG_LINE 0.621 score SUSPICIOUS_CC_RECIPS 0.972 score SUSPICIOUS_RECIPS 0.877 score S_1618 3.344 score TAKE_ACTION_NOW 8.413 score THE_FOLLOWING_FORM 2.773 score THIS_AINT_SPAM -2.449 score TONER 4.990 score TO_BE_REMOVED_REPLY -1.987 score TO_EMPTY 4.520 score TO_MALFORMED 0.238 score TO_NO_USER -0.032 score TO_UNSUB_REPLY -2.290 score TRACE_BY_SSN 0.367 score TRACKER_ID -4.899 score UCE_MAIL_ACT 6.464 score UNDISC_RECIPS -1.836 score UNIVERSITY_DIPLOMAS 0.447 score UNSUB_PAGE 10.767 score UNSUB_SCRIPT 9.686 score US_DOLLARS 3.339 score VERY_SUSP_CC_RECIPS 1.919 score VERY_SUSP_RECIPS 0.928 score VIAGRA 4.259 score VJESTIKA 6.002 score WANTS_CREDIT_CARD 0.378 score WEB4PORNO_URL 8.232 score WEB_BUGS 1.005 score WE_HATE_SPAM 4.295 score WE_HONOR_ALL 9.424 score WORK_AT_HOME 0.141 score WWW_NETSITESFORFREE_NET 2.021 score WWW_REMOVEYOU_COM 3.799 score X_EM_VER_PRESENT 0.285 score X_MAILER_GIBBERISH 4.369 score X_MSMAIL_PRIORITY_HIGH -2.831 score X_PMFLAGS_PRESENT 10.248 score X_PRIORITY_HIGH 0.418 score YAHOO_MSGID_ADDED 3.030 score YELLOWSUN 1.498 score YOUR_INCOME 2.742 score YOU_HAVE_BEEN_SELECTED 2.861 score YR_MEMBERSHIP_EXCH 8.826 # End of GA-evolved scores. # some non-GA-generated scores: either network tests, occuring with # very low frequency, or very frequently causing false positives. score INVALID_DATE_NO_TZ 2.0 score FORGED_RCVD_FOUND 0.5 score BUGGY_CGI_PT 4.0 score BUGGY_CGI_DE 4.0 score BUGGY_CGI_DE_2 4.0 score BUGGY_CGI_DE_3 4.0 score FROM_FORGED_HOTMAIL 0.0 score NO_MX_FOR_FROM 1.8 score RAZOR_CHECK 3.0 score RCVD_IN_RELAYS_ORDB_ORG 2.0 score RCVD_IN_OSIRUSOFT_COM 2.0 score X_OSIRU_SPAM_SRC 3.0 score X_OSIRU_SPAMWARE_SITE 5.0 score ROUND_THE_WORLD 3.0 score RCVD_IN_RFCI 0.5 score RCVD_IN_ORBS 1.0 score RCVD_IN_ORBZ 1.0 # unscored by default -- commercial services. If you pay for these, # give them a score so they will be checked. score RCVD_IN_RBL 0.0 score RCVD_IN_RSS 0.0 score RCVD_IN_DUL 0.0 score RCVD_IN_BL_SPAMCOP_NET 0.0 ########################################################################### # Compensation for common false positives. score BALANCE_FOR_LONG -2.0 score UNIFIED_PATCH -5.0 score DIFF_C_PATCH -5.0 score MAILMAN_CONFIRM -4.0 score EVITE -5.0 # We never change the whitelist/blacklist scores score USER_IN_BLACKLIST 10.0 score USER_IN_WHITELIST -100.0 # Not really false positives but the user wants spam! score USER_IN_WHITELIST_TO -6.0 # they want some spam score USER_IN_MORE_SPAM_TO -20.0 # they want more spam score USER_IN_ALL_SPAM_TO -100.0 # they want all spam, go figure :) ########################################################################### # Some not-quite-spam scores; block common virii with these. (it's feature # creep, but it's easy to implement ;) score SIRCAM_SIGNATURE 10.0 score BADTRANS_WORM 10.0 # Missed scores: score A_HREF_TO_IP 2.5 score BRAND_NEW_PAGER 4.9 score BUGGY_CGI_ES 1.0 score BUGGY_CGI_ES_2 1.0 score CHARSET_FARAWAY 0.8 score CHARSET_FARAWAY_BODY 2.1 score CLICK_TO_REMOVE_MAILTO 1.0 score EMAIL_HARVEST 1.0 score EU_200_32_CE 1.0 score EU_EMAIL_OPTOUT 1.8 score EXCUSE_11 1.0 score EXCUSE_18 1.0 score EXCUSE_9 1.0 score FREQ_SPAM_PHRASE 0.0 score FROM_UGETMORE 1.0 score HUNZA_DIET_BREAD 0.0 score INTERNET_TERROR_RANT 1.0 score ITS_EFFECTIVE 1.0 score JUST_MAILED_PAGE 0.2 score LASER_PRINTER 3.9 score NIGERIAN_SCAM 1.0 score NO_SELLING 1.0 score ONLINE_BIZ_OPS 1.0 score PORN_2 2.2 score PRINT_OUT_AND_FAX 1.0 score Q_FOR_SELLER 1.0 score RCVD_IN_VISI 1.0 score SEXY_PICS 0.0 score SPAM_FORM_INPUT 1.0 score SPAM_PHRASES_020 0.0 score SPAM_PHRASES_030 0.0 score SPAM_PHRASES_100 0.0 score TO_INVESTORS 0.0 score UNNEEDED_HTML_ENCODING 1.0 score URGENT_BIZ 1.0 score WWW_AUTOREMOVE_COM 1.9 score WWW_CLIK4YOU_COM 1.0 score WWW_DIRECTFORCEMARKETING_COM 1.0 score WWW_TRAFFICWOW_NET 1.0 score X_UIDL_SPAMSIGN 1.0