1 # SpamAssassin score file
3 # Please don't modify this file as your changes will be overwritten with
4 # the next update. Use /etc/mail/spamassassin/local.cf instead.
5 # See 'perldoc Mail::SpamAssassin::Conf' for details.
8 # Licensed to the Apache Software Foundation (ASF) under one or more
9 # contributor license agreements. See the NOTICE file distributed with
10 # this work for additional information regarding copyright ownership.
11 # The ASF licenses this file to you under the Apache License, Version 2.0
12 # (the "License"); you may not use this file except in compliance with
13 # the License. You may obtain a copy of the License at:
15 # http://www.apache.org/licenses/LICENSE-2.0
17 # Unless required by applicable law or agreed to in writing, software
18 # distributed under the License is distributed on an "AS IS" BASIS,
19 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
20 # See the License for the specific language governing permissions and
21 # limitations under the License.
24 ###########################################################################
25 # Default scores. Note that if a test is named in the files, but a score is
26 # not assigned here, the default score will be set to 1.
28 # The following block of scores were generated using the mass-checking
29 # scripts, and a perceptron to determine the optimum scores which
30 # resulted in minimum false positives or negatives. The scores are
31 # weighted to produce roughly 1 false positive in 2500 non-spam messages
32 # using the default threshold of 5.0.
34 # Start of generated scores. <gen:mutable>
36 score ACT_NOW_CAPS 0.1
37 #score ADVANCE_FEE_2 2.314 2.294 1.198 1.053
38 #score ADVANCE_FEE_3 2.686 1.898 3.505 3.817
39 #score ADVANCE_FEE_4 0.001 0.001 0.001 0.271
40 score ALL_TRUSTED -1.000
41 score APOSTROPHE_FROM 0.148 0.786 0.651 0.545 # n=2
44 score BANG_OPRAH 0 # n=0 n=1 n=2 n=3
45 score BANKING_LAWS 2.399 2.004 2.157 1.099 # n=2
46 score BILLION_DOLLARS 0.001 1.451 1.229 1.638
47 score BODY_ENHANCEMENT 0.927 1.611 0.974 0.001
48 score BODY_ENHANCEMENT2 0.1
49 score CONFIRMED_FORGED 0 # n=0 n=1 n=2 n=3
50 score CORRUPT_FROM_LINE_IN_HDRS 0 # n=0 n=1 n=2 n=3
51 score CTYPE_001C_A 0 # n=0 n=1 n=2 n=3
52 score CTYPE_001C_B 0.001 0.001 0.001 0.001 # n=1
53 score CUM_SHOT 0 # n=0 n=1 n=2 n=3
54 score CURR_PRICE 0.001 # n=0 n=1 n=2 n=3
55 score DATE_SPAMWARE_Y2K 0 # n=0 n=1 n=2 n=3
56 score DEAR_FRIEND 2.683 2.604 1.801 2.577
57 score DEAR_SOMETHING 1.999 1.731 1.787 1.973
58 score DEAR_WINNER 3.099 3.099 2.309 3.099 # n=2
59 score DIET_1 0.714 0.000 0.399 0.001
60 score DIGEST_MULTIPLE 0 0.001 0 0.293 # n=0 n=2
61 score DOS_ANAL_SPAM_MAILER 0 # n=0 n=1 n=2
62 score DOS_FIX_MY_URI 0 # n=0 n=1 n=2 n=3
63 score DOS_HIGH_BAT_TO_MX 0 # n=0 n=1 n=2
64 score DOS_LET_GO_JOB 0 # n=0 n=1 n=2 n=3
65 score DOS_OE_TO_MX 2.602 3.086 2.265 2.523
66 score DOS_OE_TO_MX_IMAGE 2.886 1.886 2.425 3.699
67 score DOS_OUTLOOK_TO_MX 2.636 1.449 1.737 2.845
68 score DOS_RCVD_IP_TWICE_C 2.599 2.060 3.292 0.096
69 score DOS_STOCK_BAT 0.001 # n=0 n=1 n=2 n=3
70 score DOS_STOCK_BAT2 0 # n=0 n=1 n=2 n=3
71 score DOS_URI_ASTERISK 0 # n=0 n=1 n=2 n=3
72 score DOS_YOUR_PLACE 0 # n=0 n=1 n=2 n=3
73 score DRUGS_ANXIETY 0.1
74 score DRUGS_ANXIETY_EREC 0 # n=0 n=1 n=2 n=3
75 score DRUGS_ANXIETY_OBFU 0 # n=0 n=1 n=2 n=3
76 score DRUGS_DIET 2.660 0.757 1.831 0.337
77 score DRUGS_DIET_OBFU 0 # n=0 n=1 n=2 n=3
78 score DRUGS_ERECTILE 1.778 2.221 1.299 1.994
79 score DRUGS_ERECTILE_OBFU 1.324 1.309 2.935 1.109
80 score DRUGS_HDIA 0 # n=0 n=1 n=2 n=3
81 score DRUGS_MANYKINDS 2.001 1.473 0.841 0.342
82 score DRUGS_MUSCLE 0.001 2.499 0.392 0.164
83 score DRUGS_SLEEP_EREC 0 # n=0 n=1 n=2 n=3
84 score DRUGS_SMEAR1 3.300 2.051 3.148 0.235 # n=0
85 score DRUGS_STOCK_MIMEOLE 2.699 1.681 2.478 1.321 # n=2
86 score DRUG_DOSAGE 0 # n=0 n=1 n=2 n=3
87 score DRUG_ED_CAPS 2.799 1.023 2.516 0.936
88 score DRUG_ED_GENERIC 0 # n=0 n=1 n=2 n=3
89 score DRUG_ED_ONLINE 0.696 1.152 1.221 0.608 # n=0
90 score DRUG_ED_SILD 0.001
91 score DYN_RDNS_AND_INLINE_IMAGE 1.345 1.344 1.434 1.168 # n=2
92 score DYN_RDNS_SHORT_HELO_HTML 0.001 0.001 0.000 0.001 # n=2
93 score DYN_RDNS_SHORT_HELO_IMAGE 1.825 2.516 2.285 1.013 # n=2
94 score EMAIL_ROT13 0 # n=0 n=1 n=2 n=3
95 score EMPTY_MESSAGE 2.195 2.344 1.552 2.320
96 score EM_ROLEX 0.595 1.309 2.068 0.618 # n=0
97 score ENGLISH_UCE_SUBJECT 0.953 1.542 2.569 2.899 # n=0
98 score EXCUSE_4 2.399 1.687 2.399 1.325
99 score EXCUSE_REMOVE 2.907 2.992 3.299 3.299
100 #score FAKE_HELO_MAIL_COM_DOM 1.887 0.152 1.370 2.136
101 score FAKE_OUTBLAZE_RCVD 0 # n=0 n=1 n=2 n=3
102 score FAKE_REPLY_C 0.688 0.001 2.553 1.486 # n=2
103 score FILL_THIS_FORM_FRAUD_PHISH 1.195 0.396 0.615 0.334
104 score FILL_THIS_FORM_LOAN 2.092 2.237 1.836 2.880
105 score FILL_THIS_FORM_LONG 3.800 3.476 2.300 3.404
107 score FORGED_IMS_HTML 0 # n=0 n=1 n=2 n=3
108 score FORGED_IMS_TAGS 0 # n=0 n=1 n=2 n=3
109 score FORGED_MSGID_AOL 0 # n=0 n=1 n=2 n=3
110 score FORGED_MSGID_EXCITE 2.399 1.899 1.649 0.528 # n=0
111 score FORGED_MSGID_HOTMAIL 0 # n=0 n=1 n=2 n=3
112 score FORGED_MSGID_MSN 0 # n=0 n=1 n=2 n=3
113 score FORGED_MSGID_YAHOO 0.1
114 score FORGED_MUA_EUDORA 2.828 2.510 1.962 0.001
115 score FORGED_MUA_IMS 2.399 2.399 2.399 1.943
116 score FORGED_MUA_MOZILLA 2.399 1.596 2.399 2.309
117 score FORGED_MUA_OIMO 2.600 2.599 2.599 2.599
118 score FORGED_MUA_OUTLOOK 3.999 2.785 2.500 1.927
119 score FORGED_MUA_THEBAT_BOUN 3.046 3.220 3.207 3.399
120 score FORGED_MUA_THEBAT_CS 0 # n=0 n=1 n=2 n=3
121 score FORGED_OUTLOOK_HTML 0.001 0.001 0.001 0.021
122 score FORGED_OUTLOOK_TAGS 0.003 0.565 0.001 0.052
123 score FORGED_QUALCOMM_TAGS 0 # n=0 n=1 n=2 n=3
124 score FORGED_TELESP_RCVD 2.499 2.499 2.499 1.841 # n=0
125 score FORGED_THEBAT_HTML 0 # n=0 n=1 n=2 n=3
126 score FORWARD_LOOKING 0 # n=0 n=1 n=2 n=3
127 score FRAGMENTED_MESSAGE 0 # n=0 n=1 n=2
129 #FREEMAIL SCORES - Scores lowered per bug 6744
130 score FREEMAIL_FORGED_REPLYTO 1.199 2.503 1.204 2.095
131 score FREEMAIL_REPLY 1.0
132 score FREEMAIL_REPLYTO 1.0
133 score FREEMAIL_REPLYTO_END_DIGIT 0.25
134 score FREEMAIL_ENVFROM_END_DIGIT 0.25
135 score FREEMAIL_FROM 0.001
137 score FREE_PORN 0 # n=0 n=1 n=2 n=3
138 score FREE_QUOTE_INSTANT 2.700 2.699 2.699 1.297 # n=2
139 score FROM_BLANK_NAME 2.099 2.099 2.099 0.723
140 score FROM_DOMAIN_NOVOWEL 0.500
141 score FROM_EXCESS_BASE64 0.001
142 score FROM_LOCAL_DIGITS 0.001
143 score FROM_LOCAL_HEX 0.000 0.331 0.001 0.006
144 score FROM_LOCAL_NOVOWEL 0.500
145 score FROM_NO_USER 0.001 2.599 0.019 0.798
146 #score FROM_OFFERS 2.699 2.699 2.510 2.699 # defer to nightly GA rescorer per bug 6580
147 score FROM_STARTS_WITH_NUMS 2.801 0.553 1.201 0.738
148 score FSL_FAKE_HOTMAIL_RVCD 2.631 1.816 2.011 2.365
149 score FSL_HELO_BARE_IP_1 2.598 1.426 3.099 2.347
150 score FSL_HELO_DEVICE 0.1
151 score FSL_HELO_NON_FQDN_1 2.361 0.001 1.783 0.001
152 score FSL_HELO_SETUP 0 # n=0 n=1 n=2
153 score FSL_INTERIA_ABUSE 3.899 2.664 3.080 3.106
154 score GAPPY_SUBJECT 0.1
155 score GEO_QUERY_STRING 0 # n=0 n=1 n=2 n=3
156 score GUARANTEED_100_PERCENT 2.699 2.699 2.480 2.699
157 score HDR_ORDER_FTSDMCXX_001C 0 # n=0 n=1 n=2 n=3
158 score HDR_ORDER_FTSDMCXX_BAT 0 # n=0 n=1 n=2 n=3
159 score HEADER_SPAM 2.499 2.499 1.994 0.585
160 score HEAD_LONG 0 # n=0 n=1 n=2
161 score HELO_DYNAMIC_CHELLO_NL 2.412 1.918 2.019 2.428
162 score HELO_DYNAMIC_DHCP 2.602 0.841 1.537 0.206
163 score HELO_DYNAMIC_DIALIN 2.629 3.233 2.186 1.366
164 score HELO_DYNAMIC_HCC 4.299 2.514 2.931 2.762
165 score HELO_DYNAMIC_HEXIP 2.321 0.511 1.773 1.789
166 score HELO_DYNAMIC_HOME_NL 2.385 1.530 1.024 1.459
167 score HELO_DYNAMIC_IPADDR 2.633 3.243 3.680 1.951
168 score HELO_DYNAMIC_IPADDR2 2.815 3.888 3.728 3.607
169 score HELO_DYNAMIC_ROGERS 0 # n=0 n=1 n=2 n=3
170 score HELO_DYNAMIC_SPLIT_IP 3.031 2.893 4.225 3.482
171 score HELO_FRIEND 0 # n=0 n=1 n=2 n=3
172 score HELO_LH_HOME 0.001 2.023 0.537 1.736 # n=2
173 score HELO_LH_LD 0 # n=0 n=1 n=2 n=3
174 score HELO_LOCALHOST 2.639 3.603 2.915 3.828 # n=2
175 score HELO_OEM 2.899 2.899 1.234 0.270 # n=2
176 score HIDE_WIN_STATUS 0.001
177 score HIGH_CODEPAGE_URI 0 # n=0 n=1 n=2
178 # score HK_LOTTO 3.599 2.755 2.993 3.599 # Allow GA manage score
179 score HK_NAME_DRUGS 4.299 0.001 3.077 0.552
180 # score HK_RANDOM_ENVFROM 2.638 0.626 1.798 0.001 # Allow GA manage score
181 score HTML_MIME_NO_HTML_TAG 0.001 0.635 0.001 0.377
182 score HTML_MISSING_CTYPE 0 # n=0 n=1 n=2 n=3
183 score HTML_SHORT_CENTER 3.799 3.421 2.611 0.743
184 score HTML_SHORT_LINK_IMG_1 2.215 0.139 0.480 0.001
185 score HTML_SHORT_LINK_IMG_2 1.419 0.259 0.603 0.001
186 score HTML_SHORT_LINK_IMG_3 0.691 0.328 0.001 0.148
187 score HTML_TITLE_SUBJ_DIFF 1.149 2.171 1.801 2.036
188 score HTTP_77 0 # n=0 n=1 n=2 n=3
189 score HTTP_ESCAPED_HOST 0.1
190 score HTTP_EXCESSIVE_ESCAPES 0.001
191 score IMPOTENCE 1.539 2.144 3.028 1.374
192 score INVALID_DATE 1.701 0.432 1.200 1.096
193 score INVALID_DATE_TZ_ABSURD 0.262 0.632 0.706 0.491
194 score INVALID_MSGID 2.602 1.167 1.328 0.568
195 score INVALID_TZ_CST 0 # n=0 n=1 n=2 n=3
196 score INVALID_TZ_EST 0 # n=0 n=1 n=2 n=3
197 score INVESTMENT_ADVICE 0.1
198 score IP_LINK_PLUS 0.001 0.001 0.246 0.012
199 score JAPANESE_UCE_BODY 0 # n=0 n=1 n=2 n=3
200 score JAPANESE_UCE_SUBJECT 0 # n=0 n=1 n=2 n=3
201 score JM_I_FEEL_LUCKY 0 # n=0 n=1 n=2
202 score JM_RCVD_QMAILV1 0 # n=0 n=1 n=2 n=3
203 score JM_TORA_XM 0 # n=0 n=1 n=2 n=3
204 score JOIN_MILLIONS 0.1
205 score JS_FROMCHARCODE 0 # n=0 n=1 n=2 n=3
206 score KB_DATE_CONTAINS_TAB 3.800 3.799 3.799 2.751
207 score KB_FAKED_THE_BAT 2.432 3.441 2.008 2.694
208 score KB_RATWARE_MSGID 4.099 2.987 2.108 1.700
209 score KB_RATWARE_OUTLOOK_MID 4.400 4.400 2.503 1.499
210 score KOREAN_UCE_SUBJECT 0 # n=0 n=1 n=2 n=3
211 score LIVEFILESTORE 0.1
212 score LIVE_PORN 0 # n=0 n=1 n=2 n=3
213 score LONGWORDS 2.199 1.844 1.819 2.035
214 score LONG_TERM_PRICE 0.001 # n=0 n=1 n=2 n=3
215 score LOOPHOLE_1 0 # n=0 n=1 n=2 n=3
216 score LOTTERY_1 0.001 1.488 1.630 0.087 # n=2
217 score LOTTERY_PH_004470 0.1
219 score L_SPAM_TOOL_13 0.539 0.485 0.494 1.333 # n=2
220 score MALE_ENHANCE 3.100 3.099 3.099 0.851
221 score MARKETING_PARTNERS 0.553 0.235 0.689 0.001
222 score MID_DEGREES 0 # n=0 n=1 n=2 n=3
223 #score MILLION_USD 3.799 2.477 3.221 3.247
224 score MIME_BOUND_DD_DIGITS 3.016 0.349 2.417 1.373
225 score MIME_BOUND_DIGITS_15 0.1
226 score MIME_BOUND_EQ_REL 0 # n=0 n=1 n=2 n=3
227 score MIME_BOUND_MANY_HEX 0 # n=0 n=1 n=2 n=3
228 score MIME_HEADER_CTYPE_ONLY 0.1
229 score MIME_HTML_ONLY_MULTI 0.000 0.001 0.001 0.001
230 score MIME_PHP_NO_TEXT 2.800 2.799 2.799 2.799
231 score MISSING_DATE 2.739 1.396 1.800 1.360 # n=0
232 score MISSING_HB_SEP 0 # n=0 n=1 n=2
233 score MISSING_MID 0.552 0.140 1.199 0.497 # n=1
234 score MISSING_MIMEOLE 0.392 1.843 0.571 1.899
235 score MISSING_SUBJECT 0.001 1.767 1.300 1.799
236 score MONEY_BACK 2.910 2.486 0.601 1.232
237 score MORE_SEX 2.799 2.765 2.568 1.413
238 score MSGID_DOLLARS_RANDOM 0 # n=0 n=1 n=2 n=3
239 score MSGID_FROM_MTA_HEADER 0.401 0.001 0.473 0.001
240 score MSGID_RANDY 2.196 2.599 2.599 2.599
241 score MSGID_SHORT 0.001 0.337 0.001 0.001
242 score MSGID_SPAM_CAPS 2.366 1.997 3.099 3.099
243 score MSGID_SPAM_LETTERS 0 # n=0 n=1 n=2 n=3
244 score MSGID_YAHOO_CAPS 0.797 1.413 2.278 1.411
245 score MSOE_MID_WRONG_CASE 0.993 3.373 0.960 2.584 # n=2
246 score MULTI_FORGED 0 # n=0 n=1 n=2 n=3
247 #score NA_DOLLARS 3.599
248 score NONEXISTENT_CHARSET 0 # n=0 n=1 n=2 n=3
249 score NORMAL_HTTP_TO_IP 0.159 0.001 0.795 0.001
250 score NOT_ADVISOR 0 # n=0 n=1 n=2 n=3
251 score NO_MEDICAL 2.199 1.254 2.199 1.773 # n=0
252 score NO_PRESCRIPTION 1.915 1.102 2.280 2.399
253 score NULL_IN_BODY 0.511 0.498 2.056 1.596 # n=2
254 score NUMERIC_HTTP_ADDR 0.000 0.001 0.001 1.242
255 score OBFUSCATING_COMMENT 0.000 0.000 0.001 0.723
256 score OBSCURED_EMAIL 0 # n=0 n=1 n=2 n=3
257 score ONE_TIME 1.840 1.175 1.830 0.714 # n=0
258 score ONLINE_PHARMACY 0.843 2.371 0.008 0.650
259 score PERCENT_RANDOM 2.999 2.837 2.983 1.838
260 score PLING_QUERY 0.1
261 score PREST_NON_ACCREDITED 0 # n=0 n=1 n=2 n=3
262 score PREVENT_NONDELIVERY 0 # n=0 n=1 n=2 n=3
263 score PRICES_ARE_AFFORDABLE 0.794 0.851 1.112 0.551
264 score RATWARE_EGROUPS 1.898 1.258 1.406 1.621
265 score RATWARE_HASH_DASH 0 # n=0 n=1 n=2 n=3
266 score RATWARE_MOZ_MALFORMED 0 # n=0 n=1 n=2 n=3
267 score RATWARE_MPOP_WEBMAIL 1.153 1.338 1.229 1.999 # n=0
269 # masscheck corpora thin or nonexistent, real world FPs reported - exposing to ruleqa for eval
270 #score RATWARE_MS_HASH 2.036 3.692 0.454 2.148
271 score RATWARE_OE_MALFORMED 0 # n=0 n=1 n=2 n=3
273 # masscheck corpora thin or nonexistent, real world FPs reported - exposing to ruleqa for eval
274 #score RATWARE_OUTLOOK_NONAME 2.964 0.033 2.685 2.950
275 score RATWARE_RCVD_AT 0 # n=0 n=1 n=2 n=3
276 score RATWARE_RCVD_PF 0 # n=0 n=1 n=2 n=3
277 score RATWARE_ZERO_TZ 2.392 2.535 0.265 1.781 # n=0
278 score RCVD_AM_PM 0 # n=0 n=1 n=2 n=3
279 score RCVD_BAD_ID 0 # n=0 n=1 n=2 n=3
280 score RCVD_DOUBLE_IP_LOOSE 1.150 0.960 1.042 1.012
281 score RCVD_DOUBLE_IP_SPAM 2.411 2.777 1.912 1.808
282 score RCVD_FAKE_HELO_DOTCOM 2.799 2.389 2.605 1.189
283 score RCVD_FORGED_WROTE 0 # n=0 n=1 n=2 n=3
284 score RCVD_FORGED_WROTE2 0 # n=0 n=1 n=2 n=3
285 #score RCVD_IN_BRBL_LASTEXT 0 1.644 0 1.449 # n=0 n=2
286 score RCVD_IN_PSBL 0 2.700 0 2.700 # n=0 n=2
287 score RCVD_IN_VALIDITY_RPBL 0 1.284 0 1.310 # n=0 n=2
288 score RCVD_IN_VALIDITY_RPBL_BLOCKED 0 0.001 0 0.001
289 score RCVD_MAIL_COM 0 # n=0 n=1 n=2 n=3
290 score RDNS_DYNAMIC 2.639 0.363 1.663 0.982
291 score RDNS_LOCALHOST 3.700 0.969 2.345 0.001
292 score RDNS_NONE 2.399 1.274 1.228 0.793
293 score REFINANCE_NOW 0 # n=0 n=1 n=2 n=3
294 score REFINANCE_YOUR_HOME 0 # n=0 n=1 n=2 n=3
295 score REMOVE_BEFORE_LINK 0.1
296 score REPLICA_WATCH 3.487 3.164 4.074 3.775
297 score REPLYTO_WITHOUT_TO_CC 2.399 1.946 0.607 1.552
298 score REPTO_QUOTE_AOL 0 # n=0 n=1 n=2 n=3
299 score REPTO_QUOTE_IMS 0 # n=0 n=1 n=2 n=3
300 score REPTO_QUOTE_MSN 0 # n=0 n=1 n=2 n=3
301 score REPTO_QUOTE_QUALCOMM 0 # n=0 n=1 n=2 n=3
302 score REPTO_QUOTE_YAHOO 0.001 0.490 0.001 0.646
303 score RUDE_HTML 0 # n=0 n=1 n=2 n=3
304 score SB_GIF_AND_NO_URIS 2.199 2.199 2.200 2.199 # n=2
305 score SHORT_HELO_AND_INLINE_IMAGE 0.1
306 score SHORT_TERM_PRICE 0.001 # n=0 n=1 n=2 n=3
307 score SPAMMY_XMAILER 2.650 0.862 1.993 2.491 # n=2
308 score SPOOF_COM2COM 0.001
309 score SPOOF_COM2OTH 0.001
310 score SPOOF_NET2COM 0 # n=0 n=1 n=2 n=3
311 score STOCK_ALERT 0 # n=0 n=1 n=2 n=3
312 score STOCK_IMG_CTYPE 0.001 0.005 0.001 0.001 # n=2
313 score STOCK_IMG_HDR_FROM 0.001 0.001 0.001 0.021 # n=2
314 score STOCK_IMG_HTML 0.000 0.028 0.000 0.005 # n=2
315 score STOCK_IMG_OUTLOOK 0.001 0.702 0.413 0.190 # n=2
316 score STOCK_PRICES 0 # n=0 n=1 n=2 n=3
317 score STOX_AND_PRICE 0 # n=0 n=1 n=2 n=3
318 score STOX_REPLY_TYPE 1.898 0.212 0.141 0.439 # n=1
319 score STOX_REPLY_TYPE_WITHOUT_QUOTES 3.099 1.860 1.629 1.757
320 score STRONG_BUY 0 # n=0 n=1 n=2 n=3
321 score SUBJECT_DIET 1.927 1.563 0.817 1.466
322 score SUBJECT_DRUG_GAP_C 2.108 0.989 1.348 2.140
323 score SUBJECT_DRUG_GAP_L 2.799 2.304 1.402 1.561
324 score SUBJECT_DRUG_GAP_S 0 # n=0 n=1 n=2 n=3
325 #score SUBJECT_DRUG_GAP_VA 0 # n=0 n=1 n=2 n=3
326 score SUBJECT_DRUG_GAP_X 0 # n=0 n=1 n=2 n=3
327 score SUBJECT_NEEDS_ENCODING 0.498 0.100 0.804 0.049 # n=2
328 score SUBJECT_SEXUAL 0 # n=0 n=1 n=2 n=3
329 score SUBJ_AS_SEEN 2.711 3.099 3.099 1.461 # n=0
330 score SUBJ_BUY 0.594 1.498 0.001 0.639
331 score SUBJ_DOLLARS 0.1
332 #score SUBJ_YOUR_DEBT 3.299 3.045 1.199 0.987
333 score SUBJ_YOUR_FAMILY 2.910 2.999 2.999 2.999
334 score TBIRD_SUSP_MIME_BDRY 2.400 2.400 2.399 2.399
335 score THEBAT_UNREG 2.599 1.843 2.324 1.524
336 score TO_MALFORMED 0.1
338 score TT_MSGID_TRUNC 0.748 0.023 1.434 1.448 # n=2
339 score TT_OBSCURED_VALIUM 0 # n=0 n=1 n=2 n=3
340 score TT_OBSCURED_VIAGRA 0 # n=0 n=1 n=2 n=3
341 score TVD_ACT_193 0 # n=0 n=1 n=2 n=3
342 score TVD_DEAR_HOMEOWNER 0 # n=0 n=1 n=2 n=3
343 score TVD_EB_PHISH 0 # n=0 n=1 n=2 n=3
344 score TVD_ENVFROM_APOST 0 # n=0 n=1 n=2 n=3
345 score TVD_FINGER_02 0.001
346 score TVD_FLOAT_GENERAL 0 # n=0 n=1 n=2 n=3
347 score TVD_INCREASE_SIZE 1.529 0.601 1.055 0.001 # n=1
348 score TVD_LINK_SAVE 0 # n=0 n=1 n=2 n=3
349 score TVD_PH_BODY_ACCOUNTS_PRE 0.001 #changed to 0.001 due to .211 S/O on 2015-05-01 but left due to Meta Use - #1.201 1.527 1.327 2.393 # n=1
352 score TVD_PP_PHISH 0 # n=0 n=1 n=2 n=3
353 score TVD_QUAL_MEDS 2.697 2.397 2.799 2.483 # n=2
354 score TVD_RATWARE_CB 0 # n=0 n=1 n=2 n=3
355 score TVD_RATWARE_CB_2 0 # n=0 n=1 n=2 n=3
356 score TVD_RATWARE_MSGID_02 0 # n=0 n=1 n=2 n=3
357 #score TVD_RCVD_SPACE_BRACKET 0.001 0.001 0.001 0.001 # n=1
358 score TVD_SECTION 0 # n=0 n=1 n=2 n=3
359 score TVD_SILLY_URI_OBFU 0 # n=0 n=1 n=2 n=3
360 score TVD_SPACED_SUBJECT_WORD3 0 # n=0 n=1 n=2 n=3
361 score TVD_SUBJ_ACC_NUM 0.1
362 score TVD_SUBJ_FINGER_03 0 # n=0 n=1 n=2 n=3
363 score TVD_SUBJ_OWE 0 # n=0 n=1 n=2 n=3
364 score TVD_SUBJ_WIPE_DEBT 2.599 2.291 2.599 1.004 # n=2
365 score TVD_VISIT_PHARMA 1.957 1.196 0.417 1.406 # n=2
366 score TVD_VIS_HIDDEN 0 # n=0 n=1 n=2 n=3
367 score UNCLAIMED_MONEY 2.699 2.699 2.699 2.427
368 score UNCLOSED_BRACKET 2.699 1.329 1.425 1.496
369 score UPPERCASE_50_75 0.001 0.791 0.001 0.008
370 score UPPERCASE_75_100 1.480 1.189 0.001 0.001
371 score URG_BIZ 1.750 0.941 0.568 0.573
372 score URI_NOVOWEL 0.500
373 #score URI_NO_WWW_BIZ_CGI 2.399 2.399 2.400 2.399 # n=0
374 #score URI_NO_WWW_INFO_CGI 2.299 2.299 0.292 2.071
375 #score URI_OBFU_WWW 3.099 3.099 2.306 2.475
376 score URI_UNSUBSCRIBE 0 # n=0 n=1 n=2 n=3
377 #score US_DOLLARS_3 2.599 2.523 1.780 1.754
378 score VIA_GAP_GRA 0 # n=0 n=1 n=2 n=3
379 score WEIRD_PORT 0.001 0.001 0.097 0.001
380 score WEIRD_QUOTING 0.001 0.001 0.001 0.001
381 score WITH_LC_SMTP 0 # n=0 n=1 n=2 n=3
382 score X_IP 0.001 0.001 0.001 0.001
383 score X_MAILER_CME_6543_MSN 2.886 2.004 3.002 3.348
384 score X_MESSAGE_INFO 0 # n=0 n=1 n=2 n=3
385 score X_PRIORITY_CC 0 # n=0 n=1 n=2 n=3
386 score YAHOO_DRS_REDIR 0 # n=0 n=1 n=2 n=3
387 score YAHOO_RD_REDIR 0 # n=0 n=1 n=2 n=3
389 # End of generated scores. </gen:mutable>
392 # Bug 5700 - performing terribly 6/2019
393 #score URI_HEX 2.800 1.313 1.206 1.122
396 # Bug 6022, settle at informative score
397 score TVD_RCVD_IP 0.001
398 score TVD_RCVD_IP4 0.001
399 # Bug 6280, 5690, settle at informative score
400 score BAD_ENC_HEADER 0.001
402 ###########################################################################
404 ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
408 ###########################################################################
410 ifplugin Mail::SpamAssassin::Plugin::AccessDB
414 ###########################################################################
416 ifplugin Mail::SpamAssassin::Plugin::BodyEval
418 score BLANK_LINES_80_90 0 # n=0 n=1 n=2 n=3
419 score MPART_ALT_DIFF 2.246 0.724 0.595 0.790
420 score MPART_ALT_DIFF_COUNT 2.799 1.483 1.199 1.112
421 score TVD_STOCK1 0 # n=0 n=1 n=2 n=3
423 score TVD_SPACE_RATIO 0.001
426 ###########################################################################
428 ifplugin Mail::SpamAssassin::Plugin::HTMLEval
430 score HTML_COMMENT_SAVED_URL 0.198 0.357 0.899 1.391
431 score HTML_COMMENT_SHORT 0 # n=0 n=1 n=2 n=3
432 score HTML_EMBEDS 0.001
433 score HTML_EXTRA_CLOSE 0.001
434 score HTML_FONT_FACE_BAD 0.001
435 score HTML_FONT_LOW_CONTRAST 0.713 0.001 0.786 0.001
436 score HTML_FONT_SIZE_HUGE 0.001
437 score HTML_FONT_SIZE_LARGE 0.001
438 score HTML_FORMACTION_MAILTO 0 # n=0 n=1 n=2 n=3
439 score HTML_IFRAME_SRC 0 # n=0 n=1 n=2 n=3
440 score HTML_IMAGE_ONLY_04 1.680 0.342 1.799 1.172
441 score HTML_IMAGE_ONLY_08 0.585 1.781 1.845 1.651
442 score HTML_IMAGE_ONLY_12 1.381 1.629 1.400 2.059
443 score HTML_IMAGE_ONLY_16 1.969 1.048 1.199 1.092
444 score HTML_IMAGE_ONLY_20 2.109 0.700 1.300 1.546
445 score HTML_IMAGE_ONLY_24 2.799 1.282 1.328 1.618
446 score HTML_IMAGE_ONLY_28 2.799 0.726 1.512 1.404
447 score HTML_IMAGE_ONLY_32 2.196 0.001 1.172 0.001
448 score HTML_IMAGE_RATIO_02 0.001
449 score HTML_IMAGE_RATIO_04 0.001
450 score HTML_IMAGE_RATIO_06 0.001 0.001 0.001 0.001
451 score HTML_IMAGE_RATIO_08 0.001 0.001 0.001 0.001
452 score HTML_OBFUSCATE_05_10 0.601 0.001 0.718 0.260
453 score HTML_OBFUSCATE_10_20 0.174 1.162 0.588 0.093
454 score HTML_OBFUSCATE_20_30 2.499 2.441 1.449 1.999
455 score HTML_OBFUSCATE_30_40 0 # n=0 n=1 n=2 n=3
456 score HTML_OBFUSCATE_50_60 0 # n=0 n=1 n=2 n=3
457 score HTML_OBFUSCATE_70_80 0 # n=0 n=1 n=2 n=3
458 score HTML_OBFUSCATE_90_100 2.000 # n=0 n=1 n=2 n=3 - manually scored per list discussion
459 score HTML_BADTAG_40_50 0 # n=0 n=1 n=2 n=3
460 score HTML_BADTAG_50_60 0 # n=0 n=1 n=2 n=3
461 score HTML_BADTAG_60_70 0 # n=0 n=1 n=2 n=3
462 score HTML_BADTAG_90_100 0 # n=0 n=1 n=2 n=3
463 score HTML_NONELEMENT_30_40 0.000 0.001 0.308 0.001
464 score HTML_NONELEMENT_40_50 0 # n=0 n=1 n=2 n=3
465 score HTML_NONELEMENT_60_70 0 # n=0 n=1 n=2 n=3
466 score HTML_NONELEMENT_80_90 0 # n=0 n=1 n=2 n=3
467 score HTML_TAG_BALANCE_BODY 0.1
468 score HTML_TAG_BALANCE_HEAD 0.520 0.000 0.600 0.817
469 score HTML_TAG_EXIST_BGSOUND 0 # n=0 n=1 n=2 n=3
473 score HTML_MESSAGE 0.001
477 ###########################################################################
479 ifplugin Mail::SpamAssassin::Plugin::DNSEval
481 score RCVD_IN_BL_SPAMCOP_NET 0 1.246 0 1.347 # n=0 n=2
482 score RCVD_IN_IADB_DK 0 -0.223 0 -0.095 # n=0 n=1 n=2
483 score RCVD_IN_IADB_DOPTIN_GT50 0 # n=0 n=1 n=2 n=3
484 score RCVD_IN_IADB_DOPTIN_LT50 0 -0.001 0 -0.001 # n=0 n=1 n=2
485 score RCVD_IN_IADB_EDDB 0 # n=0 n=1 n=2 n=3
486 score RCVD_IN_IADB_EPIA 0 # n=0 n=1 n=2 n=3
487 score RCVD_IN_IADB_GOODMAIL 0 # n=0 n=1 n=2 n=3
488 score RCVD_IN_IADB_LISTED 0 -0.380 0 -0.001 # n=0 n=2
489 score RCVD_IN_IADB_LOOSE 0 # n=0 n=1 n=2 n=3
490 score RCVD_IN_IADB_MI_CPEAR 0 # n=0 n=1 n=2 n=3
491 score RCVD_IN_IADB_MI_CPR_30 0 # n=0 n=1 n=2 n=3
492 score RCVD_IN_IADB_MI_CPR_MAT 0 -0.332 0 -0.000 # n=0 n=1 n=2
493 score RCVD_IN_IADB_NOCONTROL 0 # n=0 n=1 n=2 n=3
494 score RCVD_IN_IADB_OOO 0 # n=0 n=1 n=2 n=3
495 score RCVD_IN_IADB_OPTIN 0 -2.057 0 -1.470 # n=0 n=1 n=2
496 score RCVD_IN_IADB_OPTIN_GT50 0 -1.208 0 -0.007 # n=0 n=2
497 score RCVD_IN_IADB_OPTIN_LT50 0 # n=0 n=1 n=2 n=3
498 score RCVD_IN_IADB_OPTOUTONLY 0 # n=0 n=1 n=2 n=3
499 score RCVD_IN_IADB_RDNS 0 -0.167 0 -0.235 # n=0 n=1 n=2
500 score RCVD_IN_IADB_SENDERID 0 -0.001 0 -0.001 # n=0 n=2
501 score RCVD_IN_IADB_SPF 0 -0.001 0 -0.059 # n=0 n=2
502 score RCVD_IN_IADB_UNVERIFIED_1 0 # n=0 n=1 n=2 n=3
503 score RCVD_IN_IADB_UNVERIFIED_2 0 # n=0 n=1 n=2 n=3
504 score RCVD_IN_IADB_UT_CPEAR 0 # n=0 n=1 n=2 n=3
505 score RCVD_IN_IADB_UT_CPR_30 0 # n=0 n=1 n=2 n=3
506 score RCVD_IN_IADB_UT_CPR_MAT 0 -0.095 0 -0.001 # n=0 n=1 n=2
507 score RCVD_IN_SBL 0 2.596 0 0.141 # n=0 n=2
508 score RCVD_IN_XBL 0 0.724 0 0.375 # n=0 n=2
509 score RCVD_IN_PBL 0 3.558 0 3.335 # n=0 n=2
510 score RCVD_IN_SBL_CSS 0 3.558 0 3.335 # n=0 n=2
512 score NO_DNS_FOR_FROM 0 0.379 0 0.001 # n=0 n=2
515 score RCVD_IN_ZEN_BLOCKED_OPENDNS 0 0.001 0 0.001
516 score RCVD_IN_ZEN_BLOCKED 0 0.001 0 0.001
518 # Validity (née ReturnPath) Certified
519 # https://www.validity.com/resource-center/fact-sheet-certification/
520 # CERTIFIED is a subset of SAFE, thus the score is cumulative.
521 # -2 + -3 = -5 points for CERTIFIED
522 score RCVD_IN_VALIDITY_CERTIFIED 0.0 -3.0 0.0 -3.0
523 score RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0 0.001 0 0.001
524 score RCVD_IN_VALIDITY_SAFE 0.0 -2.0 0.0 -2.0
525 score RCVD_IN_VALIDITY_SAFE_BLOCKED 0 0.001 0 0.001
527 # DNSWL is a commercial service that requires payment for servers over 100K queries daily.
528 # Unfortunately, they will return true answers for DNS servers they consider abusive so
529 # SA Admins must enable these rules manually.
531 score RCVD_IN_DNSWL_NONE 0 -0.0001 0 -0.0001
532 score RCVD_IN_DNSWL_LOW 0 -0.7 0 -0.7
533 score RCVD_IN_DNSWL_MED 0 -2.3 0 -2.3
534 score RCVD_IN_DNSWL_HI 0 -5 0 -5
535 score RCVD_IN_DNSWL_BLOCKED 0 0.001 0 0.001
538 score RCVD_IN_IADB_VOUCHED 0 -2.2 0 -2.2
539 score RCVD_IN_IADB_DOPTIN 0 -4 0 -4
540 score RCVD_IN_IADB_ML_DOPTIN 0 -6 0 -6
543 # MAPS is a commercial service. If you pay for these, assign a score
544 # so they will be checked.
545 score RCVD_IN_MAPS_RBL 0
546 score RCVD_IN_MAPS_DUL 0
547 score RCVD_IN_MAPS_RSS 0
548 score RCVD_IN_MAPS_OPS 0
549 score RCVD_IN_MAPS_NML 0
553 ###########################################################################
555 ifplugin Mail::SpamAssassin::Plugin::HeaderEval
557 score DATE_IN_FUTURE_03_06 3.399 2.426 2.997 3.027
558 score DATE_IN_FUTURE_06_12 2.899 0.001 2.222 1.947
559 score DATE_IN_FUTURE_12_24 2.603 2.489 3.199 3.199
560 score DATE_IN_FUTURE_24_48 2.598 1.248 0.001 2.048
561 score DATE_IN_FUTURE_48_96 2.384 0.813 1.078 2.181
562 #score DATE_IN_FUTURE_96_XX 2.614 3.028 2.851 3.087
563 score DATE_IN_FUTURE_96_XX 0
564 score DATE_IN_PAST_03_06 2.399 1.076 1.200 1.592
565 score DATE_IN_PAST_06_12 1.699 1.103 1.274 1.543
566 score DATE_IN_PAST_12_24 0.001 0.804 1.190 1.049
567 score DATE_IN_PAST_24_48 1.109 0.485 0.624 1.340
568 score DATE_IN_PAST_96_XX 2.600 2.070 1.233 3.405
569 score FORGED_HOTMAIL_RCVD2 0.001 1.187 0.698 0.874
570 score FORGED_YAHOO_RCVD 2.397 1.022 2.599 1.630
571 score FROM_ILLEGAL_CHARS 2.192 2.059 0.240 0.036
572 score HEADER_COUNT_CTYPE 0 # n=0 n=1 n=2 n=3
573 score HEADER_COUNT_SUBJECT 0 # n=0 n=1 n=2 n=3
574 score HEAD_ILLEGAL_CHARS 0 # n=0 n=1 n=2 n=3
575 score LOCALPART_IN_SUBJECT 0.001 0.730 1.199 1.107
576 score MISSING_HEADERS 0.915 1.207 1.204 1.021
577 score MSGID_OUTLOOK_INVALID 3.899
578 score RATWARE_EFROM 0.1
579 score RATWARE_NAME_ID 3.099 0.309 3.099 0.247 # n=0
580 score SORTED_RECIPS 1.801 2.474 1.791 2.499
581 score SUBJ_ALL_CAPS 0.5
582 score SUBJ_ILLEGAL_CHARS 0.620 1.105 0.448 1.518
583 score SUSPICIOUS_RECIPS 2.499 2.497 2.139 2.510
584 score UNRESOLVED_TEMPLATE 3.035 0.716 2.424 1.252
588 score CHARSET_FARAWAY_HEADER 3.200
592 ###########################################################################
594 ifplugin Mail::SpamAssassin::Plugin::ImageInfo
596 score DC_GIF_UNO_LARGO 0.001 1.323 0.053 2.176 # n=2
597 score DC_IMAGE_SPAM_HTML 0.1
598 score DC_IMAGE_SPAM_TEXT 0.1
599 score DC_PNG_UNO_LARGO 0.001 # n=0 n=1 n=2 n=3
604 ###########################################################################
606 ifplugin Mail::SpamAssassin::Plugin::MIMEEval
608 score BASE64_LENGTH_78_79 0.1
609 score BASE64_LENGTH_79_INF 1.379 2.019 0.583 1.502 # n=2
610 score MIME_BAD_ISO_CHARSET 0 # n=0 n=1 n=2 n=3
611 #score MIME_BASE64_BLANKS 0.001 0.001 0.001 0.001
612 score MIME_BASE64_TEXT 0.001 0.001 0.001 1.741
613 score MIME_HTML_MOSTLY 0.1
614 score MIME_HTML_ONLY 0.1
615 score MISSING_MIME_HB_SEP 0.001 0.001 0.001 0.001
616 score MULTIPART_ALT_NON_TEXT 0 # n=0 n=1 n=2 n=3
618 score MIME_QP_LONG_LINE 0.001
619 score MIMEPART_LIMIT_EXCEEDED 0.001
622 score CHARSET_FARAWAY 3.200
625 # score HEAD_LONG 2.5
626 # score MISSING_HB_SEP 2.5
630 ###########################################################################
632 ifplugin Mail::SpamAssassin::Plugin::RelayEval
634 score NO_RDNS_DOTCOM_HELO 3.100 0.433 3.099 0.823
635 score RCVD_HELO_IP_MISMATCH 1.680 1.186 2.362 2.368
636 # score RCVD_ILLEGAL_IP 3.399
637 score RCVD_ILLEGAL_IP 1.3
638 score RCVD_NUMERIC_HELO 0.001 0.865 0.001 1.164
641 # Informational rules about Received header parsing
642 score NO_RELAYS -0.001
643 score UNPARSEABLE_RELAY 0.001
644 score HELO_STATIC_HOST -0.001
646 # immutable (due to tflags userconf), see bug 5544
647 # score ALL_TRUSTED -1.360 -1.440 -1.665 -1.800
651 ###########################################################################
653 ifplugin Mail::SpamAssassin::Plugin::URIEval
655 score HTTPS_IP_MISMATCH 0 # n=0 n=1 n=2 n=3
657 score URI_TRUNCATED 0.001
660 ###########################################################################
662 # Scores for tests that are scored manually or with isolated rescore runs.
663 # Most are net tests, userconf tests, tests occuring with very low frequency,
664 # or tests with many false positives.
666 # GTUBE - Generic Test for Unsolicited Bulk Email
670 # score FRAGMENTED_MESSAGE 2.5
671 # score HIGH_CODEPAGE_URI 2.5
673 # make the Bayes scores unmutable (as discussed in bug 4505)
674 ifplugin Mail::SpamAssassin::Plugin::Bayes
675 score BAYES_00 0 0 -1.5 -1.9
676 score BAYES_05 0 0 -0.3 -0.5
677 score BAYES_20 0 0 -0.001 -0.001
678 score BAYES_40 0 0 -0.001 -0.001
679 score BAYES_50 0 0 2.0 0.8
680 score BAYES_60 0 0 2.5 1.5
681 score BAYES_80 0 0 2.7 2.0
682 score BAYES_95 0 0 3.2 3.0
683 score BAYES_99 0 0 3.8 3.5
684 score BAYES_999 0 0 0.2 0.2
687 # Informational rules about Received header parsing
688 score NO_RECEIVED -0.001
690 # Informational rule, URI parsing encountered an overlong URI
692 # Informational rule, typically means corrupt corpus/input
693 score NO_HEADERS_MESSAGE 0.001
696 score HTML_CHARSET_FARAWAY 0.500
697 score MIME_CHARSET_FARAWAY 2.450
699 # rescore never changes the welcomelist/blocklist scores
700 ifplugin Mail::SpamAssassin::Plugin::WLBLEval
701 #score USER_IN_BLOCKLIST 100.000 - Moved to 60_welcomelist.cf
702 #score USER_IN_WELCOMELIST -100.000 - Moved to 60_welcomelist.cf
703 #score USER_IN_DEF_WELCOMELIST -15.000 - Moved to 60_welcomelist.cf
704 #score USER_IN_BLOCKLIST_TO 10.000 - Moved to 60_welcomelist.cf
705 #score URI_HOST_IN_BLOCKLIST 100.0 - Moved to 60_welcomelist.cf
706 #score URI_HOST_IN_WELCOMELIST -100.0 - Moved to 60_welcomelist.cf
708 #score HEADER_HOST_IN_BLOCKLIST 100.0
709 #score HEADER_HOST_IN_WELCOMELIST -100.0
711 # not really false positives but the user wants spam!
712 #score USER_IN_WELCOMELIST_TO -6.000 - Moved to 60_welcomelist.cf
713 score USER_IN_MORE_SPAM_TO -20.000
714 score USER_IN_ALL_SPAM_TO -100.000
717 ifplugin Mail::SpamAssassin::Plugin::SPF
718 score USER_IN_SPF_WELCOMELIST -100 # overridden in 60_welcomelist_spf.cf
719 score USER_IN_SPF_WHITELIST -100 # overridden in 60_welcomelist_spf.cf
720 score USER_IN_DEF_SPF_WL -7.500
721 score ENV_AND_HDR_SPF_MATCH -0.5
722 endif # Mail::SpamAssassin::Plugin::SPF
725 ifplugin Mail::SpamAssassin::Plugin::DKIM
726 score USER_IN_DKIM_WELCOMELIST -100 # overridden in 60_welcomelist_dkim.cf
727 score USER_IN_DKIM_WHITELIST -100 # overridden in 60_welcomelist_dkim.cf
728 score USER_IN_DEF_DKIM_WL -7.500
729 score DKIM_SIGNED 0.1
730 score DKIM_VALID -0.1
731 score DKIM_INVALID 0.1
732 score DKIM_VALID_AU -0.1
734 if (version >= 3.004002)
735 score DKIM_VALID_EF -0.1
738 if can(Mail::SpamAssassin::Plugin::DKIM::has_arc)
739 score ARC_SIGNED 0.001
741 score ARC_INVALID 0.1
744 score DKIM_VERIFIED 0
745 score DKIM_POLICY_SIGNALL 0
746 score DKIM_POLICY_SIGNSOME 0
747 score DKIM_POLICY_TESTING 0
748 score DKIM_ADSP_CUSTOM_LOW 0.001
749 score DKIM_ADSP_CUSTOM_MED 0.001
750 score DKIM_ADSP_CUSTOM_HIGH 0.001
751 score NML_ADSP_CUSTOM_LOW 0 0.7 0 0.7
752 score NML_ADSP_CUSTOM_MED 0 1.2 0 0.9
753 score NML_ADSP_CUSTOM_HIGH 0 2.6 0 2.5
755 score DKIM_ADSP_ALL 0 1.1 0 0.8
756 score DKIM_ADSP_DISCARD 0 1.8 0 1.8
757 score DKIM_ADSP_NXDOMAIN 0 0.8 0 0.9
759 endif # Mail::SpamAssassin::Plugin::DKIM
761 ifplugin Mail::SpamAssassin::Plugin::AskDNS
763 score DKIMDOMAIN_IN_DWL 0 -3.5 0 -3.5
764 score DKIMDOMAIN_IN_DWL_UNKNOWN 0 -0.01 0 -0.01
769 # Note that the benefit for a valid SPF record is deliberately minimal; it's
770 # likely that more spammers would quickly move to setting valid SPF records
771 # otherwise. The penalties for an *incorrect* record, however, are large. ;)
772 ifplugin Mail::SpamAssassin::Plugin::SPF
774 score SPF_HELO_NONE 0.001
775 score SPF_PASS -0.001
776 score SPF_HELO_PASS -0.001
778 score SPF_FAIL 0 0.919 0 0.001 # n=0 n=2
779 score SPF_HELO_FAIL 0 0.001 0 0.001 # n=0 n=2
780 score SPF_HELO_NEUTRAL 0 0.001 0 0.112 # n=0 n=2
781 score SPF_HELO_SOFTFAIL 0 0.896 0 0.732 # n=0 n=2
782 score SPF_NEUTRAL 0 0.652 0 0.779 # n=0 n=2
783 score SPF_SOFTFAIL 0 0.972 0 0.665 # n=0 n=2
785 endif # Mail::SpamAssassin::Plugin::SPF
788 ifplugin Mail::SpamAssassin::Plugin::DMARC
789 score DMARC_PASS -0.001
791 score DMARC_REJECT 0.001 1.797 0.001 1.797 # n=0 n=2
792 score DMARC_QUAR 0.001 1.198 0.001 1.198 # n=0 n=2
793 score DMARC_NONE 0.001 0.898 0.001 0.898 # n=0 n=2
795 score DMARC_MISSING 0.001
796 endif # Mail::SpamAssassin::Plugin::DMARC
799 ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
801 #score URIBL_AB_SURBL 0 4.499 0 4.499 # n=0 n=2 - removed bug 7279
802 #Changed below from JP to Abuse - bug 7279
803 score URIBL_ABUSE_SURBL 0 1.948 0 1.250 # n=0 n=2
804 score URIBL_PH_SURBL 0 0.001 0 0.610 # n=0 n=2
805 score URIBL_RHS_DOB 0 0.276 0 1.514 # n=0 n=2
806 score URIBL_SBL 0 0.644 0 1.623 # n=0 n=2
807 score URIBL_CSS 0 0.1 0 0.1
808 score URIBL_SBL_A 0 0.1 0 0.1
809 score URIBL_CSS_A 0 0.1 0 0.1
810 #score URIBL_SC_SURBL 0 0.001 0 0.568 # n=0 n=2 - removed bug 7279
811 #score URIBL_WS_SURBL 0 1.659 0 1.608 # n=0 n=2 - Removed bug 8093
812 score URIBL_MW_SURBL 0 1.263 0 1.263
813 score URIBL_CR_SURBL 0 1.263 0 1.263
814 score URIBL_BLACK 0 1.7 0 1.7 # n=0 n=2
815 score URIBL_GREY 0 1.084 0 0.424 # n=0 n=2
816 score URIBL_DBL_SPAM 0 2.5 0 2.5
817 score URIBL_DBL_PHISH 0 2.5 0 2.5
818 score URIBL_DBL_MALWARE 0 2.5 0 2.5
819 score URIBL_DBL_BOTNETCC 0 2.5 0 2.5
820 score URIBL_DBL_ABUSE_SPAM 0 2.0 0 2.0
821 score URIBL_DBL_ABUSE_REDIR 0 0.001 0 0.001
822 score URIBL_DBL_ABUSE_PHISH 0 2.5 0 2.5
823 score URIBL_DBL_ABUSE_MALW 0 2.5 0 2.5
824 score URIBL_DBL_ABUSE_BOTCC 0 2.5 0 2.5
827 # score URIBL_GREY 0.25
828 score URIBL_RED 0 0.001 0 0.001
829 score URIBL_BLOCKED 0 0.001 0 0.001
830 score URIBL_DBL_ERROR 0 0.001 0 0.001
831 score URIBL_ZEN_BLOCKED_OPENDNS 0 0.001 0 0.001
832 score URIBL_ZEN_BLOCKED 0 0.001 0 0.001
833 score URIBL_DBL_BLOCKED_OPENDNS 0 0.001 0 0.001
834 score URIBL_DBL_BLOCKED 0 0.001 0 0.001
835 endif # Mail::SpamAssassin::Plugin::URIDNSBL
838 ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
840 score FUZZY_AFFORDABLE 0 # n=0 n=1 n=2 n=3
841 #score FUZZY_AMBIEN 0.1
842 score FUZZY_BILLION 0 # n=0 n=1 n=2 n=3
843 score FUZZY_CPILL 0.001 0.001 0.001 0.001
844 score FUZZY_CREDIT 1.699 1.413 0.601 1.678
845 #score FUZZY_ERECT 0.1
846 score FUZZY_GUARANTEE 0 # n=0 n=1 n=2 n=3
847 score FUZZY_MEDICATION 0 # n=0 n=1 n=2 n=3
848 score FUZZY_MERIDIA 0 # n=0 n=1 n=2 n=3
849 score FUZZY_MILLION 0.1
850 score FUZZY_MONEY 0 # n=0 n=1 n=2 n=3
851 score FUZZY_MORTGAGE 0 # n=0 n=1 n=2 n=3
852 score FUZZY_OBLIGATION 0 # n=0 n=1 n=2 n=3
853 score FUZZY_OFFERS 0 # n=0 n=1 n=2 n=3
854 score FUZZY_PHARMACY 2.960 3.299 1.967 1.353
855 score FUZZY_PHENT 2.799 1.647 1.540 2.662 # n=0
856 score FUZZY_PRESCRIPT 0 # n=0 n=1 n=2 n=3
857 score FUZZY_PRICES 1.821 0.720 2.210 2.311
858 score FUZZY_REFINANCE 0 # n=0 n=1 n=2 n=3
859 score FUZZY_REMOVE 0 # n=0 n=1 n=2 n=3
860 #score FUZZY_ROLEX 0.1
861 score FUZZY_SOFTWARE 0 # n=0 n=1 n=2 n=3
862 score FUZZY_THOUSANDS 0 # n=0 n=1 n=2 n=3
863 score FUZZY_VLIUM 0 # n=0 n=1 n=2 n=3
864 score FUZZY_VIOXX 0 # n=0 n=1 n=2 n=3
865 score FUZZY_VPILL 0.001 0.494 0.796 1.014
866 score FUZZY_XPILL 0.1
867 score SUBJECT_FUZZY_CHEAP 0.641 1.831 0.833 0.001 # n=0
868 score SUBJECT_FUZZY_MEDS 0 # n=0 n=1 n=2 n=3
869 score SUBJECT_FUZZY_PENIS 0 # n=0 n=1 n=2 n=3
870 score SUBJECT_FUZZY_TION 0 # n=0 n=1 n=2 n=3
871 score SUBJECT_FUZZY_VPILL 0 # n=0 n=1 n=2 n=3
872 score TVD_FUZZY_DEGREE 0 # n=0 n=1 n=2 n=3
873 score TVD_FUZZY_FINANCE 0 # n=0 n=1 n=2 n=3
874 score TVD_FUZZY_FIXED_RATE 0 # n=0 n=1 n=2 n=3
875 score TVD_FUZZY_MICROCAP 0 # n=0 n=1 n=2 n=3
876 score TVD_FUZZY_PHARMACEUTICAL 0 # n=0 n=1 n=2 n=3
877 score TVD_FUZZY_SYMBOL 0 # n=0 n=1 n=2 n=3
879 endif # Mail::SpamAssassin::Plugin::ReplaceTags
882 ifplugin Mail::SpamAssassin::Plugin::DCC
883 score DCC_CHECK 0 1.1 0 1.1
884 score DCC_REPUT_00_12 0 -0.8 0 -0.4
885 score DCC_REPUT_13_19 0 -0.1 0 -0.1
886 score DCC_REPUT_70_89 0 0.1 0 0.1
887 score DCC_REPUT_90_94 0 0.4 0 0.6
888 score DCC_REPUT_95_98 0 0.7 0 1.0
889 score DCC_REPUT_99_100 0 1.2 0 1.4
890 endif # Mail::SpamAssassin::Plugin::DCC
893 ifplugin Mail::SpamAssassin::Plugin::Pyzor
895 score PYZOR_CHECK 0 1.985 0 1.392 # n=0 n=2
897 endif # Mail::SpamAssassin::Plugin::Pyzor
900 ifplugin Mail::SpamAssassin::Plugin::Razor2
902 score RAZOR2_CHECK 0 1.729 0 0.922 # n=0 n=2
903 score RAZOR2_CF_RANGE_51_100 0 2.430 0 1.886 # n=0 n=2
905 endif # Mail::SpamAssassin::Plugin::Razor2
908 ifplugin Mail::SpamAssassin::Plugin::TextCat
909 score UNWANTED_LANGUAGE_BODY 2.800
910 score BODY_8BITS 1.500
911 endif # Mail::SpamAssassin::Plugin::TextCat
914 ifplugin Mail::SpamAssassin::Plugin::AntiVirus
915 score MICROSOFT_EXECUTABLE 0.1
916 score MIME_SUSPECT_NAME 0.1
917 endif # Mail::SpamAssassin::Plugin::AntiVirus
919 # VBounce - anti-bounce message ruleset. All of these are informational,
920 # and should not be scored as antispam rules; instead the user needs
921 # to detect messages that hit ANY_BOUNCE_MESSAGE, and filter them aside
922 # as spurious bounces.
924 ifplugin Mail::SpamAssassin::Plugin::VBounce
925 score BOUNCE_MESSAGE 0.1
926 score CRBOUNCE_MESSAGE 0.1
927 score VBOUNCE_MESSAGE 0.1
928 score OOOBOUNCE_MESSAGE 0.1
929 score ANY_BOUNCE_MESSAGE 0.1
930 endif # Mail::SpamAssassin::Plugin::VBounce
932 # another informational rule: this is for C/R responses to mail the user
933 # really did sent -- the opposite of CRBOUNCE_MESSAGE. some users might
934 # like to block all C/R bounces, or filter them separately.
936 score CHALLENGE_RESPONSE 0.1
938 # It's still quite common for non-spam senders to send mail from hosts with
939 # no rDNS, or "dynamic-looking" rDNS. Lock these down to low values;
940 # some sites can increase them as a matter of local policy, and they
941 # make great fodder for meta rules, too.
943 # score RDNS_NONE 0 1.1 0 0.7
944 # score RDNS_DYNAMIC 0 0.5 0 0.5
947 ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
949 score CTYPE_8SPACE_GIF 0 # n=0 n=1 n=2 n=3
953 ifplugin Mail::SpamAssassin::Plugin::HTTPSMismatch
955 score HTTPS_HTTP_MISMATCH 0.1
959 ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
961 score PART_CID_STOCK 0.001 0.001 0.001 0.000 # n=2
965 ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
967 score PART_CID_STOCK_LESS 0.000 0.036 0.745 0.894 # n=2
971 ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
973 score TVD_FW_GRAPHIC_NAME_LONG 0.001 0.648 0.836 1.293 # n=2
977 ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
979 score TVD_FW_GRAPHIC_NAME_MID 0.600 0.001 0.389 0.095 # n=2
984 score KB_RATWARE_OUTLOOK_08 0
985 score KB_RATWARE_OUTLOOK_12 0
986 score KB_RATWARE_OUTLOOK_16 0
987 score KB_RATWARE_BOUNDARY 0
989 # MAILSPIKE RBL ENABLED FOR SA3.4 and above - BUG 6400
990 if (version >= 3.004000)
991 # FLOATING SCORES FOR GA - adjust after GA to make L3 - L5 linear
992 # Probably adjust up slightly to make up for the "reuse" imperfection
994 score RCVD_IN_MSPIKE_ZBI 2.7
995 score RCVD_IN_MSPIKE_L5 2.5
996 score RCVD_IN_MSPIKE_L4 1.7
997 score RCVD_IN_MSPIKE_L3 0.9
1000 # TEMPORARILY LOWERED - adjust these higher after GA is done
1001 # (pending discussion: Welcomelists need scores, but they shouldn't effect the scoring of spam detection rules.)
1002 score RCVD_IN_MSPIKE_H3 -0.01
1003 score RCVD_IN_MSPIKE_H4 -0.01
1004 score RCVD_IN_MSPIKE_H5 -1.0
1005 # FIXED SCORES - informational rules, useful only for statistical comparisons
1006 score RCVD_IN_MSPIKE_BL 0.01
1007 score RCVD_IN_MSPIKE_WL -0.01
projects / proxmox-spamassassin.git / blob