SpamAssassin Stuff
Installed Version: 3.3.1
Option Definitions
<html> <!– yes, it's that Mozilla black-border code again ;) –> <!– stolen from www.mozilla.org via rc3.org –>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td bgcolor="#808080">
<table border="0" cellspacing="4" cellpadding="4" width="100%">
<tr>
<td bgcolor="#ffffff">
<table border="0" cellspacing="4" cellpadding="4" width="100%">
<tr>
<td>
<p>
<a name="title" id="title"><h1>Tests Performed: v3.3.x</h1></a><p>
This is the current list of tests SpamAssassin performs on mail messages to
determine if they're spam or not. If you wish to <b>change the score</b> from the
default, add a line like this to your <code>~/.spamassassin/user_prefs</code>:
</p>
<blockquote>
<code>score NAME_OF_TEST 3.0</code>
</blockquote>
<p>
Where <code>3.0</code> is the hits you wish that test to incur, and <code>NAME_OF_TEST</code> is
the test name from the <strong>TEST NAME</strong> column below.
</p>
<p>
If you wish to <b>disable a test</b>, set the score to 0 by adding a line like
this to your <code>~/.spamassassin/user_prefs</code>:
</p>
<blockquote>
<code>score NAME_OF_TEST 0</code>
</blockquote>
<p>
Note that these are the scores for the current stable release of SpamAssassin;
they may be different from the ones you're running on your servers, if SpamAssassin
is installed there.
</p>
<p>
The 'More Info' links, if present, lead to a section of our Wiki for collaborative
documentation of rules; some of the rules include additional user-contributed
documentation there. If you feel like adding a page describing a rule in
further detail, feel free to create a page at that link, using the <a href="http://wiki.apache.org/spamassassin/RuleDescriptionTemplate">RuleDescriptionTemplate</a> format.
</p>
<table>
<tr bgcolor="#99ff99">
<th>
AREA TESTED
</th>
<th>
LOCALE
</th>
<th>
DESCRIPTION OF TEST
</th>
<th>
TEST NAME
</th>
<th>
DEFAULT SCORES<br />
<i>(local, net, with bayes, with bayes+net)</i>
</th>
<th>
MORE INFO<br />
<i>(additional wiki docs)
</th>
</tr>
</p>
<br />
<!--etsafe-->
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Generic Test for Unsolicited Bulk Email
</font>
</td>
<td>
<font size="-1">
GTUBE
</font>
</td>
<td>
1000.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/GTUBE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Incorporates a tracking ID number
</font>
</td>
<td>
<font size="-1">
TRACKER_ID
</font>
</td>
<td>
2.026 1.102 1.750 1.306
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TRACKER_ID">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Weird repeated double-quotation marks
</font>
</td>
<td>
<font size="-1">
WEIRD_QUOTING
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/WEIRD_QUOTING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Body contains a ROT13-encoded email address
</font>
</td>
<td>
<font size="-1">
EMAIL_ROT13
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EMAIL_ROT13">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML and text parts are different
</font>
</td>
<td>
<font size="-1">
MPART_ALT_DIFF
</font>
</td>
<td>
2.246 0.724 0.595 0.790
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MPART_ALT_DIFF">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML and text parts are different
</font>
</td>
<td>
<font size="-1">
MPART_ALT_DIFF_COUNT
</font>
</td>
<td>
2.799 1.483 1.199 1.112
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MPART_ALT_DIFF_COUNT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message body has 80-90% blank lines
</font>
</td>
<td>
<font size="-1">
BLANK_LINES_80_90
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BLANK_LINES_80_90">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_ma_non_text()
</font>
</td>
<td>
<font size="-1">
MULTIPART_ALT_NON_TEXT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MULTIPART_ALT_NON_TEXT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Character set indicates a foreign language
</font>
</td>
<td>
<font size="-1">
CHARSET_FARAWAY
</font>
</td>
<td>
3.200
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/CHARSET_FARAWAY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Extra blank lines in base64 encoding
</font>
</td>
<td>
<font size="-1">
MIME_BASE64_BLANKS
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BASE64_BLANKS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message text disguised using base64 encoding
</font>
</td>
<td>
<font size="-1">
MIME_BASE64_TEXT
</font>
</td>
<td>
0.001 0.001 0.001 1.741
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BASE64_TEXT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Missing blank line between MIME header and body
</font>
</td>
<td>
<font size="-1">
MISSING_MIME_HB_SEP
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MISSING_MIME_HB_SEP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Multipart message mostly text/html MIME
</font>
</td>
<td>
<font size="-1">
MIME_HTML_MOSTLY
</font>
</td>
<td>
0.354 0.001 0.725 0.428
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_HTML_MOSTLY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message only has text/html MIME parts
</font>
</td>
<td>
<font size="-1">
MIME_HTML_ONLY
</font>
</td>
<td>
2.199 1.105 1.199 0.723
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_HTML_ONLY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Quoted-printable line longer than 76 chars
</font>
</td>
<td>
<font size="-1">
MIME_QP_LONG_LINE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_QP_LONG_LINE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
MIME character set is an unknown ISO charset
</font>
</td>
<td>
<font size="-1">
MIME_BAD_ISO_CHARSET
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BAD_ISO_CHARSET">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IP to HTTPS link found in HTML
</font>
</td>
<td>
<font size="-1">
HTTPS_IP_MISMATCH
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTTPS_IP_MISMATCH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message contained a URI which was truncated
</font>
</td>
<td>
<font size="-1">
URI_TRUNCATED
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_TRUNCATED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Passed through trusted hosts only via SMTP
</font>
</td>
<td>
<font size="-1">
ALL_TRUSTED
</font>
</td>
<td>
-1.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ALL_TRUSTED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Informational: message was not relayed via SMTP
</font>
</td>
<td>
<font size="-1">
NO_RELAYS
</font>
</td>
<td>
-0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NO_RELAYS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
NJABL: sender is confirmed open relay
</font>
</td>
<td>
<font size="-1">
RCVD_IN_NJABL_RELAY
</font>
</td>
<td>
0 1.881 0 2.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_NJABL_RELAY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
NJABL: sender is confirmed spam source
</font>
</td>
<td>
<font size="-1">
RCVD_IN_NJABL_SPAM
</font>
</td>
<td>
0 1.466 0 1.249
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_NJABL_SPAM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
NJABL: sent through multi-stage open relay
</font>
</td>
<td>
<font size="-1">
RCVD_IN_NJABL_MULTI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_NJABL_MULTI">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
NJABL: sender is an open formmail
</font>
</td>
<td>
<font size="-1">
RCVD_IN_NJABL_CGI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_NJABL_CGI">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
NJABL: sender is an open proxy
</font>
</td>
<td>
<font size="-1">
RCVD_IN_NJABL_PROXY
</font>
</td>
<td>
0 0.208 0 2.224
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_NJABL_PROXY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is open HTTP proxy server
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_HTTP
</font>
</td>
<td>
0 2.499 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_HTTP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is open SOCKS proxy server
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_SOCKS
</font>
</td>
<td>
0 2.443 0 1.927
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_SOCKS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is open proxy server
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_MISC
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_MISC">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is open SMTP relay
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_SMTP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_SMTP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is an abusable web server
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_WEB
</font>
</td>
<td>
0 0.614 0 0.770
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_WEB">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender demands to never be tested
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_BLOCK
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_BLOCK">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sender is on a hijacked network
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_ZOMBIE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_ZOMBIE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SORBS: sent directly from dynamic IP address
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SORBS_DUL
</font>
</td>
<td>
0 0.001 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_DUL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in Spamhaus SBL
</font>
</td>
<td>
<font size="-1">
RCVD_IN_SBL
</font>
</td>
<td>
0 2.596 0 0.141
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_SBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in Spamhaus XBL
</font>
</td>
<td>
<font size="-1">
RCVD_IN_XBL
</font>
</td>
<td>
0 0.724 0 0.375
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_XBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in Spamhaus PBL
</font>
</td>
<td>
<font size="-1">
RCVD_IN_PBL
</font>
</td>
<td>
0 3.558 0 3.335
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_PBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope sender in dsn.rfc-ignorant.org
</font>
</td>
<td>
<font size="-1">
DNS_FROM_RFC_DSN
</font>
</td>
<td>
0 0.001 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DNS_FROM_RFC_DSN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope sender in bogusmx.rfc-ignorant.org
</font>
</td>
<td>
<font size="-1">
DNS_FROM_RFC_BOGUSMX
</font>
</td>
<td>
0 1.464 0 1.668
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DNS_FROM_RFC_BOGUSMX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope sender listed in dnsbl.ahbl.org
</font>
</td>
<td>
<font size="-1">
DNS_FROM_AHBL_RHSBL
</font>
</td>
<td>
0 2.438 0 2.699
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DNS_FROM_AHBL_RHSBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in bl.spamcop.net
</font>
</td>
<td>
<font size="-1">
RCVD_IN_BL_SPAMCOP_NET
</font>
</td>
<td>
0 1.246 0 1.347
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_BL_SPAMCOP_NET">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in RBL, http://www.mail-abuse.com/enduserinfo_rbl.html
</font>
</td>
<td>
<font size="-1">
RCVD_IN_MAPS_RBL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_MAPS_RBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in DUL, http://www.mail-abuse.com/enduserinfo_dul.html
</font>
</td>
<td>
<font size="-1">
RCVD_IN_MAPS_DUL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_MAPS_DUL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in RSS, http://www.mail-abuse.com/enduserinfo_rss.html
</font>
</td>
<td>
<font size="-1">
RCVD_IN_MAPS_RSS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_MAPS_RSS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in OPS, http://www.mail-abuse.com/enduserinfo_ops.html
</font>
</td>
<td>
<font size="-1">
RCVD_IN_MAPS_OPS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_MAPS_OPS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in NML, http://www.mail-abuse.com/enduserinfo_nml.html
</font>
</td>
<td>
<font size="-1">
RCVD_IN_MAPS_NML
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_MAPS_NML">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ISIPP IADB lists as vouched-for sender
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_VOUCHED
</font>
</td>
<td>
0 -2.2 0 -2.2
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_VOUCHED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a gappy version of 'cialis'
</font>
</td>
<td>
<font size="-1">
SUBJECT_DRUG_GAP_C
</font>
</td>
<td>
2.108 0.989 1.348 2.140
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DRUG_GAP_C">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a gappy version of 'levitra'
</font>
</td>
<td>
<font size="-1">
SUBJECT_DRUG_GAP_L
</font>
</td>
<td>
2.799 2.304 1.402 1.561
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DRUG_GAP_L">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a gappy version of 'soma'
</font>
</td>
<td>
<font size="-1">
SUBJECT_DRUG_GAP_S
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DRUG_GAP_S">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a gappy version of 'valium'
</font>
</td>
<td>
<font size="-1">
SUBJECT_DRUG_GAP_VA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DRUG_GAP_VA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a gappy version of 'xanax'
</font>
</td>
<td>
<font size="-1">
SUBJECT_DRUG_GAP_X
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DRUG_GAP_X">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about price per dose
</font>
</td>
<td>
<font size="-1">
DRUG_DOSAGE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUG_DOSAGE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Mentions an E.D. drug
</font>
</td>
<td>
<font size="-1">
DRUG_ED_CAPS
</font>
</td>
<td>
2.799 1.023 2.516 0.936
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUG_ED_CAPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about an E.D. drug using its chemical name
</font>
</td>
<td>
<font size="-1">
DRUG_ED_SILD
</font>
</td>
<td>
0.001 0.170 0.113 1.794
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUG_ED_SILD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Mentions Generic Viagra
</font>
</td>
<td>
<font size="-1">
DRUG_ED_GENERIC
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUG_ED_GENERIC">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Fast Viagra Delivery
</font>
</td>
<td>
<font size="-1">
DRUG_ED_ONLINE
</font>
</td>
<td>
0.696 1.152 1.221 0.608
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUG_ED_ONLINE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Online Pharmacy
</font>
</td>
<td>
<font size="-1">
ONLINE_PHARMACY
</font>
</td>
<td>
0.843 2.371 0.008 0.650
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ONLINE_PHARMACY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No prescription needed
</font>
</td>
<td>
<font size="-1">
NO_PRESCRIPTION
</font>
</td>
<td>
1.915 1.102 2.280 2.399
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NO_PRESCRIPTION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempts to disguise the word 'viagra'
</font>
</td>
<td>
<font size="-1">
VIA_GAP_GRA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/VIA_GAP_GRA">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Two or more drugs crammed together into one word
</font>
</td>
<td>
<font size="-1">
DRUGS_SMEAR1
</font>
</td>
<td>
3.300 2.051 3.148 0.235
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUGS_SMEAR1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd with suspicious hostname (mail.com)
</font>
</td>
<td>
<font size="-1">
FAKE_HELO_MAIL_COM_DOM
</font>
</td>
<td>
1.887 0.152 1.370 2.136
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FAKE_HELO_MAIL_COM_DOM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (Rogers)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_ROGERS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_ROGERS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (T-Dialin)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_DIALIN
</font>
</td>
<td>
2.629 3.233 2.186 1.366
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_DIALIN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (Hex IP)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_HEXIP
</font>
</td>
<td>
2.321 0.511 1.773 1.789
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_HEXIP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (Split IP)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_SPLIT_IP
</font>
</td>
<td>
3.031 2.893 4.225 3.482
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_SPLIT_IP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (IP addr 2)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_IPADDR2
</font>
</td>
<td>
2.815 3.888 3.728 3.607
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_IPADDR2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (Chello.nl)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_CHELLO_NL
</font>
</td>
<td>
2.412 1.918 2.019 2.428
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_CHELLO_NL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay HELO'd using suspicious hostname (Home.nl)
</font>
</td>
<td>
<font size="-1">
HELO_DYNAMIC_HOME_NL
</font>
</td>
<td>
2.385 1.530 1.024 1.459
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_DYNAMIC_HOME_NL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender email is freemail
</font>
</td>
<td>
<font size="-1">
FREEMAIL_FROM
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FREEMAIL_FROM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope-from freemail username ends in digit
</font>
</td>
<td>
<font size="-1">
FREEMAIL_ENVFROM_END_DIGIT
</font>
</td>
<td>
2.602 2.223 1.770 1.553
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FREEMAIL_ENVFROM_END_DIGIT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Reply-To freemail username ends in digit
</font>
</td>
<td>
<font size="-1">
FREEMAIL_REPLYTO_END_DIGIT
</font>
</td>
<td>
1.221 0.980 1.179 1.151
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FREEMAIL_REPLYTO_END_DIGIT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Partial message
</font>
</td>
<td>
<font size="-1">
FRAGMENTED_MESSAGE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRAGMENTED_MESSAGE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: contains empty name
</font>
</td>
<td>
<font size="-1">
FROM_BLANK_NAME
</font>
</td>
<td>
2.099 2.099 2.099 0.723
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_BLANK_NAME">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: starts with many numbers
</font>
</td>
<td>
<font size="-1">
FROM_STARTS_WITH_NUMS
</font>
</td>
<td>
2.801 0.553 1.201 0.738
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_STARTS_WITH_NUMS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From address is "at something-offers"
</font>
</td>
<td>
<font size="-1">
FROM_OFFERS
</font>
</td>
<td>
2.699 2.699 2.510 2.699
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_OFFERS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: has no local-part before @ sign
</font>
</td>
<td>
<font size="-1">
FROM_NO_USER
</font>
</td>
<td>
0.001 2.599 0.019 0.798
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_NO_USER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Spam tool Message-Id: (caps variant)
</font>
</td>
<td>
<font size="-1">
MSGID_SPAM_CAPS
</font>
</td>
<td>
2.366 1.997 3.099 3.099
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_SPAM_CAPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Spam tool Message-Id: (letters variant)
</font>
</td>
<td>
<font size="-1">
MSGID_SPAM_LETTERS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_SPAM_LETTERS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-ID has ALLCAPS@yahoo.com
</font>
</td>
<td>
<font size="-1">
MSGID_YAHOO_CAPS
</font>
</td>
<td>
0.797 1.413 2.278 1.411
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_YAHOO_CAPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-ID is unusually short
</font>
</td>
<td>
<font size="-1">
MSGID_SHORT
</font>
</td>
<td>
0.001 0.337 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_SHORT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-ID contains multiple '@' characters
</font>
</td>
<td>
<font size="-1">
MSGID_MULTIPLE_AT
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_MULTIPLE_AT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date header uses unusual Y2K formatting
</font>
</td>
<td>
<font size="-1">
DATE_SPAMWARE_Y2K
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_SPAMWARE_Y2K">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Invalid Date: header (not RFC 2822)
</font>
</td>
<td>
<font size="-1">
INVALID_DATE
</font>
</td>
<td>
1.701 0.432 1.200 1.096
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/INVALID_DATE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Invalid Date: header (timezone does not exist)
</font>
</td>
<td>
<font size="-1">
INVALID_DATE_TZ_ABSURD
</font>
</td>
<td>
0.262 0.632 0.706 0.491
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/INVALID_DATE_TZ_ABSURD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Invalid date in header (wrong CST timezone)
</font>
</td>
<td>
<font size="-1">
INVALID_TZ_CST
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/INVALID_TZ_CST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Invalid date in header (wrong EST timezone)
</font>
</td>
<td>
<font size="-1">
INVALID_TZ_EST
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/INVALID_TZ_EST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains an English UCE tag
</font>
</td>
<td>
<font size="-1">
ENGLISH_UCE_SUBJECT
</font>
</td>
<td>
0.953 1.542 2.569 2.899
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ENGLISH_UCE_SUBJECT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains a Japanese UCE tag
</font>
</td>
<td>
<font size="-1">
JAPANESE_UCE_SUBJECT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/JAPANESE_UCE_SUBJECT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject: contains Korean unsolicited email tag
</font>
</td>
<td>
<font size="-1">
KOREAN_UCE_SUBJECT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KOREAN_UCE_SUBJECT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains forged hostname for a DSL IP in Brazil
</font>
</td>
<td>
<font size="-1">
FORGED_TELESP_RCVD
</font>
</td>
<td>
2.499 2.499 2.499 1.841
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FORGED_TELESP_RCVD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Character set doesn't exist
</font>
</td>
<td>
<font size="-1">
NONEXISTENT_CHARSET
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NONEXISTENT_CHARSET">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has Prevent-NonDelivery-Report header
</font>
</td>
<td>
<font size="-1">
PREVENT_NONDELIVERY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/PREVENT_NONDELIVERY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has X-IP header
</font>
</td>
<td>
<font size="-1">
X_IP
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/X_IP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains "As Seen"
</font>
</td>
<td>
<font size="-1">
SUBJ_AS_SEEN
</font>
</td>
<td>
2.711 3.099 3.099 1.461
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_AS_SEEN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject starts with dollar amount
</font>
</td>
<td>
<font size="-1">
SUBJ_DOLLARS
</font>
</td>
<td>
0.600 0.001 0.601 1.800
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_DOLLARS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains "Your Bills" or similar
</font>
</td>
<td>
<font size="-1">
SUBJ_YOUR_DEBT
</font>
</td>
<td>
3.299 3.045 1.199 0.987
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_YOUR_DEBT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains "Your Family"
</font>
</td>
<td>
<font size="-1">
SUBJ_YOUR_FAMILY
</font>
</td>
<td>
2.910 2.999 2.999 2.999
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_YOUR_FAMILY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received contains a faked HELO hostname
</font>
</td>
<td>
<font size="-1">
RCVD_FAKE_HELO_DOTCOM
</font>
</td>
<td>
2.799 2.389 2.605 1.189
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_FAKE_HELO_DOTCOM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject talks about losing pounds
</font>
</td>
<td>
<font size="-1">
SUBJECT_DIET
</font>
</td>
<td>
1.927 1.563 0.817 1.466
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_DIET">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Header has extraneous Content-type:...type= entry
</font>
</td>
<td>
<font size="-1">
EXTRA_MPART_TYPE
</font>
</td>
<td>
1.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EXTRA_MPART_TYPE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Spam tool pattern in MIME boundary
</font>
</td>
<td>
<font size="-1">
MIME_BOUND_DD_DIGITS
</font>
</td>
<td>
3.016 0.349 2.417 1.373
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BOUND_DD_DIGITS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Spam tool pattern in MIME boundary
</font>
</td>
<td>
<font size="-1">
MIME_BOUND_DIGITS_15
</font>
</td>
<td>
0.432 1.225 1.241 0.798
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BOUND_DIGITS_15">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Spam tool pattern in MIME boundary
</font>
</td>
<td>
<font size="-1">
MIME_BOUND_MANY_HEX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BOUND_MANY_HEX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
To: has a malformed address
</font>
</td>
<td>
<font size="-1">
TO_MALFORMED
</font>
</td>
<td>
0.892 1.247 2.099 2.099
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TO_MALFORMED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received line contains spam-sign (lowercase smtp)
</font>
</td>
<td>
<font size="-1">
WITH_LC_SMTP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/WITH_LC_SMTP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject line starts with Buy or Buying
</font>
</td>
<td>
<font size="-1">
SUBJ_BUY
</font>
</td>
<td>
0.594 1.498 0.001 0.639
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_BUY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received headers forged (AM/PM)
</font>
</td>
<td>
<font size="-1">
RCVD_AM_PM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_AM_PM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received header contains faked 'mr.outblaze.com'
</font>
</td>
<td>
<font size="-1">
FAKE_OUTBLAZE_RCVD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FAKE_OUTBLAZE_RCVD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Headers contain an unclosed bracket
</font>
</td>
<td>
<font size="-1">
UNCLOSED_BRACKET
</font>
</td>
<td>
2.699 1.329 1.425 1.496
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/UNCLOSED_BRACKET">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: domain has series of non-vowel letters
</font>
</td>
<td>
<font size="-1">
FROM_DOMAIN_NOVOWEL
</font>
</td>
<td>
0.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_DOMAIN_NOVOWEL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: localpart has series of non-vowel letters
</font>
</td>
<td>
<font size="-1">
FROM_LOCAL_NOVOWEL
</font>
</td>
<td>
0.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_LOCAL_NOVOWEL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: localpart has long hexadecimal sequence
</font>
</td>
<td>
<font size="-1">
FROM_LOCAL_HEX
</font>
</td>
<td>
0.000 0.331 0.001 0.006
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_LOCAL_HEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: localpart has long digit sequence
</font>
</td>
<td>
<font size="-1">
FROM_LOCAL_DIGITS
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_LOCAL_DIGITS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Cc: after X-Priority: (bulk email fingerprint)
</font>
</td>
<td>
<font size="-1">
X_PRIORITY_CC
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/X_PRIORITY_CC">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has bad MIME encoding in the header
</font>
</td>
<td>
<font size="-1">
BAD_ENC_HEADER
</font>
</td>
<td>
3.099 1.716 1.805 1.988
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAD_ENC_HEADER">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received: contains illegal IP address
</font>
</td>
<td>
<font size="-1">
RCVD_ILLEGAL_IP
</font>
</td>
<td>
3.399
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_ILLEGAL_IP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
A foreign language charset used in headers
</font>
</td>
<td>
<font size="-1">
CHARSET_FARAWAY_HEADER
</font>
</td>
<td>
3.200
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/CHARSET_FARAWAY_HEADER">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: has too many raw illegal characters
</font>
</td>
<td>
<font size="-1">
FROM_ILLEGAL_CHARS
</font>
</td>
<td>
2.192 2.059 0.240 0.036
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FROM_ILLEGAL_CHARS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Headers have too many raw illegal characters
</font>
</td>
<td>
<font size="-1">
HEAD_ILLEGAL_CHARS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HEAD_ILLEGAL_CHARS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
hotmail.com 'From' address, but no 'Received:'
</font>
</td>
<td>
<font size="-1">
FORGED_HOTMAIL_RCVD2
</font>
</td>
<td>
0.001 1.187 0.698 0.874
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FORGED_HOTMAIL_RCVD2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
'From' yahoo.com does not match 'Received' headers
</font>
</td>
<td>
<font size="-1">
FORGED_YAHOO_RCVD
</font>
</td>
<td>
2.397 1.022 2.599 1.630
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FORGED_YAHOO_RCVD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Recipient list is sorted by address
</font>
</td>
<td>
<font size="-1">
SORTED_RECIPS
</font>
</td>
<td>
1.801 2.474 1.791 2.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SORTED_RECIPS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Similar addresses in recipient list
</font>
</td>
<td>
<font size="-1">
SUSPICIOUS_RECIPS
</font>
</td>
<td>
2.499 2.497 2.139 2.510
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUSPICIOUS_RECIPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Missing To: header
</font>
</td>
<td>
<font size="-1">
MISSING_HEADERS
</font>
</td>
<td>
0.915 1.207 1.204 1.021
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MISSING_HEADERS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 3 to 6 hours before Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_PAST_03_06
</font>
</td>
<td>
2.399 1.076 1.200 1.592
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_PAST_03_06">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 6 to 12 hours before Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_PAST_06_12
</font>
</td>
<td>
1.699 1.103 1.274 1.543
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_PAST_06_12">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 12 to 24 hours before Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_PAST_12_24
</font>
</td>
<td>
0.001 0.804 1.190 1.049
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_PAST_12_24">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 24 to 48 hours before Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_PAST_24_48
</font>
</td>
<td>
1.109 0.485 0.624 1.340
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_PAST_24_48">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 96 hours or more before Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_PAST_96_XX
</font>
</td>
<td>
2.600 2.070 1.233 3.405
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_PAST_96_XX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 3 to 6 hours after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_03_06
</font>
</td>
<td>
3.399 2.426 2.997 3.027
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_03_06">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 6 to 12 hours after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_06_12
</font>
</td>
<td>
2.899 0.001 2.222 1.947
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_06_12">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 12 to 24 hours after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_12_24
</font>
</td>
<td>
2.603 2.489 3.199 3.199
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_12_24">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 24 to 48 hours after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_24_48
</font>
</td>
<td>
2.598 1.248 0.001 2.048
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_24_48">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 48 to 96 hours after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_48_96
</font>
</td>
<td>
2.384 0.813 1.078 2.181
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_48_96">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date: is 96 hours or more after Received: date
</font>
</td>
<td>
<font size="-1">
DATE_IN_FUTURE_96_XX
</font>
</td>
<td>
2.614 3.028 2.851 3.087
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DATE_IN_FUTURE_96_XX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Headers contain an unresolved template
</font>
</td>
<td>
<font size="-1">
UNRESOLVED_TEMPLATE
</font>
</td>
<td>
3.035 0.716 2.424 1.252
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/UNRESOLVED_TEMPLATE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject is all capitals
</font>
</td>
<td>
<font size="-1">
SUBJ_ALL_CAPS
</font>
</td>
<td>
0.518 1.625 1.197 1.506
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJ_ALL_CAPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Local part of To: address appears in Subject
</font>
</td>
<td>
<font size="-1">
LOCALPART_IN_SUBJECT
</font>
</td>
<td>
0.001 0.730 1.199 1.107
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LOCALPART_IN_SUBJECT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-Id is fake (in Outlook Express format)
</font>
</td>
<td>
<font size="-1">
MSGID_OUTLOOK_INVALID
</font>
</td>
<td>
3.899
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MSGID_OUTLOOK_INVALID">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Multiple Content-Type headers found
</font>
</td>
<td>
<font size="-1">
HEADER_COUNT_CTYPE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HEADER_COUNT_CTYPE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message headers are very long
</font>
</td>
<td>
<font size="-1">
HEAD_LONG
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HEAD_LONG">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Missing blank line between message header and body
</font>
</td>
<td>
<font size="-1">
MISSING_HB_SEP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MISSING_HB_SEP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Informational: message has unparseable relay lines
</font>
</td>
<td>
<font size="-1">
UNPARSEABLE_RELAY
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/UNPARSEABLE_RELAY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received: HELO and IP do not match, but should
</font>
</td>
<td>
<font size="-1">
RCVD_HELO_IP_MISMATCH
</font>
</td>
<td>
1.680 1.186 2.362 2.368
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_HELO_IP_MISMATCH">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received: contains an IP address used for HELO
</font>
</td>
<td>
<font size="-1">
RCVD_NUMERIC_HELO
</font>
</td>
<td>
0.001 0.865 0.001 1.164
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_NUMERIC_HELO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Host HELO'd as a big ISP, but had no rDNS
</font>
</td>
<td>
<font size="-1">
NO_RDNS_DOTCOM_HELO
</font>
</td>
<td>
3.100 0.433 3.099 0.823
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NO_RDNS_DOTCOM_HELO">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Javascript to hide URLs in browser
</font>
</td>
<td>
<font size="-1">
HIDE_WIN_STATUS
</font>
</td>
<td>
0.001 1.353 0.754 1.380
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HIDE_WIN_STATUS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML included in message
</font>
</td>
<td>
<font size="-1">
HTML_MESSAGE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_MESSAGE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML comment is very short
</font>
</td>
<td>
<font size="-1">
HTML_COMMENT_SHORT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_COMMENT_SHORT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML message is a saved web page
</font>
</td>
<td>
<font size="-1">
HTML_COMMENT_SAVED_URL
</font>
</td>
<td>
0.198 0.357 0.899 1.391
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_COMMENT_SAVED_URL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML with embedded plugin object
</font>
</td>
<td>
<font size="-1">
HTML_EMBEDS
</font>
</td>
<td>
0.001 0.001 1.171 1.799
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_EMBEDS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML contains far too many close tags
</font>
</td>
<td>
<font size="-1">
HTML_EXTRA_CLOSE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_EXTRA_CLOSE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML font size is large
</font>
</td>
<td>
<font size="-1">
HTML_FONT_SIZE_LARGE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_FONT_SIZE_LARGE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML font size is huge
</font>
</td>
<td>
<font size="-1">
HTML_FONT_SIZE_HUGE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_FONT_SIZE_HUGE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML font color similar to background
</font>
</td>
<td>
<font size="-1">
HTML_FONT_LOW_CONTRAST
</font>
</td>
<td>
0.713 0.001 0.786 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_FONT_LOW_CONTRAST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML font face is not a word
</font>
</td>
<td>
<font size="-1">
HTML_FONT_FACE_BAD
</font>
</td>
<td>
0.001 0.289 0.286 0.981
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_FONT_FACE_BAD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML includes a form which sends mail
</font>
</td>
<td>
<font size="-1">
HTML_FORMACTION_MAILTO
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_FORMACTION_MAILTO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 0-400 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_04
</font>
</td>
<td>
1.680 0.342 1.799 1.172
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_04">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 400-800 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_08
</font>
</td>
<td>
0.585 1.781 1.845 1.651
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_08">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 800-1200 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_12
</font>
</td>
<td>
1.381 1.629 1.400 2.059
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_12">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 1200-1600 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_16
</font>
</td>
<td>
1.969 1.048 1.199 1.092
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_16">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 1600-2000 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_20
</font>
</td>
<td>
2.109 0.700 1.300 1.546
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_20">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 2000-2400 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_24
</font>
</td>
<td>
2.799 1.282 1.328 1.618
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_24">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 2400-2800 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_28
</font>
</td>
<td>
2.799 0.726 1.512 1.404
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_28">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML: images with 2800-3200 bytes of words
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_ONLY_32
</font>
</td>
<td>
2.196 0.001 1.172 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_ONLY_32">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has a low ratio of text to image area
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_RATIO_02
</font>
</td>
<td>
2.199 0.805 1.200 0.437
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_RATIO_02">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has a low ratio of text to image area
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_RATIO_04
</font>
</td>
<td>
2.089 0.610 0.607 0.556
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_RATIO_04">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has a low ratio of text to image area
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_RATIO_06
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_RATIO_06">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has a low ratio of text to image area
</font>
</td>
<td>
<font size="-1">
HTML_IMAGE_RATIO_08
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IMAGE_RATIO_08">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 5% to 10% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_05_10
</font>
</td>
<td>
0.601 0.001 0.718 0.260
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_05_10">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 10% to 20% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_10_20
</font>
</td>
<td>
0.174 1.162 0.588 0.093
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_10_20">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 20% to 30% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_20_30
</font>
</td>
<td>
2.499 2.441 1.449 1.999
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_20_30">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 30% to 40% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_30_40
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_30_40">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 50% to 60% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_50_60
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_50_60">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 70% to 80% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_70_80
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_70_80">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message is 90% to 100% HTML obfuscation
</font>
</td>
<td>
<font size="-1">
HTML_OBFUSCATE_90_100
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_OBFUSCATE_90_100">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has unbalanced "body" tags
</font>
</td>
<td>
<font size="-1">
HTML_TAG_BALANCE_BODY
</font>
</td>
<td>
1.247 0.712 0.628 1.157
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_TAG_BALANCE_BODY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has unbalanced "head" tags
</font>
</td>
<td>
<font size="-1">
HTML_TAG_BALANCE_HEAD
</font>
</td>
<td>
0.520 0.000 0.600 0.817
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_TAG_BALANCE_HEAD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML has "bgsound" tag
</font>
</td>
<td>
<font size="-1">
HTML_TAG_EXIST_BGSOUND
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_TAG_EXIST_BGSOUND">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML message is 40% to 50% bad tags
</font>
</td>
<td>
<font size="-1">
HTML_BADTAG_40_50
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_BADTAG_40_50">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML message is 50% to 60% bad tags
</font>
</td>
<td>
<font size="-1">
HTML_BADTAG_50_60
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_BADTAG_50_60">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML message is 60% to 70% bad tags
</font>
</td>
<td>
<font size="-1">
HTML_BADTAG_60_70
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_BADTAG_60_70">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML message is 90% to 100% bad tags
</font>
</td>
<td>
<font size="-1">
HTML_BADTAG_90_100
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_BADTAG_90_100">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
30% to 40% of HTML elements are non-standard
</font>
</td>
<td>
<font size="-1">
HTML_NONELEMENT_30_40
</font>
</td>
<td>
0.000 0.001 0.308 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_NONELEMENT_30_40">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
40% to 50% of HTML elements are non-standard
</font>
</td>
<td>
<font size="-1">
HTML_NONELEMENT_40_50
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_NONELEMENT_40_50">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
60% to 70% of HTML elements are non-standard
</font>
</td>
<td>
<font size="-1">
HTML_NONELEMENT_60_70
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_NONELEMENT_60_70">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
80% to 90% of HTML elements are non-standard
</font>
</td>
<td>
<font size="-1">
HTML_NONELEMENT_80_90
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_NONELEMENT_80_90">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has HTML IFRAME tag with SRC URI
</font>
</td>
<td>
<font size="-1">
HTML_IFRAME_SRC
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTML_IFRAME_SRC">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope sender has no MX or A DNS records
</font>
</td>
<td>
<font size="-1">
NO_DNS_FOR_FROM
</font>
</td>
<td>
0 0.379 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NO_DNS_FOR_FROM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Removal phrase right before a link
</font>
</td>
<td>
<font size="-1">
REMOVE_BEFORE_LINK
</font>
</td>
<td>
0.406 1.587 1.799 1.800
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/REMOVE_BEFORE_LINK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
One hundred percent guaranteed
</font>
</td>
<td>
<font size="-1">
GUARANTEED_100_PERCENT
</font>
</td>
<td>
2.699 2.699 2.480 2.699
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/GUARANTEED_100_PERCENT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Dear Friend? That's not very dear!
</font>
</td>
<td>
<font size="-1">
DEAR_FRIEND
</font>
</td>
<td>
2.683 2.604 1.801 2.577
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DEAR_FRIEND">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains 'Dear (something)'
</font>
</td>
<td>
<font size="-1">
DEAR_SOMETHING
</font>
</td>
<td>
1.999 1.731 1.787 1.973
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DEAR_SOMETHING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about lots of money
</font>
</td>
<td>
<font size="-1">
BILLION_DOLLARS
</font>
</td>
<td>
0.001 1.451 1.229 1.638
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BILLION_DOLLARS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Claims you can be removed from the list
</font>
</td>
<td>
<font size="-1">
EXCUSE_4
</font>
</td>
<td>
2.399 1.687 2.399 1.325
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EXCUSE_4">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Claims you wanted this ad
</font>
</td>
<td>
<font size="-1">
EXCUSE_24
</font>
</td>
<td>
2.799
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EXCUSE_24">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about how to be removed from mailings
</font>
</td>
<td>
<font size="-1">
EXCUSE_REMOVE
</font>
</td>
<td>
2.907 2.992 3.299 3.299
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EXCUSE_REMOVE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Tells you about a strong buy
</font>
</td>
<td>
<font size="-1">
STRONG_BUY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/STRONG_BUY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Offers a alert about a stock
</font>
</td>
<td>
<font size="-1">
STOCK_ALERT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/STOCK_ALERT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Not registered investment advisor
</font>
</td>
<td>
<font size="-1">
NOT_ADVISOR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NOT_ADVISOR">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
'Prestigious Non-Accredited Universities'
</font>
</td>
<td>
<font size="-1">
PREST_NON_ACCREDITED
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/PREST_NON_ACCREDITED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Information on growing body parts
</font>
</td>
<td>
<font size="-1">
BODY_ENHANCEMENT
</font>
</td>
<td>
0.927 1.611 0.974 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BODY_ENHANCEMENT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Information on getting larger body parts
</font>
</td>
<td>
<font size="-1">
BODY_ENHANCEMENT2
</font>
</td>
<td>
1.691 1.507 1.865 1.541
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BODY_ENHANCEMENT2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Impotence cure
</font>
</td>
<td>
<font size="-1">
IMPOTENCE
</font>
</td>
<td>
1.539 2.144 3.028 1.374
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/IMPOTENCE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about a million North American dollars
</font>
</td>
<td>
<font size="-1">
NA_DOLLARS
</font>
</td>
<td>
3.599
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NA_DOLLARS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Mentions millions of (dollar) ((dollar) NN,NNN,NNN.NN)
</font>
</td>
<td>
<font size="-1">
US_DOLLARS_3
</font>
</td>
<td>
2.599 2.523 1.780 1.754
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/US_DOLLARS_3">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about millions of dollars
</font>
</td>
<td>
<font size="-1">
MILLION_USD
</font>
</td>
<td>
3.799 2.477 3.221 3.247
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MILLION_USD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains urgent matter
</font>
</td>
<td>
<font size="-1">
URG_BIZ
</font>
</td>
<td>
1.750 0.941 0.568 0.573
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URG_BIZ">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Money back guarantee
</font>
</td>
<td>
<font size="-1">
MONEY_BACK
</font>
</td>
<td>
2.910 2.486 0.601 1.232
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MONEY_BACK">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Free express or no-obligation quote
</font>
</td>
<td>
<font size="-1">
FREE_QUOTE_INSTANT
</font>
</td>
<td>
2.700 2.699 2.699 1.297
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FREE_QUOTE_INSTANT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Eliminate Bad Credit
</font>
</td>
<td>
<font size="-1">
BAD_CREDIT
</font>
</td>
<td>
2.799 1.658 1.279 2.415
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAD_CREDIT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Home refinancing
</font>
</td>
<td>
<font size="-1">
REFINANCE_YOUR_HOME
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/REFINANCE_YOUR_HOME">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Home refinancing
</font>
</td>
<td>
<font size="-1">
REFINANCE_NOW
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/REFINANCE_NOW">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No Medical Exams
</font>
</td>
<td>
<font size="-1">
NO_MEDICAL
</font>
</td>
<td>
2.199 1.254 2.199 1.773
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NO_MEDICAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Lose Weight Spam
</font>
</td>
<td>
<font size="-1">
DIET_1
</font>
</td>
<td>
0.714 0.000 0.399 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DIET_1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Freedom of a financial nature
</font>
</td>
<td>
<font size="-1">
FIN_FREE
</font>
</td>
<td>
2.699 2.289 2.699 2.700
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FIN_FREE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Stock Disclaimer Statement
</font>
</td>
<td>
<font size="-1">
FORWARD_LOOKING
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FORWARD_LOOKING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
One Time Rip Off
</font>
</td>
<td>
<font size="-1">
ONE_TIME
</font>
</td>
<td>
1.840 1.175 1.830 0.714
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ONE_TIME">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Join Millions of Americans
</font>
</td>
<td>
<font size="-1">
JOIN_MILLIONS
</font>
</td>
<td>
0.700 0.128 1.549 1.026
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/JOIN_MILLIONS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Claims you registered with a partner
</font>
</td>
<td>
<font size="-1">
MARKETING_PARTNERS
</font>
</td>
<td>
0.553 0.235 0.689 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MARKETING_PARTNERS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Lowest Price
</font>
</td>
<td>
<font size="-1">
LOW_PRICE
</font>
</td>
<td>
0.161 0.600 0.001 1.464
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LOW_PRICE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
People just leave money laying around
</font>
</td>
<td>
<font size="-1">
UNCLAIMED_MONEY
</font>
</td>
<td>
2.699 2.699 2.699 2.427
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/UNCLAIMED_MONEY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message seems to contain rot13ed address
</font>
</td>
<td>
<font size="-1">
OBSCURED_EMAIL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/OBSCURED_EMAIL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about Oprah with an exclamation!
</font>
</td>
<td>
<font size="-1">
BANG_OPRAH
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BANG_OPRAH">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about 'acting now' with capitals
</font>
</td>
<td>
<font size="-1">
ACT_NOW_CAPS
</font>
</td>
<td>
1.404 2.399 0.925 2.211
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ACT_NOW_CAPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about a bigger drive for sex
</font>
</td>
<td>
<font size="-1">
MORE_SEX
</font>
</td>
<td>
2.799 2.765 2.568 1.413
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MORE_SEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Something is emphatically guaranteed
</font>
</td>
<td>
<font size="-1">
BANG_GUAR
</font>
</td>
<td>
2.202 2.377 1.690 2.704
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BANG_GUAR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message mentions investment advice
</font>
</td>
<td>
<font size="-1">
INVESTMENT_ADVICE
</font>
</td>
<td>
0.200 2.160 2.199 2.199
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/INVESTMENT_ADVICE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message talks about enhancing men
</font>
</td>
<td>
<font size="-1">
MALE_ENHANCE
</font>
</td>
<td>
3.100 3.099 3.099 0.851
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MALE_ENHANCE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message says that prices aren't too expensive
</font>
</td>
<td>
<font size="-1">
PRICES_ARE_AFFORDABLE
</font>
</td>
<td>
0.794 0.851 1.112 0.551
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/PRICES_ARE_AFFORDABLE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message talks about a replica watch
</font>
</td>
<td>
<font size="-1">
REPLICA_WATCH
</font>
</td>
<td>
3.487 3.164 4.074 3.775
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/REPLICA_WATCH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message puts emphasis on the watch manufacturer
</font>
</td>
<td>
<font size="-1">
EM_ROLEX
</font>
</td>
<td>
0.595 1.309 2.068 0.618
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/EM_ROLEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Possible porn - Free Porn
</font>
</td>
<td>
<font size="-1">
FREE_PORN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FREE_PORN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Possible porn - Cum Shot
</font>
</td>
<td>
<font size="-1">
CUM_SHOT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/CUM_SHOT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Possible porn - Live Porn
</font>
</td>
<td>
<font size="-1">
LIVE_PORN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LIVE_PORN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject indicates sexually-explicit content
</font>
</td>
<td>
<font size="-1">
SUBJECT_SEXUAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_SEXUAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (eGroups) found
</font>
</td>
<td>
<font size="-1">
RATWARE_EGROUPS
</font>
</td>
<td>
1.898 1.258 1.406 1.621
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_EGROUPS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Mailer has malformed Outlook Express version
</font>
</td>
<td>
<font size="-1">
RATWARE_OE_MALFORMED
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_OE_MALFORMED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (Mozilla malformed) found
</font>
</td>
<td>
<font size="-1">
RATWARE_MOZ_MALFORMED
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_MOZ_MALFORMED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (mPOP Web-Mail)
</font>
</td>
<td>
<font size="-1">
RATWARE_MPOP_WEBMAIL
</font>
</td>
<td>
1.153 1.338 1.229 1.999
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_MPOP_WEBMAIL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains a hashbuster in Send-Safe format
</font>
</td>
<td>
<font size="-1">
RATWARE_HASH_DASH
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_HASH_DASH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (Gecko faked) found
</font>
</td>
<td>
<font size="-1">
RATWARE_GECKO_BUILD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_GECKO_BUILD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (X-Message-Info) found
</font>
</td>
<td>
<font size="-1">
X_MESSAGE_INFO
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/X_MESSAGE_INFO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (header-based) found
</font>
</td>
<td>
<font size="-1">
HEADER_SPAM
</font>
</td>
<td>
2.499 2.499 1.994 0.585
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HEADER_SPAM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (Received PF) found
</font>
</td>
<td>
<font size="-1">
RATWARE_RCVD_PF
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_RCVD_PF">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (Received @) found
</font>
</td>
<td>
<font size="-1">
RATWARE_RCVD_AT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_RCVD_AT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bulk email fingerprint (envfrom) found
</font>
</td>
<td>
<font size="-1">
RATWARE_EFROM
</font>
</td>
<td>
2.999
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RATWARE_EFROM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/^https?:\/\/[^\/]*\&\#(?:\d{4,}| [3456789]\d\d);/i
</font>
</td>
<td>
<font size="-1">
HIGH_CODEPAGE_URI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HIGH_CODEPAGE_URI">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Uses a numeric IP address in URL
</font>
</td>
<td>
<font size="-1">
NUMERIC_HTTP_ADDR
</font>
</td>
<td>
0.000 0.001 0.001 1.242
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NUMERIC_HTTP_ADDR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Uses %-escapes inside a URL's hostname
</font>
</td>
<td>
<font size="-1">
HTTP_ESCAPED_HOST
</font>
</td>
<td>
0.807 1.621 0.483 1.125
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTTP_ESCAPED_HOST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Completely unnecessary %-escapes inside a URL
</font>
</td>
<td>
<font size="-1">
HTTP_EXCESSIVE_ESCAPES
</font>
</td>
<td>
0.001 1.516 0.000 1.572
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTTP_EXCESSIVE_ESCAPES">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Dotted-decimal IP address followed by CGI
</font>
</td>
<td>
<font size="-1">
IP_LINK_PLUS
</font>
</td>
<td>
0.001 0.001 0.246 0.012
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/IP_LINK_PLUS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Uses non-standard port number for HTTP
</font>
</td>
<td>
<font size="-1">
WEIRD_PORT
</font>
</td>
<td>
0.001 0.001 0.097 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/WEIRD_PORT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Has Yahoo Redirect URI
</font>
</td>
<td>
<font size="-1">
YAHOO_RD_REDIR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/YAHOO_RD_REDIR">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Has Yahoo Redirect URI
</font>
</td>
<td>
<font size="-1">
YAHOO_DRS_REDIR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/YAHOO_DRS_REDIR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL-encoded hostname (HTTP77)
</font>
</td>
<td>
<font size="-1">
HTTP_77
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTTP_77">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI contains ".com" in middle
</font>
</td>
<td>
<font size="-1">
SPOOF_COM2OTH
</font>
</td>
<td>
2.999 2.999 2.877 2.723
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPOOF_COM2OTH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI contains ".com" in middle and end
</font>
</td>
<td>
<font size="-1">
SPOOF_COM2COM
</font>
</td>
<td>
0.001 1.632 1.952 2.048
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPOOF_COM2COM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI contains ".net" or ".org", then ".com"
</font>
</td>
<td>
<font size="-1">
SPOOF_NET2COM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPOOF_NET2COM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI hostname has long hexadecimal sequence
</font>
</td>
<td>
<font size="-1">
URI_HEX
</font>
</td>
<td>
2.800 1.313 1.206 1.122
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_HEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI hostname has long non-vowel sequence
</font>
</td>
<td>
<font size="-1">
URI_NOVOWEL
</font>
</td>
<td>
0.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_NOVOWEL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI contains suspicious unsubscribe link
</font>
</td>
<td>
<font size="-1">
URI_UNSUBSCRIBE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_UNSUBSCRIBE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
CGI in .info TLD other than third-level "www"
</font>
</td>
<td>
<font size="-1">
URI_NO_WWW_INFO_CGI
</font>
</td>
<td>
2.299 2.299 0.292 2.071
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_NO_WWW_INFO_CGI">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
CGI in .biz TLD other than third-level "www"
</font>
</td>
<td>
<font size="-1">
URI_NO_WWW_BIZ_CGI
</font>
</td>
<td>
2.399 2.399 2.400 2.399
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_NO_WWW_BIZ_CGI">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Uses a dotted-decimal IP address in URL
</font>
</td>
<td>
<font size="-1">
NORMAL_HTTP_TO_IP
</font>
</td>
<td>
0.159 0.001 0.795 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NORMAL_HTTP_TO_IP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 0 to 1%
</font>
</td>
<td>
<font size="-1">
BAYES_00
</font>
</td>
<td>
0 0 -1.5 -1.9
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_00">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 1 to 5%
</font>
</td>
<td>
<font size="-1">
BAYES_05
</font>
</td>
<td>
0 0 -0.3 -0.5
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_05">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 5 to 20%
</font>
</td>
<td>
<font size="-1">
BAYES_20
</font>
</td>
<td>
0 0 -0.001 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_20">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 20 to 40%
</font>
</td>
<td>
<font size="-1">
BAYES_40
</font>
</td>
<td>
0 0 -0.001 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_40">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 40 to 60%
</font>
</td>
<td>
<font size="-1">
BAYES_50
</font>
</td>
<td>
0 0 2.0 0.8
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_50">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 60 to 80%
</font>
</td>
<td>
<font size="-1">
BAYES_60
</font>
</td>
<td>
0 0 2.5 1.5
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_60">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 80 to 95%
</font>
</td>
<td>
<font size="-1">
BAYES_80
</font>
</td>
<td>
0 0 2.7 2.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_80">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 95 to 99%
</font>
</td>
<td>
<font size="-1">
BAYES_95
</font>
</td>
<td>
0 0 3.2 3.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_95">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bayes spam probability is 99 to 100%
</font>
</td>
<td>
<font size="-1">
BAYES_99
</font>
</td>
<td>
0 0 3.8 3.5
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BAYES_99">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message would have been caught by accessdb
</font>
</td>
<td>
<font size="-1">
ACCESSDB
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/ACCESSDB">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message includes Microsoft executable program
</font>
</td>
<td>
<font size="-1">
MICROSOFT_EXECUTABLE
</font>
</td>
<td>
0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MICROSOFT_EXECUTABLE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
MIME filename does not match content
</font>
</td>
<td>
<font size="-1">
MIME_SUSPECT_NAME
</font>
</td>
<td>
0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_SUSPECT_NAME">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
</font>
</td>
<td>
<font size="-1">
DCC_CHECK
</font>
</td>
<td>
0 1.1 0 1.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_CHECK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
DCC reputation between 0 and 12 % (mostly ham)
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_00_12
</font>
</td>
<td>
0 -0.8 0 -0.4
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_00_12">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_dcc_reputation_range(13,19)
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_13_19
</font>
</td>
<td>
0 -0.1 0 -0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_13_19">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
DCC reputation between 70 and 89 %
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_70_89
</font>
</td>
<td>
0 0.1 0 0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_70_89">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
DCC reputation between 90 and 94 %
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_90_94
</font>
</td>
<td>
0 0.4 0 0.6
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_90_94">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
DCC reputation between 95 and 98 % (mostly spam)
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_95_98
</font>
</td>
<td>
0 0.7 0 1.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_95_98">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
DCC reputation between 99 % or higher (spam)
</font>
</td>
<td>
<font size="-1">
DCC_REPUT_99_100
</font>
</td>
<td>
0 1.2 0 1.4
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DCC_REPUT_99_100">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has a DKIM or DK signature, not necessarily valid
</font>
</td>
<td>
<font size="-1">
DKIM_SIGNED
</font>
</td>
<td>
0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_SIGNED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has at least one valid DKIM or DK signature
</font>
</td>
<td>
<font size="-1">
DKIM_VALID
</font>
</td>
<td>
-0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_VALID">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has a valid DKIM or DK signature from author's domain
</font>
</td>
<td>
<font size="-1">
DKIM_VALID_AU
</font>
</td>
<td>
-0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_VALID_AU">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature and domain not in DNS
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_NXDOMAIN
</font>
</td>
<td>
0 0.8 0 0.9
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_NXDOMAIN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature, domain signs all mail and suggests discarding the rest
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_DISCARD
</font>
</td>
<td>
0 1.8 0 1.8
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_DISCARD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature, domain signs all mail
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_ALL
</font>
</td>
<td>
0 1.1 0 0.8
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_ALL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature, adsp_override is CUSTOM_LOW
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_CUSTOM_LOW
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_CUSTOM_LOW">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature, adsp_override is CUSTOM_MED
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_CUSTOM_MED
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_CUSTOM_MED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
No valid author signature, adsp_override is CUSTOM_HIGH
</font>
</td>
<td>
<font size="-1">
DKIM_ADSP_CUSTOM_HIGH
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_ADSP_CUSTOM_HIGH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_dkim_valid()
</font>
</td>
<td>
<font size="-1">
DKIM_VERIFIED
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_VERIFIED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_dkim_testing()
</font>
</td>
<td>
<font size="-1">
DKIM_POLICY_TESTING
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_POLICY_TESTING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_dkim_signsome()
</font>
</td>
<td>
<font size="-1">
DKIM_POLICY_SIGNSOME
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_POLICY_SIGNSOME">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_dkim_signall()
</font>
</td>
<td>
<font size="-1">
DKIM_POLICY_SIGNALL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DKIM_POLICY_SIGNALL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (20 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_20
</font>
</td>
<td>
-0.5
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_20">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (21 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_21
</font>
</td>
<td>
-0.7
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_21">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (22 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_22
</font>
</td>
<td>
-1.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_22">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (23 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_23
</font>
</td>
<td>
-2.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_23">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (24 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_24
</font>
</td>
<td>
-3.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_24">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (25 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_25
</font>
</td>
<td>
-4.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_25">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains valid Hashcash token (>25 bits)
</font>
</td>
<td>
<font size="-1">
HASHCASH_HIGH
</font>
</td>
<td>
-5.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_HIGH">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Hashcash token already spent in another mail
</font>
</td>
<td>
<font size="-1">
HASHCASH_2SPEND
</font>
</td>
<td>
0.1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HASHCASH_2SPEND">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Listed in Pyzor (http://pyzor.sf.net/)
</font>
</td>
<td>
<font size="-1">
PYZOR_CHECK
</font>
</td>
<td>
0 1.985 0 1.392
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/PYZOR_CHECK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Listed in Razor2 (http://razor.sf.net/)
</font>
</td>
<td>
<font size="-1">
RAZOR2_CHECK
</font>
</td>
<td>
0 1.729 0 0.922
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RAZOR2_CHECK">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Razor2 gives confidence level above 50%
</font>
</td>
<td>
<font size="-1">
RAZOR2_CF_RANGE_51_100
</font>
</td>
<td>
0 0.365 0 0.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RAZOR2_CF_RANGE_51_100">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Razor2 gives engine 4 confidence level above 50%
</font>
</td>
<td>
<font size="-1">
RAZOR2_CF_RANGE_E4_51_100
</font>
</td>
<td>
0 0.467 0 0.642
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RAZOR2_CF_RANGE_E4_51_100">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Razor2 gives engine 8 confidence level above 50%
</font>
</td>
<td>
<font size="-1">
RAZOR2_CF_RANGE_E8_51_100
</font>
</td>
<td>
0 2.430 0 1.886
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RAZOR2_CF_RANGE_E8_51_100">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in Subject:
</font>
</td>
<td>
<font size="-1">
SUBJECT_FUZZY_MEDS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_FUZZY_MEDS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in Subject:
</font>
</td>
<td>
<font size="-1">
SUBJECT_FUZZY_CHEAP
</font>
</td>
<td>
0.641 1.831 0.833 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_FUZZY_CHEAP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in Subject:
</font>
</td>
<td>
<font size="-1">
SUBJECT_FUZZY_PENIS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_FUZZY_PENIS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in Subject:
</font>
</td>
<td>
<font size="-1">
SUBJECT_FUZZY_TION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_FUZZY_TION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_AFFORDABLE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_AFFORDABLE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_AMBIEN
</font>
</td>
<td>
2.199 1.851 0.925 0.552
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_AMBIEN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_BILLION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_BILLION">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_CPILL
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_CPILL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_CREDIT
</font>
</td>
<td>
1.699 1.413 0.601 1.678
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_CREDIT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_ERECT
</font>
</td>
<td>
2.356 1.306 2.360 1.859
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_ERECT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_GUARANTEE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_GUARANTEE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_MEDICATION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_MEDICATION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_MILLION
</font>
</td>
<td>
2.599 2.599 1.659 2.505
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_MILLION">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_MONEY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_MONEY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_MORTGAGE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_MORTGAGE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_OBLIGATION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_OBLIGATION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_OFFERS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_OFFERS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_PHARMACY
</font>
</td>
<td>
2.960 3.299 1.967 1.353
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_PHARMACY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_PHENT
</font>
</td>
<td>
2.799 1.647 1.540 2.662
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_PHENT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_PRESCRIPT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_PRESCRIPT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_PRICES
</font>
</td>
<td>
1.821 0.720 2.210 2.311
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_PRICES">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_REFINANCE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_REFINANCE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_REMOVE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_REMOVE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_ROLEX
</font>
</td>
<td>
3.399 1.038 3.399 1.964
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_ROLEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_SOFTWARE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_SOFTWARE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_THOUSANDS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_THOUSANDS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_VLIUM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_VLIUM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_VIOXX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_VIOXX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_VPILL
</font>
</td>
<td>
0.001 0.494 0.796 1.014
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_VPILL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Attempt to obfuscate words in spam
</font>
</td>
<td>
<font size="-1">
FUZZY_XPILL
</font>
</td>
<td>
2.202 1.752 2.799 2.799
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_XPILL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: sender matches SPF record
</font>
</td>
<td>
<font size="-1">
SPF_PASS
</font>
</td>
<td>
-0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_PASS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: sender does not match SPF record (neutral)
</font>
</td>
<td>
<font size="-1">
SPF_NEUTRAL
</font>
</td>
<td>
0 0.652 0 0.779
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_NEUTRAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: sender does not match SPF record (fail)
</font>
</td>
<td>
<font size="-1">
SPF_FAIL
</font>
</td>
<td>
0 0.919 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_FAIL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: sender does not match SPF record (softfail)
</font>
</td>
<td>
<font size="-1">
SPF_SOFTFAIL
</font>
</td>
<td>
0 0.972 0 0.665
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_SOFTFAIL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: HELO matches SPF record
</font>
</td>
<td>
<font size="-1">
SPF_HELO_PASS
</font>
</td>
<td>
-0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_HELO_PASS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: HELO does not match SPF record (neutral)
</font>
</td>
<td>
<font size="-1">
SPF_HELO_NEUTRAL
</font>
</td>
<td>
0 0.001 0 0.112
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_HELO_NEUTRAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: HELO does not match SPF record (fail)
</font>
</td>
<td>
<font size="-1">
SPF_HELO_FAIL
</font>
</td>
<td>
0 0.001 0 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_HELO_FAIL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
SPF: HELO does not match SPF record (softfail)
</font>
</td>
<td>
<font size="-1">
SPF_HELO_SOFTFAIL
</font>
</td>
<td>
0 0.896 0 0.732
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SPF_HELO_SOFTFAIL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message written in an undesired language
</font>
</td>
<td>
<font size="-1">
UNWANTED_LANGUAGE_BODY
</font>
</td>
<td>
2.800
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/UNWANTED_LANGUAGE_BODY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Body includes 8 consecutive 8-bit characters
</font>
</td>
<td>
<font size="-1">
BODY_8BITS
</font>
</td>
<td>
1.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BODY_8BITS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the SBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_SBL
</font>
</td>
<td>
0 0.644 0 1.623
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_SBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the SC SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_SC_SURBL
</font>
</td>
<td>
0 0.001 0 0.568
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_SC_SURBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the WS SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_WS_SURBL
</font>
</td>
<td>
0 1.659 0 1.608
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_WS_SURBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the PH SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_PH_SURBL
</font>
</td>
<td>
0 0.001 0 0.610
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_PH_SURBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the OB SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_OB_SURBL
</font>
</td>
<td>
0 0.785 0 0.122
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_OB_SURBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the AB SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_AB_SURBL
</font>
</td>
<td>
0 4.499 0 4.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_AB_SURBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the JP SURBL blocklist
</font>
</td>
<td>
<font size="-1">
URIBL_JP_SURBL
</font>
</td>
<td>
0 1.948 0 1.250
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_JP_SURBL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the URIBL blacklist
</font>
</td>
<td>
<font size="-1">
URIBL_BLACK
</font>
</td>
<td>
0 1.775 0 1.725
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_BLACK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the URIBL greylist
</font>
</td>
<td>
<font size="-1">
URIBL_GREY
</font>
</td>
<td>
0 1.084 0 0.424
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_GREY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URL listed in the URIBL redlist
</font>
</td>
<td>
<font size="-1">
URIBL_RED
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_RED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the auto white-list
</font>
</td>
<td>
<font size="-1">
AWL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AWL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Not all rules were run, due to a shortcircuited rule
</font>
</td>
<td>
<font size="-1">
SHORTCIRCUIT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SHORTCIRCUIT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the user's black-list
</font>
</td>
<td>
<font size="-1">
USER_IN_BLACKLIST
</font>
</td>
<td>
100.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_BLACKLIST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the user's white-list
</font>
</td>
<td>
<font size="-1">
USER_IN_WHITELIST
</font>
</td>
<td>
-100.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_WHITELIST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the default white-list
</font>
</td>
<td>
<font size="-1">
USER_IN_DEF_WHITELIST
</font>
</td>
<td>
-15.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_DEF_WHITELIST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
User is listed in 'blacklist_to'
</font>
</td>
<td>
<font size="-1">
USER_IN_BLACKLIST_TO
</font>
</td>
<td>
10.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_BLACKLIST_TO">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
User is listed in 'whitelist_to'
</font>
</td>
<td>
<font size="-1">
USER_IN_WHITELIST_TO
</font>
</td>
<td>
-6.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_WHITELIST_TO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
User is listed in 'more_spam_to'
</font>
</td>
<td>
<font size="-1">
USER_IN_MORE_SPAM_TO
</font>
</td>
<td>
-20.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_MORE_SPAM_TO">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
User is listed in 'all_spam_to'
</font>
</td>
<td>
<font size="-1">
USER_IN_ALL_SPAM_TO
</font>
</td>
<td>
-100.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_ALL_SPAM_TO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the user's DKIM whitelist
</font>
</td>
<td>
<font size="-1">
USER_IN_DKIM_WHITELIST
</font>
</td>
<td>
-100.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_DKIM_WHITELIST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the default DKIM white-list
</font>
</td>
<td>
<font size="-1">
USER_IN_DEF_DKIM_WL
</font>
</td>
<td>
-7.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_DEF_DKIM_WL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the user's SPF whitelist
</font>
</td>
<td>
<font size="-1">
USER_IN_SPF_WHITELIST
</font>
</td>
<td>
-100.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_SPF_WHITELIST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From: address is in the default SPF white-list
</font>
</td>
<td>
<font size="-1">
USER_IN_DEF_SPF_WL
</font>
</td>
<td>
-7.500
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/USER_IN_DEF_SPF_WL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject: contains string in the user's white-list
</font>
</td>
<td>
<font size="-1">
SUBJECT_IN_WHITELIST
</font>
</td>
<td>
-100
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_IN_WHITELIST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject: contains string in the user's black-list
</font>
</td>
<td>
<font size="-1">
SUBJECT_IN_BLACKLIST
</font>
</td>
<td>
100
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SUBJECT_IN_BLACKLIST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From address contains an apostrophe
</font>
</td>
<td>
<font size="-1">
APOSTROPHE_FROM
</font>
</td>
<td>
0.148 0.786 0.651 0.545
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/APOSTROPHE_FROM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HELO from home - untrusted
</font>
</td>
<td>
<font size="-1">
AXB_HELO_HOME_UN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_HELO_HOME_UN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Barbera Fingerprint
</font>
</td>
<td>
<font size="-1">
AXB_XMID_1212
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_XMID_1212">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Brunello Fingerprint
</font>
</td>
<td>
<font size="-1">
AXB_XMID_1510
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_XMID_1510">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Amarone Fingerprint
</font>
</td>
<td>
<font size="-1">
AXB_XMID_OEGOESNULL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_XMID_OEGOESNULL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Nebbiolo fingerprint
</font>
</td>
<td>
<font size="-1">
AXB_XM_SENDMAIL_NOT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_XM_SENDMAIL_NOT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /\(8\.12\.3 da nor stuldap\/8\.12\.3\)/
</font>
</td>
<td>
<font size="-1">
AXB_XR_STULDAP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/AXB_XR_STULDAP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about banking laws
</font>
</td>
<td>
<font size="-1">
BANKING_LAWS
</font>
</td>
<td>
2.399 2.004 2.157 1.099
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BANKING_LAWS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_base64_length('78','79')
</font>
</td>
<td>
<font size="-1">
BASE64_LENGTH_78_79
</font>
</td>
<td>
2.370 2.636 0.762 2.667
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BASE64_LENGTH_78_79">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_base64_length('79')
</font>
</td>
<td>
<font size="-1">
BASE64_LENGTH_79_INF
</font>
</td>
<td>
1.379 2.019 0.583 1.502
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BASE64_LENGTH_79_INF">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date =~ /[-+](?!(?:0\d| 1[0-4])(?:[03]0| [14]5))\d{4}/
</font>
</td>
<td>
<font size="-1">
BUG6152_INVALID_DATE_TZ_ABSURD
</font>
</td>
<td>
1.802 1.448 0.024 0.766
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/BUG6152_INVALID_DATE_TZ_ABSURD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /multipart.{0,200}boundary=\"----=_NextPart_000_0000_01C[0-9A-F]{5}\.[0-9A-F]{7}0\"/
</font>
</td>
<td>
<font size="-1">
CTYPE_001C_B
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/CTYPE_001C_B">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bCurrent Price:/
</font>
</td>
<td>
<font size="-1">
CURR_PRICE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/CURR_PRICE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Dear Beneficiary:
</font>
</td>
<td>
<font size="-1">
DEAR_BENEFICIARY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DEAR_BENEFICIARY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message contains Dear email address
</font>
</td>
<td>
<font size="-1">
DEAR_EMAIL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DEAR_EMAIL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bdear.{1,20}winner/i
</font>
</td>
<td>
<font size="-1">
DEAR_WINNER
</font>
</td>
<td>
3.099 3.099 2.309 3.099
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DEAR_WINNER">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-mailer pattern common to anal porn site spam
</font>
</td>
<td>
<font size="-1">
DOS_ANAL_SPAM_MAILER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DOS_ANAL_SPAM_MAILER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received from the same IP twice in a row (only one external relay; empty or IP helo)
</font>
</td>
<td>
<font size="-1">
DOS_RCVD_IP_TWICE_C
</font>
</td>
<td>
2.599 2.060 3.292 0.096
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DOS_RCVD_IP_TWICE_C">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Found an asterisk in a URI
</font>
</td>
<td>
<font size="-1">
DOS_URI_ASTERISK
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DOS_URI_ASTERISK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /\bhoodia\b/i
</font>
</td>
<td>
<font size="-1">
DRUGS_HDIA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/DRUGS_HDIA">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Add / Gain inches
</font>
</td>
<td>
<font size="-1">
FB_ADD_INCHES
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ADD_INCHES">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
It's almost sex, but not!
</font>
</td>
<td>
<font size="-1">
FB_ALMOST_SEX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ALMOST_SEX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Broken AnaTrim phrase.
</font>
</td>
<td>
<font size="-1">
FB_ANA_TRIM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ANA_TRIM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: A_U_N_I
</font>
</td>
<td>
<font size="-1">
FB_ANUI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ANUI">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: [BM]Illi0n
</font>
</td>
<td>
<font size="-1">
FB_BILLI0N
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_BILLI0N">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: C0mpany
</font>
</td>
<td>
<font size="-1">
FB_C0MPANY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_C0MPANY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: can last longer
</font>
</td>
<td>
<font size="-1">
FB_CAN_LONGER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_CAN_LONGER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Uses a mis-spelled version of cialis.
</font>
</td>
<td>
<font size="-1">
FB_CIALIS_LEO3
</font>
</td>
<td>
1.688 3.055 2.465 3.245
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_CIALIS_LEO3">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like double 0 words
</font>
</td>
<td>
<font size="-1">
FB_DOUBLE_0WORDS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_DOUBLE_0WORDS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: email hier
</font>
</td>
<td>
<font size="-1">
FB_EMAIL_HIER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_EMAIL_HIER">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: extra inches
</font>
</td>
<td>
<font size="-1">
FB_EXTRA_INCHES
</font>
</td>
<td>
0.289 0.000 2.603 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_EXTRA_INCHES">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like numbers with O's insted of 0's
</font>
</td>
<td>
<font size="-1">
FB_FAKE_NUMBERS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_FAKE_NUMBERS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like fake numbers (4)
</font>
</td>
<td>
<font size="-1">
FB_FAKE_NUMS4
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_FAKE_NUMS4">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Farmacy
</font>
</td>
<td>
<font size="-1">
FB_FHARMACY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_FHARMACY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: forward look with 0's
</font>
</td>
<td>
<font size="-1">
FB_FORWARD_LOOK
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_FORWARD_LOOK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Too much spacing in Address
</font>
</td>
<td>
<font size="-1">
FB_GAPPY_ADDRESS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_GAPPY_ADDRESS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like trying to sell meds
</font>
</td>
<td>
<font size="-1">
FB_GET_MEDS
</font>
</td>
<td>
2.314 2.027 1.195 0.935
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_GET_MEDS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like generic viagra
</font>
</td>
<td>
<font size="-1">
FB_GVR
</font>
</td>
<td>
2.340 0.691 2.568 2.301
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_GVR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase hey bro,
</font>
</td>
<td>
<font size="-1">
FB_HEY_BRO_COMMA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_HEY_BRO_COMMA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: HGH
</font>
</td>
<td>
<font size="-1">
FB_HG_H_CAP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_HG_H_CAP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase (dollar) x home loan
</font>
</td>
<td>
<font size="-1">
FB_HOMELOAN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_HOMELOAN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: impress ... girl
</font>
</td>
<td>
<font size="-1">
FB_IMPRESS_GIRL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_IMPRESS_GIRL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Increase your energy
</font>
</td>
<td>
<font size="-1">
FB_INCREASE_YOUR
</font>
</td>
<td>
2.699 2.700 2.335 2.343
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_INCREASE_YOUR">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: independent reward
</font>
</td>
<td>
<font size="-1">
FB_INDEPEND_RWD
</font>
</td>
<td>
2.799
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_INDEPEND_RWD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: L0an
</font>
</td>
<td>
<font size="-1">
FB_L0AN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_L0AN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Special people leave special signs!
</font>
</td>
<td>
<font size="-1">
FB_LETTERS_21B
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_LETTERS_21B">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: LOSE WEIGHT
</font>
</td>
<td>
<font size="-1">
FB_LOSE_WEIGHT_CAP
</font>
</td>
<td>
0.001 0.001 2.187 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_LOSE_WEIGHT_CAP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: lower your monthly payments
</font>
</td>
<td>
<font size="-1">
FB_LOWER_PAYM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_LOWER_PAYM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: more size
</font>
</td>
<td>
<font size="-1">
FB_MORE_SIZE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_MORE_SIZE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like a fake phone number (1)
</font>
</td>
<td>
<font size="-1">
FB_NOT_PHONE_NUM1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NOT_PHONE_NUM1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like a fake phone number (3)
</font>
</td>
<td>
<font size="-1">
FB_NOT_PHONE_NUM3
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NOT_PHONE_NUM3">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like school but it's not!
</font>
</td>
<td>
<font size="-1">
FB_NOT_SCHOOL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NOT_SCHOOL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: no prescription needed.
</font>
</td>
<td>
<font size="-1">
FB_NO_SCRIP_NEEDED
</font>
</td>
<td>
1.656 1.469 2.133 0.922
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NO_SCRIP_NEEDED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Speaks of teenager.
</font>
</td>
<td>
<font size="-1">
FB_NUMYO
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NUMYO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Speaks of 20+ year old.
</font>
</td>
<td>
<font size="-1">
FB_NUMYO2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_NUMYO2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like money but has odd spacing.
</font>
</td>
<td>
<font size="-1">
FB_ODD_SPACED_MONEY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ODD_SPACED_MONEY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Mis-spelled online
</font>
</td>
<td>
<font size="-1">
FB_ONIINE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ONIINE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: p1ll
</font>
</td>
<td>
<font size="-1">
FB_P1LL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_P1LL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: penis growth
</font>
</td>
<td>
<font size="-1">
FB_PENIS_GROWTH
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_PENIS_GROWTH">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Dollar, with pipes or 0's.
</font>
</td>
<td>
<font size="-1">
FB_PIPEDOLLAR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_PIPEDOLLAR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like illion, but it's not
</font>
</td>
<td>
<font size="-1">
FB_PIPE_ILLION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_PIPE_ILLION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about prolonged hardness
</font>
</td>
<td>
<font size="-1">
FB_PROLONGED_HARD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_PROLONGED_HARD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: quality replica
</font>
</td>
<td>
<font size="-1">
FB_QUALITY_REPLICA
</font>
</td>
<td>
3.313 3.149 2.005 2.308
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_QUALITY_REPLICA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Refcode with spacing
</font>
</td>
<td>
<font size="-1">
FB_REF_CODE_SPACE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_REF_CODE_SPACE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Replica Rolex
</font>
</td>
<td>
<font size="-1">
FB_REPLICA_ROLEX
</font>
</td>
<td>
1.674 0.710 1.115 3.175
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_REPLICA_ROLEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: REPLICA
</font>
</td>
<td>
<font size="-1">
FB_REPLIC_CAP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_REPLIC_CAP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like refi.
</font>
</td>
<td>
<font size="-1">
FB_RE_FI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_RE_FI">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Roller is th
</font>
</td>
<td>
<font size="-1">
FB_ROLLER_IS_T
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ROLLER_IS_T">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: rolx
</font>
</td>
<td>
<font size="-1">
FB_ROLX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ROLX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: save ... prescription.
</font>
</td>
<td>
<font size="-1">
FB_SAVE_PERSC
</font>
</td>
<td>
2.799 0.367 1.864 1.492
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SAVE_PERSC">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Softabs
</font>
</td>
<td>
<font size="-1">
FB_SOFTTABS
</font>
</td>
<td>
2.887 3.174 3.378 1.584
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SOFTTABS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: F R E E
</font>
</td>
<td>
<font size="-1">
FB_SPACED_FREE
</font>
</td>
<td>
2.499 2.499 2.203 0.395
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SPACED_FREE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phone number with -- spacing. (B)
</font>
</td>
<td>
<font size="-1">
FB_SPACED_PHN_3B
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SPACED_PHN_3B">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like a s p a c e d zipcode.
</font>
</td>
<td>
<font size="-1">
FB_SPACEY_ZIP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SPACEY_ZIP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: SPUR-M
</font>
</td>
<td>
<font size="-1">
FB_SPUR_M
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SPUR_M">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: ssex
</font>
</td>
<td>
<font size="-1">
FB_SSEX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SSEX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like stocks exploding.
</font>
</td>
<td>
<font size="-1">
FB_STOCK_EXPLODE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_STOCK_EXPLODE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Mis-spelled symbol.
</font>
</td>
<td>
<font size="-1">
FB_SYMBLO
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_SYMBLO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: this advertiser
</font>
</td>
<td>
<font size="-1">
FB_THIS_ADVERT
</font>
</td>
<td>
3.599 3.600 2.999 3.599
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_THIS_ADVERT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: thousand personal
</font>
</td>
<td>
<font size="-1">
FB_THOUS_PERSONAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_THOUS_PERSONAL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: to stop further distribution
</font>
</td>
<td>
<font size="-1">
FB_TO_STOP_DISTRO
</font>
</td>
<td>
3.399
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_TO_STOP_DISTRO">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Ultra Allure
</font>
</td>
<td>
<font size="-1">
FB_ULTRA_ALLURE
</font>
</td>
<td>
2.352 1.074 2.334 0.829
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_ULTRA_ALLURE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: lock to your girlfriend
</font>
</td>
<td>
<font size="-1">
FB_UNLOCK_YOUR_G
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_UNLOCK_YOUR_G">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Pattern Replacement PROV_D
</font>
</td>
<td>
<font size="-1">
FB_UNRESOLV_PROV
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_UNRESOLV_PROV">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: yourself master
</font>
</td>
<td>
<font size="-1">
FB_YOURSELF_MASTER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_YOURSELF_MASTER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Your refi
</font>
</td>
<td>
<font size="-1">
FB_YOUR_REFI
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FB_YOUR_REFI">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bad X-Mailer version
</font>
</td>
<td>
<font size="-1">
FH_BAD_OEV1441
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_BAD_OEV1441">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
The date is not 19xx.
</font>
</td>
<td>
<font size="-1">
FH_DATE_IS_19XX
</font>
</td>
<td>
0.000 1.598 2.373 0.277
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_DATE_IS_19XX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
RCVD line looks faked (A)
</font>
</td>
<td>
<font size="-1">
FH_FAKE_RCVD_LINE
</font>
</td>
<td>
2.167 1.431 2.525 1.778
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FAKE_RCVD_LINE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
RCVD line looks faked (B)
</font>
</td>
<td>
<font size="-1">
FH_FAKE_RCVD_LINE_B
</font>
</td>
<td>
4.000 3.372 3.999 3.999
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FAKE_RCVD_LINE_B">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
E-mail address doesn't have TLD (.com, etc.)
</font>
</td>
<td>
<font size="-1">
FH_FROMEML_NOTLD
</font>
</td>
<td>
1.708 0.180 0.975 1.082
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FROMEML_NOTLD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From name has "cash"
</font>
</td>
<td>
<font size="-1">
FH_FROM_CASH
</font>
</td>
<td>
2.599 2.436 2.599 1.739
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FROM_CASH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From name says Get
</font>
</td>
<td>
<font size="-1">
FH_FROM_GET_NAME
</font>
</td>
<td>
2.699
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FROM_GET_NAME">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From name is giveaway.
</font>
</td>
<td>
<font size="-1">
FH_FROM_GIVEAWAY
</font>
</td>
<td>
2.599 1.817 1.810 1.655
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FROM_GIVEAWAY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From has Hoodia!!?
</font>
</td>
<td>
<font size="-1">
FH_FROM_HOODIA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_FROM_HOODIA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Has X-AIMC-AUTH header
</font>
</td>
<td>
<font size="-1">
FH_HAS_XAIMC
</font>
</td>
<td>
1.602 1.899 0.561 1.899
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HAS_XAIMC">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Has X-ID
</font>
</td>
<td>
<font size="-1">
FH_HAS_XID
</font>
</td>
<td>
3.299 3.215 3.003 1.782
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HAS_XID">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Helo is almost an IP addr.
</font>
</td>
<td>
<font size="-1">
FH_HELO_ALMOST_IP
</font>
</td>
<td>
3.699 3.268 3.457 0.688
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_ALMOST_IP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Helo ends with a dot.
</font>
</td>
<td>
<font size="-1">
FH_HELO_ENDS_DOT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_ENDS_DOT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Helo is 6-10 hex chr's.
</font>
</td>
<td>
<font size="-1">
FH_HELO_EQ_610HEX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_EQ_610HEX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Helo is d-d-d-d charter.com
</font>
</td>
<td>
<font size="-1">
FH_HELO_EQ_CHARTER
</font>
</td>
<td>
0.607 0.286 0.093 2.683
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_EQ_CHARTER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Helo is d-d-d-d
</font>
</td>
<td>
<font size="-1">
FH_HELO_EQ_D_D_D_D
</font>
</td>
<td>
2.361 1.117 2.815 3.177
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_EQ_D_D_D_D">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Faked helo of gmail-smtp-in
</font>
</td>
<td>
<font size="-1">
FH_HELO_GMAILSMTP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HELO_GMAILSMTP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Host is dynamicip
</font>
</td>
<td>
<font size="-1">
FH_HOST_EQ_DYNAMICIP
</font>
</td>
<td>
2.632 2.454 3.299 3.298
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HOST_EQ_DYNAMICIP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Host is pacbell.net dsl
</font>
</td>
<td>
<font size="-1">
FH_HOST_EQ_PACBELL_D
</font>
</td>
<td>
0.001 0.927 0.559 1.703
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HOST_EQ_PACBELL_D">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Host is pool-.+verizon.net
</font>
</td>
<td>
<font size="-1">
FH_HOST_EQ_VERIZON_P
</font>
</td>
<td>
2.681 1.237 3.671 1.323
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HOST_EQ_VERIZON_P">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HOST dns says "in-addr.arpa"
</font>
</td>
<td>
<font size="-1">
FH_HOST_IN_ADDRARPA
</font>
</td>
<td>
3.199 2.933 2.452 2.157
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_HOST_IN_ADDRARPA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Special MSGID
</font>
</td>
<td>
<font size="-1">
FH_MSGID_000000
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_000000">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Special MSGID
</font>
</td>
<td>
<font size="-1">
FH_MSGID_01C67
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_01C67">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
MESSAGE ID seen often!!!
</font>
</td>
<td>
<font size="-1">
FH_MSGID_01C70XXX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_01C70XXX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Broken Replace Template
</font>
</td>
<td>
<font size="-1">
FH_MSGID_REPLACE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_REPLACE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Common sign in msg-id's 12/21/2006
</font>
</td>
<td>
<font size="-1">
FH_MSGID_XXBLAH
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_XXBLAH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-Id = @xxx
</font>
</td>
<td>
<font size="-1">
FH_MSGID_XXX
</font>
</td>
<td>
2.399 1.632 2.376 1.482
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_MSGID_XXX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject is Re: new \d\d\d
</font>
</td>
<td>
<font size="-1">
FH_RE_NEW_DDD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_RE_NEW_DDD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Broken Replace Template
</font>
</td>
<td>
<font size="-1">
FH_XMAIL_REPLACE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FH_XMAIL_REPLACE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Fill in a form with personal information
</font>
</td>
<td>
<font size="-1">
FILL_THIS_FORM_LONG
</font>
</td>
<td>
3.800 3.476 2.300 3.404
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FILL_THIS_FORM_LONG">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like Fake Outlook?
</font>
</td>
<td>
<font size="-1">
FM_XMAIL_F_OUT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FM_XMAIL_F_OUT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^\[ ip=(?!127)([\d.]+) [^\[]*\[ ip=\1 [^\[]+ helo=(!(?!(?:10| 127| 169\.254| 172\.(?:1[6-9]| 2[0-9]| 3[01])| 192\.168)\.)| )[^\[]+(dollar) /
</font>
</td>
<td>
<font size="-1">
FORGED_RELAY_MUA_TO_MX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FORGED_RELAY_MUA_TO_MX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Adobe
</font>
</td>
<td>
<font size="-1">
FRT_ADOBE2
</font>
</td>
<td>
0.001 1.099 0.221 0.877
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_ADOBE2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Approve
</font>
</td>
<td>
<font size="-1">
FRT_APPROV
</font>
</td>
<td>
2.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_APPROV">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Bigger / Larger, Penis / Member
</font>
</td>
<td>
<font size="-1">
FRT_BIGGERMEM1
</font>
</td>
<td>
2.523 0.146 2.372 1.758
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_BIGGERMEM1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Diploma
</font>
</td>
<td>
<font size="-1">
FRT_DIPLOMA
</font>
</td>
<td>
0.000 1.548 0.787 1.599
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_DIPLOMA">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Discount
</font>
</td>
<td>
<font size="-1">
FRT_DISCOUNT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_DISCOUNT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Dollar
</font>
</td>
<td>
<font size="-1">
FRT_DOLLAR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_DOLLAR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Establish (2)
</font>
</td>
<td>
<font size="-1">
FRT_ESTABLISH2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_ESTABLISH2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Fuck (2)
</font>
</td>
<td>
<font size="-1">
FRT_FUCK2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_FUCK2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Guarantee (1)
</font>
</td>
<td>
<font size="-1">
FRT_GUARANTEE1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_GUARANTEE1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Investor
</font>
</td>
<td>
<font size="-1">
FRT_INVESTOR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_INVESTOR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Levitra
</font>
</td>
<td>
<font size="-1">
FRT_LEVITRA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_LEVITRA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Meeting
</font>
</td>
<td>
<font size="-1">
FRT_MEETING
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_MEETING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Offer (2)
</font>
</td>
<td>
<font size="-1">
FRT_OFFER2
</font>
</td>
<td>
1.681 1.109 2.048 0.926
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_OFFER2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Oppertun (2)
</font>
</td>
<td>
<font size="-1">
FRT_OPPORTUN2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_OPPORTUN2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Penis
</font>
</td>
<td>
<font size="-1">
FRT_PENIS1
</font>
</td>
<td>
2.299 2.293 1.029 0.731
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_PENIS1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Pharmac
</font>
</td>
<td>
<font size="-1">
FRT_PHARMAC
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_PHARMAC">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Price
</font>
</td>
<td>
<font size="-1">
FRT_PRICE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_PRICE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Refinance (1)
</font>
</td>
<td>
<font size="-1">
FRT_REFINANCE1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_REFINANCE1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Rolex
</font>
</td>
<td>
<font size="-1">
FRT_ROLEX
</font>
</td>
<td>
2.699 2.183 1.440 2.699
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_ROLEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Sexual
</font>
</td>
<td>
<font size="-1">
FRT_SEXUAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_SEXUAL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Soma
</font>
</td>
<td>
<font size="-1">
FRT_SOMA
</font>
</td>
<td>
0.000 3.280 2.099 2.871
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_SOMA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Soma (2)
</font>
</td>
<td>
<font size="-1">
FRT_SOMA2
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_SOMA2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Strong (1)
</font>
</td>
<td>
<font size="-1">
FRT_STRONG1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_STRONG1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Strong (2)
</font>
</td>
<td>
<font size="-1">
FRT_STRONG2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_STRONG2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Symbol
</font>
</td>
<td>
<font size="-1">
FRT_SYMBOL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_SYMBOL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Today (2)
</font>
</td>
<td>
<font size="-1">
FRT_TODAY2
</font>
</td>
<td>
0.480 0.693 1.988 0.905
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_TODAY2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Valium
</font>
</td>
<td>
<font size="-1">
FRT_VALIUM1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_VALIUM1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Valium (2)
</font>
</td>
<td>
<font size="-1">
FRT_VALIUM2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_VALIUM2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Weight (2)
</font>
</td>
<td>
<font size="-1">
FRT_WEIGHT2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_WEIGHT2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Xanax (1)
</font>
</td>
<td>
<font size="-1">
FRT_XANAX1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_XANAX1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ReplaceTags: Xanax (2)
</font>
</td>
<td>
<font size="-1">
FRT_XANAX2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FRT_XANAX2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like 3 <e> small tags.
</font>
</td>
<td>
<font size="-1">
FR_3TAG_3TAG
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FR_3TAG_3TAG">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Almost looks like viagra.
</font>
</td>
<td>
<font size="-1">
FR_ALMOST_VIAG2
</font>
</td>
<td>
2.299 1.594 2.299 1.531
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FR_ALMOST_VIAG2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase class=cantseetext
</font>
</td>
<td>
<font size="-1">
FR_CANTSEETEXT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FR_CANTSEETEXT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sign often seen in spams
</font>
</td>
<td>
<font size="-1">
FR_MIDER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FR_MIDER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
HTML Title is only numbers
</font>
</td>
<td>
<font size="-1">
FR_TITLE_NUMS
</font>
</td>
<td>
2.899 2.695 2.899 2.899
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FR_TITLE_NUMS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /gmail-smtp-in\.l\.google\.com/
</font>
</td>
<td>
<font size="-1">
FSL_FAKE_GMAIL_RCVD
</font>
</td>
<td>
3.099 2.974 1.002 2.104
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_FAKE_GMAIL_RCVD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /mx[1234]\.hotmail\.com/
</font>
</td>
<td>
<font size="-1">
FSL_FAKE_HOTMAIL_RVCD
</font>
</td>
<td>
2.631 1.816 2.011 2.365
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_FAKE_HOTMAIL_RVCD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\/geocities\.com\/\S+(dollar) /
</font>
</td>
<td>
<font size="-1">
FSL_GEO_ABUSE
</font>
</td>
<td>
2.699 2.699 2.313 2.167
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_GEO_ABUSE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=\d+\.\d+\.\d+\.\d+ /i
</font>
</td>
<td>
<font size="-1">
FSL_HELO_BARE_IP_1
</font>
</td>
<td>
2.598 1.426 3.099 2.347
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_HELO_BARE_IP_1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /\bhelo=(?:(?:dsl)?device| speedtouch)\.lan\b/i
</font>
</td>
<td>
<font size="-1">
FSL_HELO_DEVICE
</font>
</td>
<td>
1.682 0.001 0.884 0.806
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_HELO_DEVICE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=[a-zA-Z0-9-_]+ /i
</font>
</td>
<td>
<font size="-1">
FSL_HELO_NON_FQDN_1
</font>
</td>
<td>
2.361 0.001 1.783 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_HELO_NON_FQDN_1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /\bhelo=\S+\.setup\b/i
</font>
</td>
<td>
<font size="-1">
FSL_HELO_SETUP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_HELO_SETUP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\/\S+\.(?:w| eu| fm)\.interia\.pl/
</font>
</td>
<td>
<font size="-1">
FSL_INTERIA_ABUSE
</font>
</td>
<td>
3.899 2.664 3.080 3.106
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_INTERIA_ABUSE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/cid\-\S+\.spaces\.live\.com/
</font>
</td>
<td>
<font size="-1">
FSL_LSPACES_ABUSE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_LSPACES_ABUSE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\/groups\.yahoo\.com\/group\/\S+\/message\/1(dollar) /
</font>
</td>
<td>
<font size="-1">
FSL_YG_ABUSE
</font>
</td>
<td>
4.199
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FSL_YG_ABUSE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject has "a bigger"
</font>
</td>
<td>
<font size="-1">
FS_ABIGGER
</font>
</td>
<td>
1.693 1.354 2.477 1.112
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_ABIGGER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says approve you
</font>
</td>
<td>
<font size="-1">
FS_APPROVE_YOU
</font>
</td>
<td>
2.499 1.272 1.942 1.873
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_APPROVE_YOU">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says "At No Cost"
</font>
</td>
<td>
<font size="-1">
FS_AT_NO_COST
</font>
</td>
<td>
2.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_AT_NO_COST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Cheap in Caps in Subject.
</font>
</td>
<td>
<font size="-1">
FS_CHEAP_CAP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_CHEAP_CAP">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject talks about money bonus!
</font>
</td>
<td>
<font size="-1">
FS_DOLLAR_BONUS
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_DOLLAR_BONUS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: ejaculation in subject.
</font>
</td>
<td>
<font size="-1">
FS_EJACULA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_EJACULA">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: erection in subject.
</font>
</td>
<td>
<font size="-1">
FS_ERECTION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_ERECTION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: Huge Cock
</font>
</td>
<td>
<font size="-1">
FS_HUGECOCK
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_HUGECOCK">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Larger than 100% in subj.
</font>
</td>
<td>
<font size="-1">
FS_LARGE_PERCENT2
</font>
</td>
<td>
2.645 2.699 0.001 1.960
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_LARGE_PERCENT2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says low rates
</font>
</td>
<td>
<font size="-1">
FS_LOW_RATES
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_LOW_RATES">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subj starts with New software uploaded
</font>
</td>
<td>
<font size="-1">
FS_NEW_SOFT_UPLOAD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_NEW_SOFT_UPLOAD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject looks like Fharmacy spams.
</font>
</td>
<td>
<font size="-1">
FS_NEW_XXX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_NEW_XXX">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject almost says No prescription
</font>
</td>
<td>
<font size="-1">
FS_NO_SCRIP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_NO_SCRIP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says Nude
</font>
</td>
<td>
<font size="-1">
FS_NUDE
</font>
</td>
<td>
2.399 1.653 1.288 1.101
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_NUDE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
what could this word be?
</font>
</td>
<td>
<font size="-1">
FS_OBFU_PRMCY
</font>
</td>
<td>
2.400 0.384 0.204 1.248
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_OBFU_PRMCY">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject mis-spelled prescription
</font>
</td>
<td>
<font size="-1">
FS_PERSCRIPTION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_PERSCRIPTION">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Looks like Phramacy subject.
</font>
</td>
<td>
<font size="-1">
FS_PHARMASUB2
</font>
</td>
<td>
2.980 1.345 2.956 0.549
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_PHARMASUB2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says Ramrod
</font>
</td>
<td>
<font size="-1">
FS_RAMROD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_RAMROD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says "replica"
</font>
</td>
<td>
<font size="-1">
FS_REPLICA
</font>
</td>
<td>
1.630 3.599 2.028 3.599
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_REPLICA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says Replica watch
</font>
</td>
<td>
<font size="-1">
FS_REPLICAWATCH
</font>
</td>
<td>
3.237 1.715 1.733 3.015
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_REPLICAWATCH">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: re approved
</font>
</td>
<td>
<font size="-1">
FS_RE_APPROV
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_RE_APPROV">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject starts with Do you dream,have,want,love, etc.
</font>
</td>
<td>
<font size="-1">
FS_START_DOYOU2
</font>
</td>
<td>
2.799 2.799 2.799 2.800
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_START_DOYOU2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject starts with Lose
</font>
</td>
<td>
<font size="-1">
FS_START_LOSE
</font>
</td>
<td>
0.249 0.176 1.424 1.809
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_START_LOSE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says something bad about teens
</font>
</td>
<td>
<font size="-1">
FS_TEEN_BAD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_TEEN_BAD">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Phrase: subject = tip ddd
</font>
</td>
<td>
<font size="-1">
FS_TIP_DDD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_TIP_DDD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says Weight Loss
</font>
</td>
<td>
<font size="-1">
FS_WEIGHT_LOSS
</font>
</td>
<td>
1.894 1.541 2.501 2.036
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_WEIGHT_LOSS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says will help
</font>
</td>
<td>
<font size="-1">
FS_WILL_HELP
</font>
</td>
<td>
2.599 0.893 2.484 0.734
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_WILL_HELP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject says With ... small
</font>
</td>
<td>
<font size="-1">
FS_WITH_SMALL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FS_WITH_SMALL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W3><post P2>\b(?!meridia)<M><E><R><I><D><I><A>\b/i
</font>
</td>
<td>
<font size="-1">
FUZZY_MERIDIA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FUZZY_MERIDIA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sub-dir seen often in spam (2).
</font>
</td>
<td>
<font size="-1">
FU_COMMON_SUBS2
</font>
</td>
<td>
2.801 2.650 2.823 0.292
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_COMMON_SUBS2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Ends with clk/d+.d+.d+
</font>
</td>
<td>
<font size="-1">
FU_ENDS_NUMS_DOTS_CLK
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_ENDS_NUMS_DOTS_CLK">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ET Phone Home?
</font>
</td>
<td>
<font size="-1">
FU_END_ET
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_END_ET">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URL has hoodia in it.
</font>
</td>
<td>
<font size="-1">
FU_HOODIA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_HOODIA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URL has a long file name with .aspx extension.
</font>
</td>
<td>
<font size="-1">
FU_LONG_QUERY3
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_LONG_QUERY3">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URL has /gal/
</font>
</td>
<td>
<font size="-1">
FU_MIDER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_MIDER">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URL with [a-z]{2}.geocities.com
</font>
</td>
<td>
<font size="-1">
FU_UKGEOCITIES
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_UKGEOCITIES">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
URI style tracker (T)
</font>
</td>
<td>
<font size="-1">
FU_URI_TRACKER_T
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/FU_URI_TRACKER_T">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/^http:\/\/(?:\w{2,4}\.)?geocities\.com(?::\d*)?\/.+?\/\?/i
</font>
</td>
<td>
<font size="-1">
GEO_QUERY_STRING
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/GEO_QUERY_STRING">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Misspaced headers
</font>
</td>
<td>
<font size="-1">
HDRS_MISSP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HDRS_MISSP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Multiple Subject headers found
</font>
</td>
<td>
<font size="-1">
HEADER_COUNT_SUBJECT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HEADER_COUNT_SUBJECT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=friend /i
</font>
</td>
<td>
<font size="-1">
HELO_FRIEND
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_FRIEND">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=\S+\.(?:home| lan) /i
</font>
</td>
<td>
<font size="-1">
HELO_LH_HOME
</font>
</td>
<td>
0.001 2.023 0.537 1.736
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_LH_HOME">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=localhost\.localdomain /i
</font>
</td>
<td>
<font size="-1">
HELO_LH_LD
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_LH_LD">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=localhost /i
</font>
</td>
<td>
<font size="-1">
HELO_LOCALHOST
</font>
</td>
<td>
2.639 3.603 2.915 3.828
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_LOCALHOST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Spam-Relays-External =~ /^[^\]]+ helo=(?:pc| oem\S*) /i
</font>
</td>
<td>
<font size="-1">
HELO_OEM
</font>
</td>
<td>
2.899 2.899 1.234 0.270
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HELO_OEM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From name contains drugs
</font>
</td>
<td>
<font size="-1">
HK_NAME_DRUGS
</font>
</td>
<td>
4.299 0.001 3.077 0.552
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HK_NAME_DRUGS">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From name mentions free stuff
</font>
</td>
<td>
<font size="-1">
HK_NAME_FREE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HK_NAME_FREE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Envelope sender username looks random
</font>
</td>
<td>
<font size="-1">
HK_RANDOM_ENVFROM
</font>
</td>
<td>
2.638 0.626 1.798 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HK_RANDOM_ENVFROM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bnext of kin\b/i
</font>
</td>
<td>
<font size="-1">
HK_SCAM_N2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HK_SCAM_N2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Bobax? Message-Id: <0IX000EJXVWDA000@example.com>
</font>
</td>
<td>
<font size="-1">
HS_BOBAX_MID_2
</font>
</td>
<td>
2.762 2.612 1.243 1.437
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_BOBAX_MID_2">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Somebody has uploaded some new software for you
</font>
</td>
<td>
<font size="-1">
HS_BODY_UPLOADED_SOFTWARE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_BODY_UPLOADED_SOFTWARE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains a drug and price-like pattern.
</font>
</td>
<td>
<font size="-1">
HS_DRUG_DOLLAR_1
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_DRUG_DOLLAR_1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains a drug and price-like pattern.
</font>
</td>
<td>
<font size="-1">
HS_DRUG_DOLLAR_2
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_DRUG_DOLLAR_2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains a drug and price-like pattern.
</font>
</td>
<td>
<font size="-1">
HS_DRUG_DOLLAR_3
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_DRUG_DOLLAR_3">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Links to common unsubscribe script: 'getmeoff.php'
</font>
</td>
<td>
<font size="-1">
HS_GETMEOFF
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_GETMEOFF">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Link contains a common tracker pattern.
</font>
</td>
<td>
<font size="-1">
HS_INDEX_PARAM
</font>
</td>
<td>
1.105 0.023 1.203 0.574
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_INDEX_PARAM">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Talks about meeting up for sex.
</font>
</td>
<td>
<font size="-1">
HS_MEETUP_FOR_SEX
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_MEETUP_FOR_SEX">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject starts with 'New software uploaded by'
</font>
</td>
<td>
<font size="-1">
HS_SUBJ_NEW_SOFTWARE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_SUBJ_NEW_SOFTWARE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject contains the phrase 'Online pharmaceutical'
</font>
</td>
<td>
<font size="-1">
HS_SUBJ_ONLINE_PHARMACEUTICAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_SUBJ_ONLINE_PHARMACEUTICAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains VPXL, yet the recommended dose is only 2 tablets.
</font>
</td>
<td>
<font size="-1">
HS_VPXL
</font>
</td>
<td>
3.211 1.399 2.696 1.948
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HS_VPXL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_https_http_mismatch('1','10')
</font>
</td>
<td>
<font size="-1">
HTTPS_HTTP_MISMATCH
</font>
</td>
<td>
0.557 0.000 1.778 1.989
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/HTTPS_HTTP_MISMATCH">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/(?:\&| \?)btnI=ec(?:(dollar) | \&)/
</font>
</td>
<td>
<font size="-1">
JM_I_FEEL_LUCKY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/JM_I_FEEL_LUCKY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /by \S+ \(Qmailv1\) with ESMTP/
</font>
</td>
<td>
<font size="-1">
JM_RCVD_QMAILV1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/JM_RCVD_QMAILV1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date:raw =~ /^\t/
</font>
</td>
<td>
<font size="-1">
KB_DATE_CONTAINS_TAB
</font>
</td>
<td>
3.800 3.799 3.799 2.751
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KB_DATE_CONTAINS_TAB">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ALL =~ /^Message-Id: <....([0-9a-f]{8})\(dollar) [0-9a-f]{8}\(dollar) .{100,400}boundary="----=_NextPart_000_...._\1\./msi
</font>
</td>
<td>
<font size="-1">
KB_RATWARE_OUTLOOK_08
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KB_RATWARE_OUTLOOK_08">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ALL =~ /^Message-Id: <....([0-9a-f]{8})\(dollar) ([0-9a-f]{4})[0-9a-f]{4}\(dollar) .{100,400}boundary="----=_NextPart_000_...._\1\.\2/msi
</font>
</td>
<td>
<font size="-1">
KB_RATWARE_OUTLOOK_12
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KB_RATWARE_OUTLOOK_12">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ALL =~ /^Message-Id: <....([0-9a-f]{8})\(dollar) ([0-9a-f]{8})\(dollar) .{100,400}boundary="----=_NextPart_000_...._\1\.\2/msi
</font>
</td>
<td>
<font size="-1">
KB_RATWARE_OUTLOOK_16
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KB_RATWARE_OUTLOOK_16">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
ALL =~ /^Message-Id: <....([0-9a-f]{8})\(dollar) ([0-9a-f]{8})\(dollar) [0-9a-f]{8}\@.{100,400}boundary="----=_NextPart_000_...._\1\.\2"/msi
</font>
</td>
<td>
<font size="-1">
KB_RATWARE_OUTLOOK_MID
</font>
</td>
<td>
4.400 4.400 2.503 1.499
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/KB_RATWARE_OUTLOOK_MID">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>uri</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
m~livefilestore.com/~
</font>
</td>
<td>
<font size="-1">
LIVEFILESTORE
</font>
</td>
<td>
3.300 2.570 3.183 0.771
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LIVEFILESTORE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/long\W+term\W+(target| projected)(\W+price)?/i
</font>
</td>
<td>
<font size="-1">
LONG_TERM_PRICE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LONG_TERM_PRICE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
A loop hole in the banking laws?
</font>
</td>
<td>
<font size="-1">
LOOPHOLE_1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LOOPHOLE_1">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Claims Agent
</font>
</td>
<td>
<font size="-1">
LOTTO_AGENT
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/LOTTO_AGENT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Date =~ /\s[+-]\d(?![2358]45)\d[124-9]\d(dollar) /
</font>
</td>
<td>
<font size="-1">
L_SPAM_TOOL_13
</font>
</td>
<td>
0.539 0.485 0.494 1.333
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/L_SPAM_TOOL_13">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-ID =~ /^<\d{14}\.[A-F0-9]{10}\@[A-Z0-9]+>(dollar) /
</font>
</td>
<td>
<font size="-1">
MID_DEGREES
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MID_DEGREES">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /boundary="=====================_\d+==\.REL"/s
</font>
</td>
<td>
<font size="-1">
MIME_BOUND_EQ_REL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/MIME_BOUND_EQ_REL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>full</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has NUL (ASCII 0) byte in message
</font>
</td>
<td>
<font size="-1">
NULL_IN_BODY
</font>
</td>
<td>
0.511 0.498 2.056 1.596
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/NULL_IN_BODY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /\bid\s+[a-zA-Z0-9_+\/\\,-]+(?:[!"\#\(dollar) \%&'()*:<=>?\@\[\]^\`{| }~]| ;\S)/
</font>
</td>
<td>
<font size="-1">
RCVD_BAD_ID
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_BAD_ID">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Forged 'Received' header found ('wrote:' spam)
</font>
</td>
<td>
<font size="-1">
RCVD_FORGED_WROTE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_FORGED_WROTE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /from [0-9.]+ \(HELO \S+[A-Za-z]+\) by (\S+) with esmtp \(\S+\s\S+\) id \S{6}-\S{6}-\S\S for \S+@\1;/s
</font>
</td>
<td>
<font size="-1">
RCVD_FORGED_WROTE2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_FORGED_WROTE2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_rbl('brbl-lastexternal','bb.barracudacentral.org')
</font>
</td>
<td>
<font size="-1">
RCVD_IN_BRBL_LASTEXT
</font>
</td>
<td>
0 1.644 0 1.449
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_BRBL_LASTEXT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in Spamhaus CSS
</font>
</td>
<td>
<font size="-1">
RCVD_IN_CSS
</font>
</td>
<td>
0 1.0 0 1.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_CSS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender listed at http://www.dnswl.org/, high trust
</font>
</td>
<td>
<font size="-1">
RCVD_IN_DNSWL_HI
</font>
</td>
<td>
0 -5 0 -5
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_DNSWL_HI">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender listed at http://www.dnswl.org/, low trust
</font>
</td>
<td>
<font size="-1">
RCVD_IN_DNSWL_LOW
</font>
</td>
<td>
0 -0.7 0 -0.7
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_DNSWL_LOW">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender listed at http://www.dnswl.org/, medium trust
</font>
</td>
<td>
<font size="-1">
RCVD_IN_DNSWL_MED
</font>
</td>
<td>
0 -2.3 0 -2.3
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_DNSWL_MED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender listed at http://www.dnswl.org/, low trust
</font>
</td>
<td>
<font size="-1">
RCVD_IN_DNSWL_NONE
</font>
</td>
<td>
0 -0.0001 0 -0.0001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_DNSWL_NONE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sender publishes Domain Keys record
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_DK
</font>
</td>
<td>
0 -0.223 0 -0.095
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_DK">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: All mailing list mail is confirmed opt-in
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_DOPTIN
</font>
</td>
<td>
0 -4 0 -4
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_DOPTIN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Confirmed opt-in used more than 50% of the time
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_DOPTIN_GT50
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_DOPTIN_GT50">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Confirmed opt-in used less than 50% of the time
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_DOPTIN_LT50
</font>
</td>
<td>
0 -0.001 0 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_DOPTIN_LT50">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Participates in Email Deliverability Database
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_EDDB
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_EDDB">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Member of Email Processing Industry Alliance
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_EPIA
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_EPIA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sender has been certified by GoodMail
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_GOODMAIL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_GOODMAIL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Participates in the IADB system
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_LISTED
</font>
</td>
<td>
0 -0.380 0 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_LISTED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Adds relationship addrs w/out opt-in
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_LOOSE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_LOOSE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Complies with Michigan's CPEAR law
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_MI_CPEAR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_MI_CPEAR">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Checked lists against Michigan's CPR within 30 days
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_MI_CPR_30
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_MI_CPR_30">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sends no material under Michigan's CPR
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_MI_CPR_MAT
</font>
</td>
<td>
0 -0.332 0 -0.000
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_MI_CPR_MAT">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Mailing list email only, confirmed opt-in
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_ML_DOPTIN
</font>
</td>
<td>
0 -6 0 -6
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_ML_DOPTIN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Has absolutely no mailing controls in place
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_NOCONTROL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_NOCONTROL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: One-to-one/transactional email only
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_OOO
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_OOO">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: All mailing list mail is opt-in
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_OPTIN
</font>
</td>
<td>
0 -2.057 0 -1.470
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_OPTIN">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Opt-in used more than 50% of the time
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_OPTIN_GT50
</font>
</td>
<td>
0 -1.208 0 -0.007
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_OPTIN_GT50">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Opt-in used less than 50% of the time
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_OPTIN_LT50
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_OPTIN_LT50">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Scrapes addresses, pure opt-out only
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_OPTOUTONLY
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_OPTOUTONLY">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sender has reverse DNS record
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_RDNS
</font>
</td>
<td>
0 -0.167 0 -0.235
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_RDNS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sender publishes Sender ID record
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_SENDERID
</font>
</td>
<td>
0 -0.001 0 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_SENDERID">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sender publishes SPF record
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_SPF
</font>
</td>
<td>
0 -0.001 0 -0.059
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_SPF">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Accepts unverified sign-ups
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_UNVERIFIED_1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_UNVERIFIED_1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Accepts unverified sign-ups, gives chance to opt out
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_UNVERIFIED_2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_UNVERIFIED_2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Complies with Utah's CPEAR law
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_UT_CPEAR
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_UT_CPEAR">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Checked lists against Utah's CPR within 30 days
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_UT_CPR_30
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_UT_CPR_30">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
IADB: Sends no material under Utah's CPR
</font>
</td>
<td>
<font size="-1">
RCVD_IN_IADB_UT_CPR_MAT
</font>
</td>
<td>
0 -0.095 0 -0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_IADB_UT_CPR_MAT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received via a relay in PSBL
</font>
</td>
<td>
<font size="-1">
RCVD_IN_PSBL
</font>
</td>
<td>
0 2.700 0 2.700
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_PSBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender is in Return Path Certified (trusted relay)
</font>
</td>
<td>
<font size="-1">
RCVD_IN_RP_CERTIFIED
</font>
</td>
<td>
0.0 -3.0 0.0 -3.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_RP_CERTIFIED">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Relay in RNBL, https://senderscore.org/blacklistlookup/
</font>
</td>
<td>
<font size="-1">
RCVD_IN_RP_RNBL
</font>
</td>
<td>
0 1.284 0 1.310
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_RP_RNBL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender is in Return Path Safe (trusted relay)
</font>
</td>
<td>
<font size="-1">
RCVD_IN_RP_SAFE
</font>
</td>
<td>
0.0 -2.0 0.0 -2.0
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_IN_RP_SAFE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Forged Received header (contains post.com or mail.com)
</font>
</td>
<td>
<font size="-1">
RCVD_MAIL_COM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RCVD_MAIL_COM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Sender's public rDNS is "localhost"
</font>
</td>
<td>
<font size="-1">
RDNS_LOCALHOST
</font>
</td>
<td>
3.700 0.969 2.345 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/RDNS_LOCALHOST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Gen3177.Sanesecurity.08051611
</font>
</td>
<td>
<font size="-1">
SANE_04e8bf28eb445199a7f11b943c44d209
</font>
</td>
<td>
1.712 3.185 2.654 1.337
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_04e8bf28eb445199a7f11b943c44d209">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Gen3234.Sanesecurity.08052309
</font>
</td>
<td>
<font size="-1">
SANE_1c4f3286fa4aed6424ced88bfaf8b09c
</font>
</td>
<td>
3.199 2.040 3.199 1.502
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_1c4f3286fa4aed6424ced88bfaf8b09c">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Sanesecurity.Url_2496
</font>
</td>
<td>
<font size="-1">
SANE_2b173a7fb7518c75ac8a2d294d773fd8
</font>
</td>
<td>
2.976 1.117 1.951 0.942
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_2b173a7fb7518c75ac8a2d294d773fd8">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Gen158.Sanesecurity.07012700
</font>
</td>
<td>
<font size="-1">
SANE_3b92eda751c992f230f215fb7eb36844
</font>
</td>
<td>
0.001 0.626 0.585 3.040
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_3b92eda751c992f230f215fb7eb36844">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Gen1941.Sanesecurity.07112519
</font>
</td>
<td>
<font size="-1">
SANE_4ef8302546bf270a19baf98508afacc4
</font>
</td>
<td>
2.231 3.464 2.266 3.543
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_4ef8302546bf270a19baf98508afacc4">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Gen2507.Sanesecurity.08021303
</font>
</td>
<td>
<font size="-1">
SANE_7429530a7398f43f1f1b795f9420714e
</font>
</td>
<td>
3.999 1.655 2.776 1.479
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_7429530a7398f43f1f1b795f9420714e">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Malware.Sanesecurity.07011300
</font>
</td>
<td>
<font size="-1">
SANE_91eb43f705d25c804374a746d7519660
</font>
</td>
<td>
3.099 2.803 2.746 1.572
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_91eb43f705d25c804374a746d7519660">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Email.Spam.Sanesecurity.Url_2499
</font>
</td>
<td>
<font size="-1">
SANE_d0d2b0f6373bf91253d66dd74c594b87
</font>
</td>
<td>
3.799 2.040 2.710 1.494
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SANE_d0d2b0f6373bf91253d66dd74c594b87">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/short\W+term\W+(target| projected)(\W+price)?/i
</font>
</td>
<td>
<font size="-1">
SHORT_TERM_PRICE
</font>
</td>
<td>
0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/SHORT_TERM_PRICE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /text\/plain; .* reply-type=original/
</font>
</td>
<td>
<font size="-1">
STOX_REPLY_TYPE
</font>
</td>
<td>
1.898 0.212 0.141 0.439
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/STOX_REPLY_TYPE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
From starts with a tab
</font>
</td>
<td>
<font size="-1">
TAB_IN_FROM
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TAB_IN_FROM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Mailer =~ /^The Bat! .{0,20} UNREG(dollar) /
</font>
</td>
<td>
<font size="-1">
THEBAT_UNREG
</font>
</td>
<td>
2.599 1.843 2.324 1.524
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/THEBAT_UNREG">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Scora: Message-Id ends after left-bracket + digits
</font>
</td>
<td>
<font size="-1">
TT_MSGID_TRUNC
</font>
</td>
<td>
0.748 0.023 1.434 1.448
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TT_MSGID_TRUNC">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bact of (?:193| nineteen thirty)/i
</font>
</td>
<td>
<font size="-1">
TVD_ACT_193
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_ACT_193">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/you.{1,2}re .{0,20}approved/i
</font>
</td>
<td>
<font size="-1">
TVD_APPROVED
</font>
</td>
<td>
2.356 2.599 2.599 2.090
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_APPROVED">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/^dear homeowner/i
</font>
</td>
<td>
<font size="-1">
TVD_DEAR_HOMEOWNER
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_DEAR_HOMEOWNER">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
EnvelopeFrom =~ /\'/
</font>
</td>
<td>
<font size="-1">
TVD_ENVFROM_APOST
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_ENVFROM_APOST">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /^text\/plain(?:; (?:format=flowed| charset="Windows-1252"| reply-type=original)){3}/i
</font>
</td>
<td>
<font size="-1">
TVD_FINGER_02
</font>
</td>
<td>
0.001 1.544 1.394 1.215
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FINGER_02">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bstyle\s*=\s*"[^"]*\bfloat\s*:\s*[a-z]+\s*">\s*[a-zA-Z]+\s*</i
</font>
</td>
<td>
<font size="-1">
TVD_FLOAT_GENERAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FLOAT_GENERAL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W1><post P1>\b(?!degree)<D><E><G><R><E><E>\b/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_DEGREE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_DEGREE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/(?!finance)<F><I><N><A><N><C><E>/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_FINANCE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_FINANCE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W2><post P2>(?!fixed rate)<F><I><X><E><D>\s+<R><A><T><E>/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_FIXED_RATE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_FIXED_RATE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W2><post P2>(?!microcap)(?!micro-cap)<M><I><C><R><O>-?<C><A><P>/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_MICROCAP
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_MICROCAP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W2><post P2>(?!pharmaceutical)<P><H><A><R><M><A><C><E><U><T><I><C><A><L>/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_PHARMACEUTICAL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_PHARMACEUTICAL">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<inter W2><post P2>(?!symbol)<S><Y><M><B><O><L>/i
</font>
</td>
<td>
<font size="-1">
TVD_FUZZY_SYMBOL
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_FUZZY_SYMBOL">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bsize of .{1,20}(?:penis| dick| manhood)/i
</font>
</td>
<td>
<font size="-1">
TVD_INCREASE_SIZE
</font>
</td>
<td>
1.529 0.601 1.055 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_INCREASE_SIZE">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\blink to save\b/i
</font>
</td>
<td>
<font size="-1">
TVD_LINK_SAVE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_LINK_SAVE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /(?:Jan| Feb| Mar| Apr| May| Jun| Jul| Aug| Sep| Oct| Nov| Dec)\S* \d+% OFF/
</font>
</td>
<td>
<font size="-1">
TVD_PCT_OFF
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PCT_OFF">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\baccounts? (?:[a-z_,-]+ )+?(?:record[a-z]*| suspen[a-z]+| notif(?:y| ication)| updated| verifications?| credited)\b/i
</font>
</td>
<td>
<font size="-1">
TVD_PH_BODY_ACCOUNTS_PRE
</font>
</td>
<td>
1.201 1.527 1.327 2.393
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_BODY_ACCOUNTS_PRE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has a phrase standard for phishing mails
</font>
</td>
<td>
<font size="-1">
TVD_PH_REC
</font>
</td>
<td>
3.127 2.026 3.266 1.784
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_REC">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message has a phrase standard for phishing mails
</font>
</td>
<td>
<font size="-1">
TVD_PH_SEC
</font>
</td>
<td>
0.291 1.498 0.869 1.764
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_SEC">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /\b(?:(?:re-?)?activat[a-z]*| secure| verify| restore| flagged| limited| unusual| update| report| notif(?:y| ication)| suspen(?:d| ded| sion)| co(?:n| m)firm[a-z]*) (?:[a-z_,-]+ )*?accounts?\b/i
</font>
</td>
<td>
<font size="-1">
TVD_PH_SUBJ_ACCOUNTS_POST
</font>
</td>
<td>
2.602 2.607 2.497 3.099
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_SUBJ_ACCOUNTS_POST">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /\bsecurity (?:[a-z_,-]+ )*?measures?\b/i
</font>
</td>
<td>
<font size="-1">
TVD_PH_SUBJ_SEC_MEASURES
</font>
</td>
<td>
2.284 1.522 1.675 1.145
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_SUBJ_SEC_MEASURES">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /^urgent(?:[\s\W]*(dollar) | .{1,40}(?:alert| response| assistance| proposal| reply| warning| noti(?:ce| fication)| greeting| matter))/i
</font>
</td>
<td>
<font size="-1">
TVD_PH_SUBJ_URGENT
</font>
</td>
<td>
1.251 2.326 2.255 2.800
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_PH_SUBJ_URGENT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bquality med(?:ication)?s\b/i
</font>
</td>
<td>
<font size="-1">
TVD_QUAL_MEDS
</font>
</td>
<td>
2.697 2.397 2.799 2.483
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_QUAL_MEDS">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /\bboundary\b.{1,40}qzsoft_directmail_seperator/i
</font>
</td>
<td>
<font size="-1">
TVD_RATWARE_CB
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RATWARE_CB">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Content-Type =~ /\bboundary\s*=\s*"?-+\d+=+\.MRA/
</font>
</td>
<td>
<font size="-1">
TVD_RATWARE_CB_2
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RATWARE_CB_2">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Message-ID =~ /^[^<]*<[a-z]+\@/
</font>
</td>
<td>
<font size="-1">
TVD_RATWARE_MSGID_02
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RATWARE_MSGID_02">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /^from\s+(?:\d+[^0-9a-zA-Z\s]){3}\d+[.\s]/
</font>
</td>
<td>
<font size="-1">
TVD_RCVD_IP
</font>
</td>
<td>
0.001 0.054 0.001 0.695
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RCVD_IP">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /^from\s+(?:\d+\.){3}\d+\s/
</font>
</td>
<td>
<font size="-1">
TVD_RCVD_IP4
</font>
</td>
<td>
0.159 1.495 0.674 1.596
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RCVD_IP4">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /^from\s+(?!localhost)[^\s.a-z0-9-]+\s/
</font>
</td>
<td>
<font size="-1">
TVD_RCVD_SINGLE
</font>
</td>
<td>
0.242 1.213 0.001 2.172
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RCVD_SINGLE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Received =~ /\(\[(?!UNIX:)[^\[\]]*\s/
</font>
</td>
<td>
<font size="-1">
TVD_RCVD_SPACE_BRACKET
</font>
</td>
<td>
0.001 0.001 0.001 0.001
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_RCVD_SPACE_BRACKET">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/\bSection (?:27A| 21B)/i
</font>
</td>
<td>
<font size="-1">
TVD_SECTION
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SECTION">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
m!https?://[a-z0-9-]+\.[a-z0-9-]*\.?[^a-z0-9.:/\s"'\@?\)>-]+[a-z0-9.-]*[a-z]{3}(?:\s| (dollar) )!i
</font>
</td>
<td>
<font size="-1">
TVD_SILLY_URI_OBFU
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SILLY_URI_OBFU">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /^(?:(?:Re| Fw)[^:]{0,5}: )?[A-Z]+[a-z]+[A-Z]+(dollar) /
</font>
</td>
<td>
<font size="-1">
TVD_SPACED_SUBJECT_WORD3
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SPACED_SUBJECT_WORD3">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
eval:check_stock_info('2')
</font>
</td>
<td>
<font size="-1">
TVD_STOCK1
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_STOCK1">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject has spammy looking monetary reference
</font>
</td>
<td>
<font size="-1">
TVD_SUBJ_ACC_NUM
</font>
</td>
<td>
0.001 2.199 2.199 2.198
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SUBJ_ACC_NUM">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /^\s*\*\s+(?:\w+\W+)+\*\s*(dollar) /
</font>
</td>
<td>
<font size="-1">
TVD_SUBJ_FINGER_03
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SUBJ_FINGER_03">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /^\s*(?:\w+\s+)+you\s+(?:\w+\s+)*(?:owe| indebted)\s+(?:\w+\s+)+an\s*other/i
</font>
</td>
<td>
<font size="-1">
TVD_SUBJ_OWE
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SUBJ_OWE">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Subject =~ /(?:wipe out| remove| get (?:rid| out) of| eradicate) .{0,20}(?:owe| debt| obligation)/i
</font>
</td>
<td>
<font size="-1">
TVD_SUBJ_WIPE_DEBT
</font>
</td>
<td>
2.599 2.291 2.599 1.004
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_SUBJ_WIPE_DEBT">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/Online Ph.rmacy/i
</font>
</td>
<td>
<font size="-1">
TVD_VISIT_PHARMA
</font>
</td>
<td>
1.957 1.196 0.417 1.406
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_VISIT_PHARMA">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>rawbody</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
/<TEXTAREA[^>]+style\s*=\s*"visibility:\s*hidden\b/i
</font>
</td>
<td>
<font size="-1">
TVD_VIS_HIDDEN
</font>
</td>
<td>
1
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/TVD_VIS_HIDDEN">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Contains an URI of a new domain (Day Old Bread)
</font>
</td>
<td>
<font size="-1">
URIBL_RHS_DOB
</font>
</td>
<td>
0 0.276 0 1.514
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URIBL_RHS_DOB">Wiki</a>
</td>
</tr>
<tr>
<td>
<strong>body</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
Obfuscated URI
</font>
</td>
<td>
<font size="-1">
URI_OBFU_WWW
</font>
</td>
<td>
3.099 3.099 2.306 2.475
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/URI_OBFU_WWW">Wiki</a>
</td>
</tr>
<tr bgcolor="#ccffcc">
<td>
<strong>header</strong>
</td>
<td>
<font size="-1">
</font>
</td>
<td>
<font size="-1">
X-Mailer =~ /^CME-V6\.5\.4\.3; MSN\s*(dollar) /
</font>
</td>
<td>
<font size="-1">
X_MAILER_CME_6543_MSN
</font>
</td>
<td>
2.886 2.004 3.002 3.348
</td>
<td>
<a href="http://wiki.apache.org/spamassassin/Rules/X_MAILER_CME_6543_MSN">Wiki</a>
</td>
</tr>
<!–/etsafe–>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</html>
