| 1 |
don |
2 |
# Rules against generally dubious things that aren't supposed to be |
| 2 |
|
|
# valid mails to the BTS |
| 3 |
|
|
|
| 4 |
|
|
# joy, 2003-04-08 |
| 5 |
|
|
# bug in old spamassassins |
| 6 |
|
|
score HTML_WEB_BUGS 4 |
| 7 |
|
|
|
| 8 |
|
|
# cjwatson, 2002/04/03 |
| 9 |
|
|
# joy, 2003-04-12, 2003-04-19 |
| 10 |
|
|
# cjwatson upgraded to 2.53, 2003/04/23 |
| 11 |
|
|
# several of the following were suggested by Santiago Vila |
| 12 |
|
|
|
| 13 |
|
|
# adding 3 points to defaults as of 2.53 |
| 14 |
|
|
score MIME_HTML_ONLY 3.100 |
| 15 |
|
|
score HTML_MESSAGE 1.667 1.600 1.666 1.5 |
| 16 |
|
|
|
| 17 |
|
|
score HTTP_EXCESSIVE_ESCAPES 3.101 3.500 3.259 4.060 |
| 18 |
|
|
score TO_MALFORMED 3.146 3.085 3.697 3.803 |
| 19 |
|
|
score BAD_CREDIT 2.787 2.716 2.535 2.491 |
| 20 |
|
|
score MISSING_MIMEOLE 2.500 2.500 2.437 2.100 |
| 21 |
|
|
score CLICK_BELOW_CAPS 2.500 2.500 2.100 2.500 |
| 22 |
|
|
|
| 23 |
|
|
# adding 1 point to defaults as of 2.53 |
| 24 |
|
|
score X_PRIORITY_HIGH 2.919 2.989 1.815 2.873 |
| 25 |
|
|
score MANY_EXCLAMATIONS 2.097 1.782 2.216 2.094 |
| 26 |
|
|
score NORMAL_HTTP_TO_IP 1.942 1.531 1.524 1.926 |
| 27 |
|
|
score X_MSMAIL_PRIORITY_HIGH 1.404 1 1 1.021 |
| 28 |
|
|
score FROM_HAS_MIXED_NUMS 1 1 1.339 1 |
| 29 |
|
|
score HTML_FONT_BIG 1.294 1.136 1.262 1.293 |
| 30 |
|
|
score SUB_FREE_OFFER 1.339 1.488 1.224 1.383 |
| 31 |
|
|
score UPPERCASE_75_100 1 |
| 32 |
|
|
score UPPERCASE_50_75 1.840 1 1.334 1.478 |
| 33 |
|
|
score UPPERCASE_25_50 2.555 2.132 1.860 1.584 |
| 34 |
|
|
score REMOVE_PAGE 1.318 1.100 1.365 1.303 |
| 35 |
|
|
score MIME_BOUND_NEXTPART 1.427 1.361 1.376 1.307 |
| 36 |
|
|
score DEAR_SOMETHING 3.596 3.596 2.806 2.803 |
| 37 |
|
|
score HTML_TITLE_UNTITLED 1.386 1.423 1.501 1.0 |
| 38 |
|
|
# these get +1 just on the merit of being fsckin' HTML in email |
| 39 |
|
|
score HTML_10_20 0.996 1.030 1.303 1.036 |
| 40 |
|
|
score HTML_20_30 1.287 1.104 1.293 1.571 |
| 41 |
|
|
score HTML_30_40 1.708 1.834 1.344 1.658 |
| 42 |
|
|
score HTML_40_50 2.058 1.747 1.814 1.428 |
| 43 |
|
|
score HTML_50_60 1.551 1.212 1.532 1.100 |
| 44 |
|
|
score HTML_60_70 1.518 1.121 1.100 1.100 |
| 45 |
|
|
score HTML_70_80 1.682 1.379 1.310 1.254 |
| 46 |
|
|
score HTML_80_90 1.406 1.483 1.163 1.166 |
| 47 |
|
|
score HTML_90_100 1.500 1 1 1 |
| 48 |
|
|
|
| 49 |
|
|
# and these get 1 point for being pr0n |
| 50 |
|
|
score PORN_16 3.896 3.896 3.166 3.799 |
| 51 |
|
|
score PORN_15 3.900 3.900 2.666 3.900 |
| 52 |
|
|
score AMATEUR_PORN 2.110 3.748 2.654 1.142 |
| 53 |
|
|
|
| 54 |
|
|
# adding 0.5 points to defaults as of 2.53 |
| 55 |
|
|
score FROM_ENDS_IN_NUMS 1.111 1.219 1.080 1.175 |
| 56 |
|
|
score NO_REAL_NAME 1.6 |
| 57 |
|
|
|
| 58 |
|
|
# normal mails which have debbugs-derived Subject fields have space, |
| 59 |
|
|
# the 2.44 default of 2.639 is too much |
| 60 |
|
|
# the 2.53 default is 2.425 2.026 1.101 2.329 |
| 61 |
|
|
score SUBJ_HAS_SPACES 1.5 |
| 62 |
|
|
|
| 63 |
|
|
# trust Razor2 more, --joy 2003-07-20 |
| 64 |
|
|
# blarson 2006-10-29 rescore again |
| 65 |
|
|
score RAZOR2_CHECK 1.5 |
| 66 |
|
|
# blarson 2006-02-09 |
| 67 |
|
|
score RAZOR2_CF_RANGE_51_100 3 |
| 68 |
|
|
|
| 69 |
|
|
# causes too many false positives since default 4.3 > required 4.0 |
| 70 |
|
|
# blarson, 2004-04-11 |
| 71 |
|
|
score SORTED_RECIPS 1 |
| 72 |
|
|
score SUSPICIOUS_RECIPS 0.5 |
| 73 |
|
|
# blarson 2005-11-01 |
| 74 |
|
|
score USERPASS 1 |
| 75 |
|
|
|
| 76 |
|
|
# blarson 2006-11-13 drop score, many non-spams hit |
| 77 |
|
|
score FORGED_YAHOO_RCVD 1 |
| 78 |
|
|
|
| 79 |
|
|
# blarson 2004-03-20 |
| 80 |
|
|
# Disable most DNSBLs -- overhead to high |
| 81 |
|
|
# blarson 2005-01-28 try reducing timeout while adding spamcop back |
| 82 |
|
|
# blarson 2005-10-29 adding some back now we are multi-threaded |
| 83 |
|
|
score RCVD_IN_BL_SPAMCOP_NET 1 |
| 84 |
|
|
score RCVD_IN_BSP_OTHER 0 |
| 85 |
|
|
score RCVD_IN_BSP_TRUSTED 0 |
| 86 |
|
|
score RCVD_IN_DSBL 2 |
| 87 |
|
|
score RCVD_IN_NJABL_CGI 0 |
| 88 |
|
|
score RCVD_IN_NJABL_MULTI 0 |
| 89 |
|
|
score RCVD_IN_NJABL_PROXY 0 |
| 90 |
|
|
score RCVD_IN_NJABL_RELAY 0 |
| 91 |
|
|
score RCVD_IN_NJABL_SPAM 0 |
| 92 |
don |
8 |
|
| 93 |
|
|
# ?? score RCVD_IN_RFCI 0.5 |
| 94 |
don |
2 |
# SBL done below |
| 95 |
|
|
score RCVD_IN_SBL 0 |
| 96 |
|
|
# blarson 2006-01-06 SORBS up to 1 |
| 97 |
don |
8 |
# ?? score RCVD_IN_SORBS 1 |
| 98 |
don |
2 |
score RCVD_IN_SORBS_BLOCK 0.1 |
| 99 |
|
|
score RCVD_IN_SORBS_HTTP 0.1 |
| 100 |
|
|
score RCVD_IN_SORBS_MISC 0.1 |
| 101 |
|
|
score RCVD_IN_SORBS_SMTP 0.1 |
| 102 |
|
|
score RCVD_IN_SORBS_SOCKS 0.1 |
| 103 |
|
|
score RCVD_IN_SORBS_WEB 0.1 |
| 104 |
|
|
score RCVD_IN_SORBS_ZOMBIE 0.1 |
| 105 |
|
|
|
| 106 |
|
|
# blarson 2004-11-16 |
| 107 |
|
|
# other network checks -- also disable |
| 108 |
|
|
# blarson 2005-10-29 enable again |
| 109 |
|
|
score NO_DNS_FOR_FROM 1 |
| 110 |
|
|
score ROUND_THE_WORLD 0 |
| 111 |
|
|
|
| 112 |
|
|
# blarson, 2004-04-14 |
| 113 |
|
|
score BIZ_TLD 2.5 |
| 114 |
|
|
|
| 115 |
|
|
# blarson 2004-04-25 |
| 116 |
|
|
score REMOVE_PAGE 2.5 |
| 117 |
|
|
|
| 118 |
|
|
# blarson 2004-11-08 |
| 119 |
|
|
# claiming to be amazon... |
| 120 |
|
|
score USER_IN_DEF_WHITELIST 0.5 |