# active ruleset list, automatically generated from http://ruleqa.spamassassin.org/ # with results from: bb-doc bb-jm bb-zmi cthielen daf dos parkerm theo # tflags userconf ALL_TRUSTED # tflags userconf AWL # good enough AXB_FAKETZ # good enough AXB_XR_STULDAP # good enough BASE64_LENGTH_78 # good enough BASE64_LENGTH_79 # good enough BASE64_LENGTH_80 # good enough BASE64_LENGTH_90 # tflags learn BAYES_00 # tflags learn BAYES_05 # tflags learn BAYES_20 # tflags learn BAYES_40 # tflags learn BAYES_50 # tflags learn BAYES_60 # tflags learn BAYES_80 # tflags learn BAYES_95 # tflags learn BAYES_99 # good enough BROKEN_RATWARE_BOM # good enough CTYPE_000_00_BOUND # good enough DC_GIF_MULTI_LARGO # good enough DC_GIF_UNO_LARGO # good enough DC_IMAGE_SPAM_HTML # good enough DC_IMAGE_SPAM_TEXT # good enough DC_IMG_HTML_RATIO # good enough DC_IMG_TEXT_RATIO # good enough DC_PNG_UNO_LARGO # good enough DEAR_WINNER # tflags net DIGEST_MULTIPLE # tflags net DNS_FROM_AHBL_RHSBL # tflags net DNS_FROM_RFC_BOGUSMX # tflags net DNS_FROM_RFC_DSN # tflags net DNS_FROM_SECURITYSAGE # good enough DOS_DOUBLE_SOTCK # good enough DOS_LET_GO_JOB # good enough DOS_MORTGAGE # good enough DOS_STOCK_O_PRICE # good enough DOS_TO_READ_STOCK # good enough DOS_TWO_MIS_STOCK # good enough DOS_YOUR_PLACE # good enough DRUGS_HDIA # good enough DRUGS_STOCK_MIMEOLE # good enough FB_CIALIS_LEO3 # good enough FB_OBFU_URI_COM # good enough FB_SAVE_LEO # good enough FB_THOUS_PERSONAL # good enough FB_VALIUM_LEO2 # good enough FB_VIAGRA_LEO3 # good enough FB_YOURSELF_MASTER # good enough FH_DATE_IS_19XX # good enough FH_DATE_PAST_20XX # good enough FH_FROM_HOODIA # good enough FH_FROM_TO_PERC # good enough FM_CUSTOMLOGODSGNc # good enough FS_START_DOYOU2 # good enough FUZZY_MERIDIA # good enough GEO_QUERY_STRING # good enough GMD_FAKETZ # tflags net HABEAS_ACCREDITED_COI # tflags net HABEAS_ACCREDITED_SOI # tflags net HABEAS_CHECKED # tflags userconf HASHCASH_20 # tflags userconf HASHCASH_21 # tflags userconf HASHCASH_22 # tflags userconf HASHCASH_23 # tflags userconf HASHCASH_24 # tflags userconf HASHCASH_25 # tflags userconf HASHCASH_2SPEND # tflags userconf HASHCASH_HIGH # tflags userconf HEAD_LONG # good enough HS_FORGED_OE_FW # good enough HS_GETMEOFF # good enough HS_PHARMA_1 # good enough HS_SUBJ_ONLINE_PHARMACEUTICAL # tflags userconf HTML_CHARSET_FARAWAY # good enough HTTPS_HTTP_MISMATCH # good enough JM_RCVD_QMAILV1 # good enough KAM_STOCKOTC # good enough KAM_STOCKTIP12 # good enough KAM_STOCKTIP15 # good enough KAM_STOCKTIP21 # good enough KAM_STOCKTIP6 # good enough KAM_STOCKTIP8 # good enough MID_DEGREES # good enough MID_MJW_STOX # good enough MID_START_001C # tflags userconf MISSING_HB_SEP # tflags net NO_DNS_FOR_FROM # tflags userconf NO_RECEIVED # tflags userconf NO_RELAYS # good enough NULL_IN_BODY # good enough OUTLOOK_3416 # good enough PART_CID_STOCK # good enough PART_CID_STOCK_LESS # tflags net PYZOR_CHECK # tflags net RAZOR2_CF_RANGE_51_100 # tflags net RAZOR2_CF_RANGE_E4_51_100 # tflags net RAZOR2_CF_RANGE_E8_51_100 # tflags net RAZOR2_CHECK # good enough RCVD_FORGED_WROTE # tflags net RCVD_IN_BL_SPAMCOP_NET # tflags net RCVD_IN_BSP_OTHER # tflags net RCVD_IN_BSP_TRUSTED # tflags net RCVD_IN_DSBL # tflags net RCVD_IN_IADB_VOUCHED # tflags net RCVD_IN_MAPS_DUL # tflags net RCVD_IN_MAPS_NML # tflags net RCVD_IN_MAPS_RBL # tflags net RCVD_IN_MAPS_RSS # tflags net RCVD_IN_NJABL_CGI # tflags net RCVD_IN_NJABL_DUL # tflags net RCVD_IN_NJABL_MULTI # tflags net RCVD_IN_NJABL_PROXY # tflags net RCVD_IN_NJABL_RELAY # tflags net RCVD_IN_NJABL_SPAM # tflags net RCVD_IN_SBL # tflags net RCVD_IN_SORBS_BLOCK # tflags net RCVD_IN_SORBS_DUL # tflags net RCVD_IN_SORBS_HTTP # tflags net RCVD_IN_SORBS_MISC # tflags net RCVD_IN_SORBS_SMTP # tflags net RCVD_IN_SORBS_SOCKS # tflags net RCVD_IN_SORBS_WEB # tflags net RCVD_IN_SORBS_ZOMBIE # tflags net RCVD_IN_WHOIS_BOGONS # tflags net RCVD_IN_WHOIS_HIJACKED # tflags net RCVD_IN_WHOIS_INVALID # tflags net RCVD_IN_XBL # good enough RCVD_LSO_SND # good enough RCVD_MAIL_COM # tflags net ROUND_THE_WORLD # tflags net SPF_FAIL # tflags net SPF_HELO_FAIL # tflags net SPF_HELO_NEUTRAL # tflags net SPF_HELO_PASS # tflags net SPF_HELO_SOFTFAIL # tflags net SPF_NEUTRAL # tflags net SPF_PASS # tflags net SPF_SOFTFAIL # tflags userconf SUBJECT_IN_BLACKLIST # tflags userconf SUBJECT_IN_WHITELIST # good enough SUBJECT_NEEDS_ENCODING # good enough SUBJ_RE_NUM # good enough TT_MSGID_TRUNC # good enough TT_OBSCURED_VIAGRA # good enough TVD_ACT_193 # good enough TVD_APP_LOAN # good enough TVD_DEAR_HOMEOWNER # good enough TVD_DOLLARS_US # good enough TVD_EB_PHISH # good enough TVD_FINGER_02 # good enough TVD_FLOAT_GENERAL # good enough TVD_FUZZY_DEGREE # good enough TVD_FUZZY_FINANCE # good enough TVD_FUZZY_FIXED_RATE # good enough TVD_FUZZY_PHARMACEUTICAL # good enough TVD_FUZZY_SYMBOL # good enough TVD_FW_GRAPHIC_ID3 # good enough TVD_FW_GRAPHIC_ID3_2 # good enough TVD_GET_STOCK # good enough TVD_HEAD_KERNEL # good enough TVD_INCREASE_SIZE # good enough TVD_NOT_SATISFIED # good enough TVD_PH_7 # good enough TVD_PH_FR5 # good enough TVD_PH_REC # good enough TVD_PH_SUBJ_ACCOUNTS_POST # good enough TVD_PH_SUBJ_META # good enough TVD_PH_SUBJ_META_ALL # good enough TVD_PH_SUBJ_SEC_MEASURES # good enough TVD_PH_SUBJ_UPDATE # good enough TVD_PH_SUBJ_URGENT # good enough TVD_PP_PHISH # good enough TVD_QUAL_MEDS # good enough TVD_RATWARE_CB # good enough TVD_RATWARE_CB_2 # good enough TVD_RATWARE_MSGID_01 # good enough TVD_RATWARE_MSGID_02 # good enough TVD_SECTION # good enough TVD_SINGLE_SPAN_DIV # good enough TVD_SPACED_SUBJECT_WORD3 # good enough TVD_SPACED_SUBJECT_WORD5 # good enough TVD_STOCK1 # good enough TVD_SUBJ_ACC_NUM # good enough TVD_SUBJ_APPR_LOAN # good enough TVD_SUBJ_END_STAR # good enough TVD_SUBJ_FINGER_03 # good enough TVD_SUBJ_FINGER_04 # good enough TVD_SUBJ_OWE # good enough TVD_SUBJ_WIPE_DEBT # good enough TVD_UA_FOSTERING # good enough TVD_VISIT_PHARMA # good enough TVD_VIS_HIDDEN # tflags userconf CORRUPT_FROM_LINE_IN_HDRS # good enough CTYPE_8SPACE_GIF # tflags net DNS_FROM_DOB # tflags net DNS_FROM_OPENWHOIS # tflags net RCVD_IN_DOB # tflags net RCVD_IN_DSBL # tflags net RCVD_IN_IADB_DK # tflags net RCVD_IN_IADB_DOPTIN # tflags net RCVD_IN_IADB_DOPTIN_GT50 # tflags net RCVD_IN_IADB_DOPTIN_LT50 # tflags net RCVD_IN_IADB_EDDB # tflags net RCVD_IN_IADB_EPIA # tflags net RCVD_IN_IADB_GOODMAIL # tflags net RCVD_IN_IADB_LISTED # tflags net RCVD_IN_IADB_LOOSE # tflags net RCVD_IN_IADB_MI_CPEAR # tflags net RCVD_IN_IADB_MI_CPR_30 # tflags net RCVD_IN_IADB_MI_CPR_MAT # tflags net RCVD_IN_IADB_ML_DOPTIN # tflags net RCVD_IN_IADB_NOCONTROL # tflags net RCVD_IN_IADB_OOO # tflags net RCVD_IN_IADB_OPTIN # tflags net RCVD_IN_IADB_OPTIN_GT50 # tflags net RCVD_IN_IADB_OPTIN_LT50 # tflags net RCVD_IN_IADB_OPTOUTONLY # tflags net RCVD_IN_IADB_RDNS # tflags net RCVD_IN_IADB_SENDERID # tflags net RCVD_IN_IADB_SPF # tflags net RCVD_IN_IADB_UNVERIFIED_1 # tflags net RCVD_IN_IADB_UNVERIFIED_2 # tflags net RCVD_IN_IADB_UT_CPEAR # tflags net RCVD_IN_IADB_UT_CPR_30 # tflags net RCVD_IN_IADB_UT_CPR_MAT # tflags net RCVD_IN_MAPS_DUL # tflags net RCVD_IN_NJABL_DUL # tflags net RCVD_IN_SORBS_DUL # tflags net RCVD_IN_WHOIS_INVALID # tflags net RCVD_IN_XBL # good enough TVD_FW_GRAPHIC_NAME_LONG # good enough TVD_FW_GRAPHIC_NAME_MID # good enough TVD_PH_SEC # tflags net URIBL_RHS_DOB # tflags net WHOIS_AITPRIV # tflags net WHOIS_CONTACTPRIV # tflags net WHOIS_DMNBYPROXY # tflags net WHOIS_DOMESCROW # tflags net WHOIS_DOMPRIVCORP # tflags net WHOIS_DREAMPRIV # tflags net WHOIS_DROA # tflags net WHOIS_DYNADOT # tflags net WHOIS_FINEXE # tflags net WHOIS_GKGPROXY # tflags net WHOIS_IDSHIELD # tflags net WHOIS_IDTHEFTPROT # tflags net WHOIS_KATZ # tflags net WHOIS_LISTINGAG # tflags net WHOIS_LNOA # tflags net WHOIS_MAPNAME # tflags net WHOIS_MONIKER_PRIV # tflags net WHOIS_MYPRIVREG # tflags net WHOIS_NAMESECURE # tflags net WHOIS_NETID # tflags net WHOIS_NETSOLPR # tflags net WHOIS_NOLDC # tflags net WHOIS_NOMINET # tflags net WHOIS_PRIVACYPOST # tflags net WHOIS_PRIVDOMAIN # tflags net WHOIS_REGISTER4LESS # tflags net WHOIS_REGTEK # tflags net WHOIS_SAFENAMES # tflags net WHOIS_SECINFOSERV # tflags net WHOIS_SPAMFREE # tflags net WHOIS_SRSPLUS # tflags net WHOIS_UNLISTED # tflags net WHOIS_WHOISPROT # tflags userconf UNPARSEABLE_RELAY # tflags net URIBL_AB_SURBL # tflags net URIBL_BLACK # tflags net URIBL_GREY # tflags net URIBL_JP_SURBL # tflags net URIBL_OB_SURBL # tflags net URIBL_PH_SURBL # tflags net URIBL_RED # tflags net URIBL_SBL # tflags net URIBL_SC_SURBL # tflags net URIBL_WS_SURBL # good enough URI_L_PHP # tflags userconf USER_IN_ALL_SPAM_TO # tflags userconf USER_IN_BLACKLIST # tflags userconf USER_IN_BLACKLIST_TO # tflags userconf USER_IN_DEF_WHITELIST # tflags userconf USER_IN_MORE_SPAM_TO # tflags userconf USER_IN_WHITELIST # tflags userconf USER_IN_WHITELIST_TO # good enough VERTICAL_DRUGS_1 # tflags net WHOIS_1AND1PR # tflags net WHOIS_NAMEKING # tflags net WHOIS_PRIVPROT # tflags net WHOIS_REGISTERFLY # tflags net WHOIS_SECUREWHOIS # tflags net WHOIS_WHOISGUARD # good enough ZMIde_EBAYJOBSURI # good enough ZMIde_SEXUALEXPL1 # tflags net __RCVD_IN_DOB # tflags net __RCVD_IN_IADB # tflags net __RCVD_IN_NJABL # tflags net __RCVD_IN_SBL_XBL # tflags net __RCVD_IN_SORBS # tflags net __RCVD_IN_WHOIS # tflags net __RFC_IGNORANT_ENVFROM