proxmox-mirrors/proxmox-spamassassin
1
0
Fork 0
mirror of https://git.proxmox.com/git/proxmox-spamassassin synced 2025-04-28 15:29:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

update SpamAssassin signatures

Browse Source 
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov 2022-11-28 13:49:06 +01:00
parent 91f413819f
commit dfdd1e0819
30 changed files with 1886 additions and 2257 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

269
sa-updates/20_aux_tlds.cf
View File

@ -51,149 +51,148 @@ endif
# this block # this block
# #
# For an up to date list of IDN TLDs that can be pasted into this block, run this command: # For an up to date list of IDN TLDs that can be pasted into this block, run this command:
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 'chomp; s/.*/util_rb_tld \L$_\n/' # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
# Since version 4.0 the util_rb_tld also accepts Unicode IDN labels (encoded as UTF-8), e.g.: # Since version 4.0 the util_rb_tld also accepts Unicode IDN labels (encoded as UTF-8), e.g.:
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | idn -u | tr '\n' ' ' | fold -w 80 -s | perl -pe 'chomp; s/.*/util_rb_tld \L$_\n/' # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | idn -u | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
if can(Mail::SpamAssassin::Conf::feature_registryboundaries) if can(Mail::SpamAssassin::Conf::feature_registryboundaries)
util_rb_tld xn--11b4c3d xn--1ck2e1b xn--1qqw23a xn--2scrj9c xn--30rr7y xn--3bst00m # Updated 2022-10-18
util_rb_tld xn--3ds443g xn--3e0b707e xn--3hcrj9c xn--3oq18vl8pn36a xn--3pxu8k xn--42c2d9a util_rb_tld xn--11b4c3d xn--1ck2e1b xn--1qqw23a xn--2scrj9c xn--30rr7y xn--3bst00m
util_rb_tld xn--45br5cyl xn--45brj9c xn--45q11c xn--4gbrim xn--54b7fta0cc xn--55qw42g util_rb_tld xn--3ds443g xn--3e0b707e xn--3hcrj9c xn--3pxu8k xn--42c2d9a xn--45br5cyl
util_rb_tld xn--55qx5d xn--5su34j936bgsg xn--5tzm5g xn--6frz82g xn--6qq986b3xl xn--80adxhks util_rb_tld xn--45brj9c xn--45q11c xn--4dbrk0ce xn--4gbrim xn--54b7fta0cc xn--55qw42g
util_rb_tld xn--80ao21a xn--80aqecdr1a xn--80asehdb xn--80aswg xn--8y0a063a xn--90a3ac util_rb_tld xn--55qx5d xn--5su34j936bgsg xn--5tzm5g xn--6frz82g xn--6qq986b3xl xn--80adxhks
util_rb_tld xn--90ae xn--90ais xn--9dbq2a xn--9et52u xn--9krt00a xn--b4w605ferd util_rb_tld xn--80ao21a xn--80aqecdr1a xn--80asehdb xn--80aswg xn--8y0a063a xn--90a3ac
util_rb_tld xn--bck1b9a5dre4c xn--c1avg xn--c2br7g xn--cck2b3b xn--cg4bki util_rb_tld xn--90ae xn--90ais xn--9dbq2a xn--9et52u xn--9krt00a xn--b4w605ferd
util_rb_tld xn--clchc0ea0b2g2a9gcd xn--czr694b xn--czrs0t xn--czru2d xn--d1acj3b xn--d1alf util_rb_tld xn--bck1b9a5dre4c xn--c1avg xn--c2br7g xn--cck2b3b xn--cckwcxetd xn--cg4bki
util_rb_tld xn--e1a4c xn--eckvdtc9d xn--efvy88h xn--estv75g xn--fct429k xn--fhbei util_rb_tld xn--clchc0ea0b2g2a9gcd xn--czr694b xn--czrs0t xn--czru2d xn--d1acj3b xn--d1alf
util_rb_tld xn--fiq228c5hs xn--fiq64b xn--fiqs8s xn--fiqz9s xn--fjq720a xn--flw351e util_rb_tld xn--e1a4c xn--eckvdtc9d xn--efvy88h xn--fct429k xn--fhbei xn--fiq228c5hs
util_rb_tld xn--fpcrj9c3d xn--fzc2c9e2c xn--fzys8d69uvgm xn--g2xx48c xn--gckr3f0f util_rb_tld xn--fiq64b xn--fiqs8s xn--fiqz9s xn--fjq720a xn--flw351e xn--fpcrj9c3d
util_rb_tld xn--gecrj9c xn--gk3at1e xn--h2breg3eve xn--h2brj9c xn--h2brj9c8c xn--hxt814e util_rb_tld xn--fzc2c9e2c xn--fzys8d69uvgm xn--g2xx48c xn--gckr3f0f xn--gecrj9c xn--gk3at1e
util_rb_tld xn--i1b6b1a6a2e xn--imr513n xn--io0a7i xn--j1aef xn--j1amh xn--j6w193g util_rb_tld xn--h2breg3eve xn--h2brj9c xn--h2brj9c8c xn--hxt814e xn--i1b6b1a6a2e
util_rb_tld xn--jlq61u9w7b xn--jvr189m xn--kcrx77d1x4a xn--kprw13d xn--kpry57d xn--kpu716f util_rb_tld xn--imr513n xn--io0a7i xn--j1aef xn--j1amh xn--j6w193g xn--jlq480n2rg
util_rb_tld xn--kput3i xn--l1acc xn--lgbbat1ad8j xn--mgb9awbf xn--mgba3a3ejt util_rb_tld xn--jlq61u9w7b xn--jvr189m xn--kcrx77d1x4a xn--kprw13d xn--kpry57d xn--kput3i
util_rb_tld xn--mgba3a4f16a xn--mgba7c0bbn0a xn--mgbaakc7dvf xn--mgbaam7a8h xn--mgbab2bd util_rb_tld xn--l1acc xn--lgbbat1ad8j xn--mgb9awbf xn--mgba3a3ejt xn--mgba3a4f16a
util_rb_tld xn--mgbai9azgqp6j xn--mgbayh7gpa xn--mgbb9fbpob xn--mgbbh1a xn--mgbbh1a71e util_rb_tld xn--mgba7c0bbn0a xn--mgbaakc7dvf xn--mgbaam7a8h xn--mgbab2bd xn--mgbah1a3hjkrd
util_rb_tld xn--mgbc0a9azcg xn--mgbca7dzdo xn--mgberp4a5d4ar xn--mgbgu82a xn--mgbi4ecexp util_rb_tld xn--mgbai9azgqp6j xn--mgbayh7gpa xn--mgbbh1a xn--mgbbh1a71e xn--mgbc0a9azcg
util_rb_tld xn--mgbpl2fh xn--mgbt3dhd xn--mgbtx2b xn--mgbx4cd0ab xn--mix891f xn--mk1bu44c util_rb_tld xn--mgbca7dzdo xn--mgbcpq6gpa1a xn--mgberp4a5d4ar xn--mgbgu82a xn--mgbi4ecexp
util_rb_tld xn--mxtq1m xn--ngbc5azd xn--ngbe9e0a xn--ngbrx xn--node xn--nqv7f util_rb_tld xn--mgbpl2fh xn--mgbt3dhd xn--mgbtx2b xn--mgbx4cd0ab xn--mix891f xn--mk1bu44c
util_rb_tld xn--nqv7fs00ema xn--nyqy26a xn--o3cw4h xn--ogbpf8fl xn--otu796d xn--p1acf util_rb_tld xn--mxtq1m xn--ngbc5azd xn--ngbe9e0a xn--ngbrx xn--node xn--nqv7f
util_rb_tld xn--p1ai xn--pbt977c xn--pgbs0dh xn--pssy2u xn--q9jyb4c xn--qcka1pmc xn--qxam util_rb_tld xn--nqv7fs00ema xn--nyqy26a xn--o3cw4h xn--ogbpf8fl xn--otu796d xn--p1acf
util_rb_tld xn--rhqv96g xn--rovu88b xn--rvc1e0am3e xn--s9brj9c xn--ses554g xn--t60b56a util_rb_tld xn--p1ai xn--pgbs0dh xn--pssy2u xn--q7ce6a xn--q9jyb4c xn--qcka1pmc xn--qxa6a
util_rb_tld xn--tckwe xn--tiq49xqyj xn--unup4y xn--vermgensberater-ctb util_rb_tld xn--qxam xn--rhqv96g xn--rovu88b xn--rvc1e0am3e xn--s9brj9c xn--ses554g
util_rb_tld xn--vermgensberatung-pwb xn--vhquv xn--vuq861b xn--w4r85el8fhu5dnra xn--w4rs40l util_rb_tld xn--t60b56a xn--tckwe xn--tiq49xqyj xn--unup4y xn--vermgensberater-ctb
util_rb_tld xn--wgbh1c xn--wgbl6a xn--xhq521b xn--xkc2al3hye2a xn--xkc2dl3a5ee0h xn--y9a3aq util_rb_tld xn--vermgensberatung-pwb xn--vhquv xn--vuq861b xn--w4r85el8fhu5dnra xn--w4rs40l
util_rb_tld xn--wgbh1c xn--wgbl6a xn--xhq521b xn--xkc2al3hye2a xn--xkc2dl3a5ee0h xn--y9a3aq
util_rb_tld xn--yfro4i67o xn--ygbi2ammx xn--zfr164b util_rb_tld xn--yfro4i67o xn--ygbi2ammx xn--zfr164b
endif endif
# Standard List # Standard List
# For an up to date list of TLDs that can be pasted into this block, run this command: # For an up to date list of TLDs that can be pasted into this block, run this command:
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | grep -vi '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 'chomp; s/.*/util_rb_tld \L$_\n/' # wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | grep -vi '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
util_rb_tld aaa aarp abarth abb abbott abbvie abc able abogado abudhabi ac academy # Updated 2022-10-18
util_rb_tld accenture accountant accountants aco actor ad adac ads adult ae aeg aero aetna util_rb_tld aaa aarp abarth abb abbott abbvie abc able abogado abudhabi ac academy
util_rb_tld af afamilycompany afl africa ag agakhan agency ai aig airbus airforce airtel util_rb_tld accenture accountant accountants aco actor ad adac ads adult ae aeg aero aetna
util_rb_tld akdn al alfaromeo alibaba alipay allfinanz allstate ally alsace alstom am util_rb_tld af afl africa ag agakhan agency ai aig airbus airforce airtel akdn al alfaromeo
util_rb_tld amazon americanexpress americanfamily amex amfam amica amsterdam analytics util_rb_tld alibaba alipay allfinanz allstate ally alsace alstom am amazon americanexpress
util_rb_tld android anquan anz ao aol apartments app apple aq aquarelle ar arab aramco util_rb_tld americanfamily amex amfam amica amsterdam analytics android anquan anz ao aol
util_rb_tld archi army arpa art arte as asda asia associates at athleta attorney au auction util_rb_tld apartments app apple aq aquarelle ar arab aramco archi army arpa art arte as
util_rb_tld audi audible audio auspost author auto autos avianca aw aws ax axa az azure ba util_rb_tld asda asia associates at athleta attorney au auction audi audible audio auspost
util_rb_tld baby baidu banamex bananarepublic band bank bar barcelona barclaycard barclays util_rb_tld author auto autos avianca aw aws ax axa az azure ba baby baidu banamex
util_rb_tld barefoot bargains baseball basketball bauhaus bayern bb bbc bbt bbva bcg bcn bd util_rb_tld bananarepublic band bank bar barcelona barclaycard barclays barefoot bargains
util_rb_tld be beats beauty beer bentley berlin best bestbuy bet bf bg bh bharti bi bible util_rb_tld baseball basketball bauhaus bayern bb bbc bbt bbva bcg bcn bd be beats beauty
util_rb_tld bid bike bing bingo bio biz bj black blackfriday blockbuster blog bloomberg util_rb_tld beer bentley berlin best bestbuy bet bf bg bh bharti bi bible bid bike bing
util_rb_tld blue bm bms bmw bn bnpparibas bo boats boehringer bofa bom bond boo book util_rb_tld bingo bio biz bj black blackfriday blockbuster blog bloomberg blue bm bms bmw
util_rb_tld booking bosch bostik boston bot boutique box br bradesco bridgestone broadway util_rb_tld bn bnpparibas bo boats boehringer bofa bom bond boo book booking bosch bostik
util_rb_tld broker brother brussels bs bt budapest bugatti build builders business buy buzz util_rb_tld boston bot boutique box br bradesco bridgestone broadway broker brother
util_rb_tld bv bw by bz bzh ca cab cafe cal call calvinklein cam camera camp cancerresearch util_rb_tld brussels bs bt build builders business buy buzz bv bw by bz bzh ca cab cafe cal
util_rb_tld canon capetown capital capitalone car caravan cards care career careers cars util_rb_tld call calvinklein cam camera camp canon capetown capital capitalone car caravan
util_rb_tld casa case caseih cash casino cat catering catholic cba cbn cbre cbs cc cd ceb util_rb_tld cards care career careers cars casa case cash casino cat catering catholic cba
util_rb_tld center ceo cern cf cfa cfd cg ch chanel channel charity chase chat cheap util_rb_tld cbn cbre cbs cc cd center ceo cern cf cfa cfd cg ch chanel channel charity
util_rb_tld chintai christmas chrome church ci cipriani circle cisco citadel citi citic util_rb_tld chase chat cheap chintai christmas chrome church ci cipriani circle cisco
util_rb_tld city cityeats ck cl claims cleaning click clinic clinique clothing cloud club util_rb_tld citadel citi citic city cityeats ck cl claims cleaning click clinic clinique
util_rb_tld clubmed cm cn co coach codes coffee college cologne com comcast commbank util_rb_tld clothing cloud club clubmed cm cn co coach codes coffee college cologne com
util_rb_tld community company compare computer comsec condos construction consulting util_rb_tld comcast commbank community company compare computer comsec condos construction
util_rb_tld contact contractors cooking cookingchannel cool coop corsica country coupon util_rb_tld consulting contact contractors cooking cookingchannel cool coop corsica country
util_rb_tld coupons courses cpa cr credit creditcard creditunion cricket crown crs cruise util_rb_tld coupon coupons courses cpa cr credit creditcard creditunion cricket crown crs
util_rb_tld cruises csc cu cuisinella cv cw cx cy cymru cyou cz dabur dad dance data date util_rb_tld cruise cruises cu cuisinella cv cw cx cy cymru cyou cz dabur dad dance data
util_rb_tld dating datsun day dclk dds de deal dealer deals degree delivery dell deloitte util_rb_tld date dating datsun day dclk dds de deal dealer deals degree delivery dell
util_rb_tld delta democrat dental dentist desi design dev dhl diamonds diet digital direct util_rb_tld deloitte delta democrat dental dentist desi design dev dhl diamonds diet
util_rb_tld directory discount discover dish diy dj dk dm dnp do docs doctor dog domains util_rb_tld digital direct directory discount discover dish diy dj dk dm dnp do docs doctor
util_rb_tld dot download drive dtv dubai duck dunlop dupont durban dvag dvr dz earth eat ec util_rb_tld dog domains dot download drive dtv dubai dunlop dupont durban dvag dvr dz earth
util_rb_tld eco edeka edu education ee eg email emerck energy engineer engineering util_rb_tld eat ec eco edeka edu education ee eg email emerck energy engineer engineering
util_rb_tld enterprises epson equipment er ericsson erni es esq estate et etisalat eu util_rb_tld enterprises epson equipment er ericsson erni es esq estate et etisalat eu
util_rb_tld eurovision eus events exchange expert exposed express extraspace fage fail util_rb_tld eurovision eus events exchange expert exposed express extraspace fage fail
util_rb_tld fairwinds faith family fan fans farm farmers fashion fast fedex feedback util_rb_tld fairwinds faith family fan fans farm farmers fashion fast fedex feedback
util_rb_tld ferrari ferrero fi fiat fidelity fido film final finance financial fire util_rb_tld ferrari ferrero fi fiat fidelity fido film final finance financial fire
util_rb_tld firestone firmdale fish fishing fit fitness fj fk flickr flights flir florist util_rb_tld firestone firmdale fish fishing fit fitness fj fk flickr flights flir florist
util_rb_tld flowers fly fm fo foo food foodnetwork football ford forex forsale forum util_rb_tld flowers fly fm fo foo food foodnetwork football ford forex forsale forum
util_rb_tld foundation fox fr free fresenius frl frogans frontdoor frontier ftr fujitsu util_rb_tld foundation fox fr free fresenius frl frogans frontdoor frontier ftr fujitsu fun
util_rb_tld fujixerox fun fund furniture futbol fyi ga gal gallery gallo gallup game games util_rb_tld fund furniture futbol fyi ga gal gallery gallo gallup game games gap garden gay
util_rb_tld gap garden gay gb gbiz gd gdn ge gea gent genting george gf gg ggee gh gi gift util_rb_tld gb gbiz gd gdn ge gea gent genting george gf gg ggee gh gi gift gifts gives
util_rb_tld gifts gives giving gl glade glass gle global globo gm gmail gmbh gmo gmx gn util_rb_tld giving gl glass gle global globo gm gmail gmbh gmo gmx gn godaddy gold
util_rb_tld godaddy gold goldpoint golf goo goodyear goog google gop got gov gp gq gr util_rb_tld goldpoint golf goo goodyear goog google gop got gov gp gq gr grainger graphics
util_rb_tld grainger graphics gratis green gripe grocery group gs gt gu guardian gucci guge util_rb_tld gratis green gripe grocery group gs gt gu guardian gucci guge guide guitars
util_rb_tld guide guitars guru gw gy hair hamburg hangout haus hbo hdfc hdfcbank health util_rb_tld guru gw gy hair hamburg hangout haus hbo hdfc hdfcbank health healthcare help
util_rb_tld healthcare help helsinki here hermes hgtv hiphop hisamitsu hitachi hiv hk hkt util_rb_tld helsinki here hermes hgtv hiphop hisamitsu hitachi hiv hk hkt hm hn hockey
util_rb_tld hm hn hockey holdings holiday homedepot homegoods homes homesense honda horse util_rb_tld holdings holiday homedepot homegoods homes homesense honda horse hospital host
util_rb_tld hospital host hosting hot hoteles hotels hotmail house how hr hsbc ht hu hughes util_rb_tld hosting hot hoteles hotels hotmail house how hr hsbc ht hu hughes hyatt hyundai
util_rb_tld hyatt hyundai ibm icbc ice icu id ie ieee ifm ikano il im imamat imdb immo util_rb_tld ibm icbc ice icu id ie ieee ifm ikano il im imamat imdb immo immobilien in inc
util_rb_tld immobilien in inc industries infiniti info ing ink institute insurance insure util_rb_tld industries infiniti info ing ink institute insurance insure int international
util_rb_tld int intel international intuit investments io ipiranga iq ir irish is ismaili util_rb_tld intuit investments io ipiranga iq ir irish is ismaili ist istanbul it itau itv
util_rb_tld ist istanbul it itau itv iveco jaguar java jcb jcp je jeep jetzt jewelry jio util_rb_tld jaguar java jcb je jeep jetzt jewelry jio jll jm jmp jnj jo jobs joburg jot joy
util_rb_tld jll jm jmp jnj jo jobs joburg jot joy jp jpmorgan jprs juegos juniper kaufen util_rb_tld jp jpmorgan jprs juegos juniper kaufen kddi ke kerryhotels kerrylogistics
util_rb_tld kddi ke kerryhotels kerrylogistics kerryproperties kfh kg kh ki kia kim kinder util_rb_tld kerryproperties kfh kg kh ki kia kids kim kinder kindle kitchen kiwi km kn
util_rb_tld kindle kitchen kiwi km kn koeln komatsu kosher kp kpmg kpn kr krd kred util_rb_tld koeln komatsu kosher kp kpmg kpn kr krd kred kuokgroup kw ky kyoto kz la
util_rb_tld kuokgroup kw ky kyoto kz la lacaixa lamborghini lamer lancaster lancia land util_rb_tld lacaixa lamborghini lamer lancaster lancia land landrover lanxess lasalle lat
util_rb_tld landrover lanxess lasalle lat latino latrobe law lawyer lb lc lds lease leclerc util_rb_tld latino latrobe law lawyer lb lc lds lease leclerc lefrak legal lego lexus lgbt
util_rb_tld lefrak legal lego lexus lgbt li lidl life lifeinsurance lifestyle lighting like util_rb_tld li lidl life lifeinsurance lifestyle lighting like lilly limited limo lincoln
util_rb_tld lilly limited limo lincoln linde link lipsy live living lixil lk llc llp loan util_rb_tld linde link lipsy live living lk llc llp loan loans locker locus loft lol london
util_rb_tld loans locker locus loft lol london lotte lotto love lpl lplfinancial lr ls lt util_rb_tld lotte lotto love lpl lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv
util_rb_tld ltd ltda lu lundbeck lupin luxe luxury lv ly ma macys madrid maif maison makeup util_rb_tld ly ma macys madrid maif maison makeup man management mango map market marketing
util_rb_tld man management mango map market marketing markets marriott marshalls maserati util_rb_tld markets marriott marshalls maserati mattel mba mc mckinsey md me med media meet
util_rb_tld mattel mba mc mckinsey md me med media meet melbourne meme memorial men menu util_rb_tld melbourne meme memorial men menu merckmsd mg mh miami microsoft mil mini mint
util_rb_tld merckmsd metlife mg mh miami microsoft mil mini mint mit mitsubishi mk ml mlb util_rb_tld mit mitsubishi mk ml mlb mls mm mma mn mo mobi mobile moda moe moi mom monash
util_rb_tld mls mm mma mn mo mobi mobile moda moe moi mom monash money monster mormon util_rb_tld money monster mormon mortgage moscow moto motorcycles mov movie mp mq mr ms msd
util_rb_tld mortgage moscow moto motorcycles mov movie mp mq mr ms msd mt mtn mtr mu museum util_rb_tld mt mtn mtr mu museum music mutual mv mw mx my mz na nab nagoya name natura navy
util_rb_tld mutual mv mw mx my mz na nab nagoya name nationwide natura navy nba nc ne nec util_rb_tld nba nc ne nec net netbank netflix network neustar new news next nextdirect
util_rb_tld net netbank netflix network neustar new newholland news next nextdirect nexus util_rb_tld nexus nf nfl ng ngo nhk ni nico nike nikon ninja nissan nissay nl no nokia
util_rb_tld nf nfl ng ngo nhk ni nico nike nikon ninja nissan nissay nl no nokia util_rb_tld northwesternmutual norton now nowruz nowtv np nr nra nrw ntt nu nyc nz obi
util_rb_tld northwesternmutual norton now nowruz nowtv np nr nra nrw ntt nu nyc nz obi util_rb_tld observer office okinawa olayan olayangroup oldnavy ollo om omega one ong onl
util_rb_tld observer off office okinawa olayan olayangroup oldnavy ollo om omega one ong util_rb_tld online ooo open oracle orange org organic origins osaka otsuka ott ovh pa page
util_rb_tld onl online onyourside ooo open oracle orange org organic origins osaka otsuka util_rb_tld panasonic paris pars partners parts party passagens pay pccw pe pet pf pfizer
util_rb_tld ott ovh pa page panasonic paris pars partners parts party passagens pay pccw pe util_rb_tld pg ph pharmacy phd philips phone photo photography photos physio pics pictet
util_rb_tld pet pf pfizer pg ph pharmacy phd philips phone photo photography photos physio util_rb_tld pictures pid pin ping pink pioneer pizza pk pl place play playstation plumbing
util_rb_tld pics pictet pictures pid pin ping pink pioneer pizza pk pl place play util_rb_tld plus pm pn pnc pohl poker politie porn post pr pramerica praxi press prime pro
util_rb_tld playstation plumbing plus pm pn pnc pohl poker politie porn post pr pramerica util_rb_tld prod productions prof progressive promo properties property protection pru
util_rb_tld praxi press prime pro prod productions prof progressive promo properties util_rb_tld prudential ps pt pub pw pwc py qa qpon quebec quest racing radio re read
util_rb_tld property protection pru prudential ps pt pub pw pwc py qa qpon quebec quest qvc util_rb_tld realestate realtor realty recipes red redstone redumbrella rehab reise reisen
util_rb_tld racing radio raid re read realestate realtor realty recipes red redstone util_rb_tld reit reliance ren rent rentals repair report republican rest restaurant review
util_rb_tld redumbrella rehab reise reisen reit reliance ren rent rentals repair report util_rb_tld reviews rexroth rich richardli ricoh ril rio rip ro rocher rocks rodeo rogers
util_rb_tld republican rest restaurant review reviews rexroth rich richardli ricoh util_rb_tld room rs rsvp ru rugby ruhr run rw rwe ryukyu sa saarland safe safety sakura
util_rb_tld rightathome ril rio rip rmit ro rocher rocks rodeo rogers room rs rsvp ru rugby util_rb_tld sale salon samsclub samsung sandvik sandvikcoromant sanofi sap sarl sas save
util_rb_tld ruhr run rw rwe ryukyu sa saarland safe safety sakura sale salon samsclub util_rb_tld saxo sb sbi sbs sc sca scb schaeffler schmidt scholarships school schule
util_rb_tld samsung sandvik sandvikcoromant sanofi sap sarl sas save saxo sb sbi sbs sc sca util_rb_tld schwarz science scot sd se search seat secure security seek select sener
util_rb_tld scb schaeffler schmidt scholarships school schule schwarz science scjohnson util_rb_tld services ses seven sew sex sexy sfr sg sh shangrila sharp shaw shell shia
util_rb_tld scot sd se search seat secure security seek select sener services ses seven sew util_rb_tld shiksha shoes shop shopping shouji show showtime si silk sina singles site sj
util_rb_tld sex sexy sfr sg sh shangrila sharp shaw shell shia shiksha shoes shop shopping util_rb_tld sk ski skin sky skype sl sling sm smart smile sn sncf so soccer social softbank
util_rb_tld shouji show showtime shriram si silk sina singles site sj sk ski skin sky skype util_rb_tld software sohu solar solutions song sony soy spa space sport spot sr srl ss st
util_rb_tld sl sling sm smart smile sn sncf so soccer social softbank software sohu solar util_rb_tld stada staples star statebank statefarm stc stcgroup stockholm storage store
util_rb_tld solutions song sony soy space sport spot spreadbetting sr srl ss st stada util_rb_tld stream studio study style su sucks supplies supply support surf surgery suzuki
util_rb_tld staples star statebank statefarm stc stcgroup stockholm storage store stream util_rb_tld sv swatch swiss sx sy sydney systems sz tab taipei talk taobao target
util_rb_tld studio study style su sucks supplies supply support surf surgery suzuki sv util_rb_tld tatamotors tatar tattoo tax taxi tc tci td tdk team tech technology tel temasek
util_rb_tld swatch swiftcover swiss sx sy sydney symantec systems sz tab taipei talk taobao util_rb_tld tennis teva tf tg th thd theater theatre tiaa tickets tienda tiffany tips tires
util_rb_tld target tatamotors tatar tattoo tax taxi tc tci td tdk team tech technology tel util_rb_tld tirol tj tjmaxx tjx tk tkmaxx tl tm tmall tn to today tokyo tools top toray
util_rb_tld temasek tennis teva tf tg th thd theater theatre tiaa tickets tienda tiffany util_rb_tld toshiba total tours town toyota toys tr trade trading training travel
util_rb_tld tips tires tirol tj tjmaxx tjx tk tkmaxx tl tm tmall tn to today tokyo tools util_rb_tld travelchannel travelers travelersinsurance trust trv tt tube tui tunes tushu tv
util_rb_tld top toray toshiba total tours town toyota toys tr trade trading training travel util_rb_tld tvs tw tz ua ubank ubs ug uk unicom university uno uol ups us uy uz va
util_rb_tld travelchannel travelers travelersinsurance trust trv tt tube tui tunes tushu tv util_rb_tld vacations vana vanguard vc ve vegas ventures verisign versicherung vet vg vi
util_rb_tld tvs tw tz ua ubank ubs ug uk unicom university uno uol ups us uy uz va util_rb_tld viajes video vig viking villas vin vip virgin visa vision viva vivo vlaanderen
util_rb_tld vacations vana vanguard vc ve vegas ventures verisign versicherung vet vg vi util_rb_tld vn vodka volkswagen volvo vote voting voto voyage vu vuelos wales walmart
util_rb_tld viajes video vig viking villas vin vip virgin visa vision viva vivo vlaanderen util_rb_tld walter wang wanggou watch watches weather weatherchannel webcam weber website
util_rb_tld vn vodka volkswagen volvo vote voting voto voyage vu vuelos wales walmart util_rb_tld wed wedding weibo weir wf whoswho wien wiki williamhill win windows wine
util_rb_tld walter wang wanggou watch watches weather weatherchannel webcam weber website util_rb_tld winners wme wolterskluwer woodside work works world wow ws wtc wtf xbox xerox
util_rb_tld wed wedding weibo weir wf whoswho wien wiki williamhill win windows wine util_rb_tld xfinity xihuan xin xxx xyz yachts yahoo yamaxun yandex ye yodobashi yoga
util_rb_tld winners wme wolterskluwer woodside work works world wow ws wtc wtf xbox xerox
util_rb_tld xfinity xihuan xin xxx xyz yachts yahoo yamaxun yandex ye yodobashi yoga
util_rb_tld yokohama you youtube yt yun za zappos zara zero zip zm zone zuerich zw util_rb_tld yokohama you youtube yt yun za zappos zara zero zip zm zone zuerich zw
# #
@ -450,7 +449,7 @@ util_rb_2tld nextmail.ru
util_rb_2tld nightmail.ru util_rb_2tld nightmail.ru
util_rb_2tld nm.ru util_rb_2tld nm.ru
util_rb_2tld notlong.com util_rb_2tld notlong.com
util_rb_2tld page.tl util_rb_2tld page.tl page.link
util_rb_2tld pochta.ru util_rb_2tld pochta.ru
util_rb_2tld pochtamt.ru util_rb_2tld pochtamt.ru
util_rb_2tld pop3.ru util_rb_2tld pop3.ru

2
sa-updates/20_dnsbl_tests.cf
View File

@ -1,4 +1,4 @@
# SpamAssassin rules file: DNS blacklist and whitelist tests # SpamAssassin rules file: DNS blocklist and welcomelist tests
# #
# Please don't modify this file as your changes will be overwritten with # Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead. # the next update. Use /etc/mail/spamassassin/local.cf instead.

2
sa-updates/20_freemail_domains.cf
View File

@ -49,7 +49,7 @@ freemail_domains adres.nl advalvas.be aeiou.pt aeneasmail.com afrik.com
freemail_domains afropoets.com aggies.com ahaa.dk aichi.com aim.com airpost.net aiutamici.com freemail_domains afropoets.com aggies.com ahaa.dk aichi.com aim.com airpost.net aiutamici.com
freemail_domains aklan.com aknet.kg alabama.usa.com alaska.usa.com alavatotal.com freemail_domains aklan.com aknet.kg alabama.usa.com alaska.usa.com alavatotal.com
freemail_domains albafind.com albawaba.com alburaq.net aldeax.com aldeax.com.ar alex4all.com aliyun.com freemail_domains albafind.com albawaba.com alburaq.net aldeax.com aldeax.com.ar alex4all.com aliyun.com
freemail_domains alexandria.cc algeria.com alice.it alinto.com allmail.net freemail_domains alexandria.cc algeria.com alice.it allmail.net
freemail_domains alskens.dk altavista.se altbox.org alternativagratis.com alum.com freemail_domains alskens.dk altavista.se altbox.org alternativagratis.com alum.com
freemail_domains alunos.unipar.br alvilag.hu amenworld.com america.hm freemail_domains alunos.unipar.br alvilag.hu amenworld.com america.hm
freemail_domains americamail.com amnetsal.com amorous.com ananzi.co.za anet.ne.jp anfmail.com freemail_domains americamail.com amnetsal.com amorous.com ananzi.co.za anet.ne.jp anfmail.com

2
sa-updates/20_mailspike.cf
View File

@ -70,7 +70,7 @@ tflags RCVD_IN_MSPIKE_ZBI net
## Meta rules for aggregating good and bad senders ## Meta rules for aggregating good and bad senders
# Bad # Bad
meta RCVD_IN_MSPIKE_BL RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3 || __RCVD_IN_MSPIKE_Z meta RCVD_IN_MSPIKE_BL RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3 || __RCVD_IN_MSPIKE_Z
describe RCVD_IN_MSPIKE_BL Mailspike blacklisted describe RCVD_IN_MSPIKE_BL Mailspike blocklisted
tflags RCVD_IN_MSPIKE_BL net tflags RCVD_IN_MSPIKE_BL net
# Good # Good

1
sa-updates/20_pdfinfo.cf
View File

@ -270,6 +270,7 @@ body GMD_PDF_EMPTY_BODY eval:pdf_is_empty_body()
describe GMD_PDF_EMPTY_BODY Attached PDF with empty message body describe GMD_PDF_EMPTY_BODY Attached PDF with empty message body
score GMD_PDF_EMPTY_BODY 0.25 score GMD_PDF_EMPTY_BODY 0.25
# counts GMD_PDF_EMPTY_BODY 1638s/20h of 27034 corpus (24636s/2398h AxB-MANUAL) 07/19/07 # counts GMD_PDF_EMPTY_BODY 1638s/20h of 27034 corpus (24636s/2398h AxB-MANUAL) 07/19/07
priority GMD_PDF_EMPTY_BODY 2000 # workaround for Bug 8070
###################################################################################################### ######################################################################################################
# metas # metas

22
sa-updates/20_vbounce.cf
View File

@ -48,18 +48,16 @@
# #
########################################################################### ###########################################################################
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::VBounce
body __MY_SERVERS_FOUND eval:check_welcomelist_bounce_relays()
endif
else
ifplugin Mail::SpamAssassin::Plugin::VBounce
body __MY_SERVERS_FOUND eval:check_whitelist_bounce_relays()
endif
endif
ifplugin Mail::SpamAssassin::Plugin::VBounce ifplugin Mail::SpamAssassin::Plugin::VBounce
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
body __MY_SERVERS_FOUND eval:check_welcomelist_bounce_relays()
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
body __MY_SERVERS_FOUND eval:check_whitelist_bounce_relays()
endif
body __HAVE_BOUNCE_RELAYS eval:have_any_bounce_relays() body __HAVE_BOUNCE_RELAYS eval:have_any_bounce_relays()
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
@ -335,4 +333,6 @@ describe VBOUNCE_MESSAGE Virus-scanner bounce message
meta ANY_BOUNCE_MESSAGE (CRBOUNCE_MESSAGE||BOUNCE_MESSAGE||VBOUNCE_MESSAGE||OOOBOUNCE_MESSAGE) meta ANY_BOUNCE_MESSAGE (CRBOUNCE_MESSAGE||BOUNCE_MESSAGE||VBOUNCE_MESSAGE||OOOBOUNCE_MESSAGE)
describe ANY_BOUNCE_MESSAGE Message is some kind of bounce message describe ANY_BOUNCE_MESSAGE Message is some kind of bounce message
endif
endif # Mail::SpamAssassin::Plugin::VBounce

2
sa-updates/25_dcc.cf
View File

@ -33,7 +33,7 @@ ifplugin Mail::SpamAssassin::Plugin::DCC
full DCC_CHECK eval:check_dcc() full DCC_CHECK eval:check_dcc()
describe DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net) describe DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
tflags DCC_CHECK net tflags DCC_CHECK net autolearn_body
priority DCC_CHECK 10 priority DCC_CHECK 10
reuse DCC_CHECK reuse DCC_CHECK

15
sa-updates/25_dkim.cf
View File

@ -109,6 +109,21 @@ describe NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
meta NML_ADSP_CUSTOM_HIGH DKIM_ADSP_CUSTOM_HIGH && !__VIA_ML && !__VIA_RESIGNER meta NML_ADSP_CUSTOM_HIGH DKIM_ADSP_CUSTOM_HIGH && !__VIA_ML && !__VIA_RESIGNER
describe NML_ADSP_CUSTOM_HIGH ADSP custom_high hit, and not from a mailing list describe NML_ADSP_CUSTOM_HIGH ADSP custom_high hit, and not from a mailing list
if can(Mail::SpamAssassin::Plugin::DKIM::has_arc)
full ARC_SIGNED eval:check_arc_signed()
describe ARC_SIGNED Message has a ARC signature
tflags ARC_SIGNED net
reuse ARC_SIGNED
full ARC_VALID eval:check_arc_valid()
describe ARC_VALID Message has a valid ARC signature
tflags ARC_VALID net
reuse ARC_VALID
meta ARC_INVALID ARC_SIGNED && !ARC_VALID
describe ARC_INVALID ARC signature exists, but is not valid
endif
# #
# old, declared for compatibility with pre-3.3, should have scores 0 # old, declared for compatibility with pre-3.3, should have scores 0
# #

52
sa-updates/60_whitelist_subject.cf → sa-updates/25_dmarc.cf
View File

@ -1,4 +1,4 @@
# SpamAssassin rules file: default whitelist/blacklist subject # SpamAssassin - DMARC rules
# #
# Please don't modify this file as your changes will be overwritten with # Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead. # the next update. Use /etc/mail/spamassassin/local.cf instead.
@ -20,23 +20,43 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
# </@LICENSE> # </@LICENSE>
###########################################################################
# Whitelist/Blacklist rules
# #
# Note that most of these get 'noautolearn'. They should not be ###########################################################################
# considered when deciding whether to auto-learn a message, as a
# user slip-up could result in scribbling side-effects in the bayes
# db as a result -- which is hard to remedy.
ifplugin Mail::SpamAssassin::Plugin::WhiteListSubject # Requires the Mail::SpamAssassin::Plugin::DMARC plugin be loaded.
header SUBJECT_IN_WHITELIST eval:check_subject_in_whitelist() # Backwards compatible name (was renamed to DMARC in trunk before 4.0.0)
describe SUBJECT_IN_WHITELIST Subject: contains string in the user's white-list ifplugin Mail::SpamAssassin::Plugin::Dmarc
tflags SUBJECT_IN_WHITELIST userconf nice noautolearn
header SUBJECT_IN_BLACKLIST eval:check_subject_in_blacklist() header DMARC_PASS eval:check_dmarc_pass()
describe SUBJECT_IN_BLACKLIST Subject: contains string in the user's black-list describe DMARC_PASS DMARC pass policy
tflags SUBJECT_IN_BLACKLIST userconf noautolearn priority DMARC_PASS 500
tflags DMARC_PASS net nice
reuse DMARC_PASS
header DMARC_REJECT eval:check_dmarc_reject()
describe DMARC_REJECT DMARC reject policy
priority DMARC_REJECT 500
tflags DMARC_REJECT net
reuse DMARC_REJECT
header DMARC_QUAR eval:check_dmarc_quarantine()
describe DMARC_QUAR DMARC quarantine policy
priority DMARC_QUAR 500
tflags DMARC_QUAR net
reuse DMARC_QUAR
header DMARC_NONE eval:check_dmarc_none()
describe DMARC_NONE DMARC none policy
priority DMARC_NONE 500
tflags DMARC_NONE net
reuse DMARC_NONE
header DMARC_MISSING eval:check_dmarc_missing()
describe DMARC_MISSING Missing DMARC policy
priority DMARC_MISSING 500
tflags DMARC_MISSING net
reuse DMARC_MISSING
endif
endif # Mail::SpamAssassin::Plugin::WhiteListSubject

2
sa-updates/25_pyzor.cf
View File

@ -33,7 +33,7 @@ ifplugin Mail::SpamAssassin::Plugin::Pyzor
full PYZOR_CHECK eval:check_pyzor() full PYZOR_CHECK eval:check_pyzor()
describe PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) describe PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
tflags PYZOR_CHECK net tflags PYZOR_CHECK net autolearn_body
priority PYZOR_CHECK 30 priority PYZOR_CHECK 30
reuse PYZOR_CHECK reuse PYZOR_CHECK

2
sa-updates/25_razor2.cf
View File

@ -33,7 +33,7 @@ ifplugin Mail::SpamAssassin::Plugin::Razor2
full RAZOR2_CHECK eval:check_razor2() full RAZOR2_CHECK eval:check_razor2()
describe RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) describe RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
tflags RAZOR2_CHECK net tflags RAZOR2_CHECK net autolearn_body
priority RAZOR2_CHECK 20 priority RAZOR2_CHECK 20
reuse RAZOR2_CHECK reuse RAZOR2_CHECK

6
sa-updates/25_uribl.cf
View File

@ -342,12 +342,12 @@ uridnsbl_skip_domain microsofttranslator.com office.com microsoftonline.com bing
# Some frequent known good URIDNSBL lookups 3.10.2018 -hk # Some frequent known good URIDNSBL lookups 3.10.2018 -hk
uridnsbl_skip_domain aka.ms akamaihd.net alibaba.com alicdn.com amazon.co.uk uridnsbl_skip_domain aka.ms akamaihd.net alibaba.com alicdn.com amazon.co.uk
uridnsbl_skip_domain amazon.de amazonaws.com amazonses.com bandcamp.com uridnsbl_skip_domain amazon.de amazonses.com bandcamp.com
uridnsbl_skip_domain booking.com cdninstagram.com cloudfront.net dhl.com uridnsbl_skip_domain booking.com cdninstagram.com dhl.com
uridnsbl_skip_domain dhl.fi dna.fi domain.fi dpd.de dropbox.com ebay.fr uridnsbl_skip_domain dhl.fi dna.fi domain.fi dpd.de dropbox.com ebay.fr
uridnsbl_skip_domain elisa.fi elisanet.fi emltrk.com fbcdn.net ficora.fi uridnsbl_skip_domain elisa.fi elisanet.fi emltrk.com fbcdn.net ficora.fi
uridnsbl_skip_domain gappssmtp.com github.com goo.gl google-analytics.com uridnsbl_skip_domain gappssmtp.com github.com goo.gl google-analytics.com
uridnsbl_skip_domain google.de google.fi googleapis.com googleusercontent.com uridnsbl_skip_domain google.de google.fi googleusercontent.com
uridnsbl_skip_domain gstatic.com hotels.com ikea.com images-amazon.com uridnsbl_skip_domain gstatic.com hotels.com ikea.com images-amazon.com
uridnsbl_skip_domain inet.fi instagram.com kolumbus.fi licdn.com linkedin.com uridnsbl_skip_domain inet.fi instagram.com kolumbus.fi licdn.com linkedin.com
uridnsbl_skip_domain media-amazon.com mtasv.net mzstatic.com nebula.fi uridnsbl_skip_domain media-amazon.com mtasv.net mzstatic.com nebula.fi

301
sa-updates/25_url_shortener.cf Normal file
View File

@ -0,0 +1,301 @@
# SpamAssassin - URL shortener rules
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
#
###########################################################################
###
### Note that this file contains two separate lists, url_shortener and a
### backup regex generated from it. Both must updated and kept in sync.
###
### __URL_SHORTENER will always by set by either the plugin or regex
###
# SpamAssassin 4.0 version required
if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)
body __URL_SHORTENER eval:short_url()
body URL_SHORTENER_CHAINED eval:short_url_chained()
describe URL_SHORTENER_CHAINED Message contains shortened URL chained to other shorteners
tflags URL_SHORTENER_CHAINED net
score URL_SHORTENER_CHAINED 0.01
uri URL_SHORTENER_DISABLED m,^https://(?:bitly\.com/a/blocked|tinyurl\.com/app/nospam),
describe URL_SHORTENER_DISABLED Message contains shortened URL that has been disabled due to abuse
tflags URL_SHORTENER_DISABLED net
score URL_SHORTENER_DISABLED 2
#
# Please only add entries that you manually verified as actual working
# redirectors that can have abusable custom URLs. Adding non-abusable
# services only generates unnecessary HTTP requests.
#
# After any changes, also update __URL_SHORTENER regex at end of file.
#
# generic list of likely active services - cleaned up 25.05.2022
url_shortener .ftn.app
url_shortener .page.link
url_shortener .short.gy
url_shortener .shortz.me
url_shortener 0rz.tw
url_shortener 4sq.com
url_shortener 4url.cc
url_shortener afly.co
url_shortener ai6.net
url_shortener amzn.com
url_shortener amzn.to
url_shortener b.link
url_shortener b23.ru
url_shortener binged.it
url_shortener bit.do
url_shortener bit.ly
url_shortener bitly.com
url_shortener bizj.us
url_shortener chilp.it
url_shortener conta.cc
url_shortener crks.me
url_shortener cutt.ly
url_shortener cutwin.biz
url_shortener dai.ly
url_shortener db.tt
url_shortener disq.us
url_shortener dlvr.it
url_shortener doi.org
url_shortener doiop.com
url_shortener eepurl.com
url_shortener fb.me
url_shortener fire.to
url_shortener firsturl.de
url_shortener firsturl.net
url_shortener flic.kr
url_shortener gdurl.com
url_shortener go.ly
url_shortener goo.gl
url_shortener goolnk.com
url_shortener gplinks.in
url_shortener guest.link
url_shortener hellotxt.com
url_shortener hop.kz
url_shortener hotshorturl.com
url_shortener hub.am
url_shortener huff.to
url_shortener hurl.it
url_shortener hyperurl.co
url_shortener inx.lv
url_shortener is.gd
url_shortener it2.in
url_shortener j.mp
url_shortener kore.us
url_shortener kurl.no
url_shortener l.bestsellers.to
url_shortener lnk.sk
url_shortener lnkd.in
url_shortener lnkiy.in
url_shortener lru.jp
url_shortener mrte.ch
url_shortener n9.cl
url_shortener ndurl.com
url_shortener onion.com
url_shortener ouo.io
url_shortener ow.ly
url_shortener owl.li
url_shortener pduda.mobi
url_shortener rb.gy
url_shortener redir.ec
url_shortener rotf.lol
url_shortener s.apache.org
url_shortener s.id
url_shortener shar.es
url_shortener shorl.com
url_shortener shortn.me
url_shortener shorturl.at
url_shortener simurl.net
url_shortener slidesha.re
url_shortener smarturl.it
url_shortener smfu.in
url_shortener snip.ly
url_shortener snkr.me
url_shortener stpmvt.com
url_shortener t.co
url_shortener t.ly
url_shortener tcrn.ch
url_shortener tgr.ph
url_shortener tiny.cc
url_shortener tiny.one
url_shortener tiny.pl
url_shortener tinylink.in
url_shortener tinyurl.com
url_shortener to.ly
url_shortener trib.al
url_shortener twixar.me
url_shortener u.nu
url_shortener u.to
url_shortener url.ie
url_shortener urlcut.com
url_shortener urlday.cc
url_shortener urls.im
url_shortener urlz.at
url_shortener urlzs.com
url_shortener utfg.sk
url_shortener wow.link
url_shortener wp.me
url_shortener x.co
url_shortener x.hypem.com
url_shortener xurl.es
url_shortener yhoo.it
url_shortener youtu.be
url_shortener z23.ru
url_shortener zurl.ws
# www.shrunken.com - list validated 25.05.2022
url_shortener www.shrunken.com
url_shortener 0.gp
url_shortener 2.gp
url_shortener 2.ly
url_shortener 3.ly
url_shortener 4.gp
url_shortener 4.ly
url_shortener 5.gp
url_shortener 6.gp
url_shortener 6.ly
url_shortener 7.ly
url_shortener 8.ly
url_shortener 9.ly
url_shortener g.asia
url_shortener p.asia
url_shortener ur3.us
# shorturl.com - list validated 25.05.2022
url_shortener alturl.com
url_shortener .1sta.com
url_shortener .24ex.com
url_shortener .2fear.com
url_shortener .2fortune.com
url_shortener .2freedom.com
url_shortener .2hell.com
url_shortener .2savvy.com
url_shortener .2truth.com
url_shortener .2tunes.com
url_shortener .2ya.com
url_shortener .alturl.com
url_shortener .antiblog.com
url_shortener .bigbig.com
url_shortener .dealtap.com
url_shortener .ebored.com
url_shortener .echoz.com
url_shortener .filetap.com
url_shortener .funurl.com
url_shortener .headplug.com
url_shortener .hereweb.com
url_shortener .hitart.com
url_shortener .mirrorz.com
url_shortener .mp3update.com
url_shortener .shorturl.com
url_shortener .spyw.com
url_shortener .vze.com
# iscool.net - list validated 25.05.2022
url_shortener .arecool.net
url_shortener .iscool.net
url_shortener .isfun.net
url_shortener .tux.nu
# kisa.link - list validated 25.05.2022
url_shortener kisa.link
url_shortener www.kisa.link
url_shortener bul.tc
url_shortener cy.tc
url_shortener fn.tc
url_shortener ftp.tc
url_shortener gr.tc
url_shortener hbr.tc
url_shortener heg.tc
url_shortener ins.tc
url_shortener ko.tc
url_shortener kod.tc
url_shortener lol.tc
url_shortener m2.tc
url_shortener ml.tc
url_shortener mmo.tc
url_shortener oy.tc
url_shortener pc.tc
url_shortener pubg.tc
url_shortener pvp.tc
url_shortener sro.tc
url_shortener tek.link
url_shortener tw.tc
# grabify.link - list validated 25.05.2022
url_shortener grabify.link
url_shortener catsnthing.com
url_shortener catsnthings.fun
url_shortener cheapcinema.club
url_shortener dateing.club
url_shortener fortnight.space
url_shortener fortnitechat.site
url_shortener freegiftcards.co
url_shortener gaming-at-my.best
url_shortener gamingfun.me
url_shortener headshot.monster
url_shortener imageshare.best
url_shortener joinmy.site
url_shortener leancoding.co
url_shortener locations.quest
url_shortener lovebird.guru
url_shortener myprivate.pics
url_shortener noodshare.pics
url_shortener partpicker.shop
url_shortener progaming.monster
url_shortener screenshare.pics
url_shortener screenshot.best
url_shortener shhh.lol
url_shortener shrekis.life
url_shortener sportshub.bar
url_shortener stopify.co
url_shortener trulove.guru
url_shortener yourmy.monster
# GET method required for some services, keep the same services in url_shortener also
if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_get)
url_shortener_get bit.ly
endif
endif # has_short_url_redir
###
### Use a regex if DecodeShortURLs plugin is not loaded
###
if !can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)
## Generate __URL_SHORTENER with this command, to keep it in sync with url_shortener list:
##
## perl -pe 'while (<>) {/^\s*url_shortener\s+(\S+)/ or next;$s=quotemeta($1);$s=~s/^\\./\\w+\\./;push @a,$s} print "uri __URL_SHORTENER m,^https?://(?:".join("|",@a).")/,i\n"' < 25_url_shortener.cf
##
uri __URL_SHORTENER m,^https?://(?:\w+\.ftn\.app|\w+\.page\.link|\w+\.short\.gy|\w+\.shortz\.me|0rz\.tw|4sq\.com|4url\.cc|afly\.co|ai6\.net|amzn\.com|amzn\.to|b\.link|b23\.ru|binged\.it|bit\.do|bit\.ly|bitly\.com|bizj\.us|chilp\.it|conta\.cc|crks\.me|cutt\.ly|cutwin\.biz|dai\.ly|db\.tt|disq\.us|dlvr\.it|doi\.org|doiop\.com|eepurl\.com|fb\.me|fire\.to|firsturl\.de|firsturl\.net|flic\.kr|gdurl\.com|go\.ly|goo\.gl|goolnk\.com|gplinks\.in|guest\.link|hellotxt\.com|hop\.kz|hotshorturl\.com|hub\.am|huff\.to|hurl\.it|hyperurl\.co|inx\.lv|is\.gd|it2\.in|j\.mp|kore\.us|kurl\.no|l\.bestsellers\.to|lnk\.sk|lnkd\.in|lnkiy\.in|lru\.jp|mrte\.ch|n9\.cl|ndurl\.com|onion\.com|ouo\.io|ow\.ly|owl\.li|pduda\.mobi|rb\.gy|redir\.ec|rotf\.lol|s\.apache\.org|s\.id|shar\.es|shorl\.com|shortn\.me|shorturl\.at|simurl\.net|slidesha\.re|smarturl\.it|smfu\.in|snip\.ly|snkr\.me|stpmvt\.com|t\.co|t\.ly|tcrn\.ch|tgr\.ph|tiny\.cc|tiny\.one|tiny\.pl|tinylink\.in|tinyurl\.com|to\.ly|trib\.al|twixar\.me|u\.nu|u\.to|url\.ie|urlcut\.com|urlday\.cc|urls\.im|urlz\.at|urlzs\.com|utfg\.sk|wow\.link|wp\.me|x\.co|x\.hypem\.com|xurl\.es|yhoo\.it|youtu\.be|z23\.ru|zurl\.ws|www\.shrunken\.com|0\.gp|2\.gp|2\.ly|3\.ly|4\.gp|4\.ly|5\.gp|6\.gp|6\.ly|7\.ly|8\.ly|9\.ly|g\.asia|p\.asia|ur3\.us|alturl\.com|\w+\.1sta\.com|\w+\.24ex\.com|\w+\.2fear\.com|\w+\.2fortune\.com|\w+\.2freedom\.com|\w+\.2hell\.com|\w+\.2savvy\.com|\w+\.2truth\.com|\w+\.2tunes\.com|\w+\.2ya\.com|\w+\.alturl\.com|\w+\.antiblog\.com|\w+\.bigbig\.com|\w+\.dealtap\.com|\w+\.ebored\.com|\w+\.echoz\.com|\w+\.filetap\.com|\w+\.funurl\.com|\w+\.headplug\.com|\w+\.hereweb\.com|\w+\.hitart\.com|\w+\.mirrorz\.com|\w+\.mp3update\.com|\w+\.shorturl\.com|\w+\.spyw\.com|\w+\.vze\.com|\w+\.arecool\.net|\w+\.iscool\.net|\w+\.isfun\.net|\w+\.tux\.nu|kisa\.link|www\.kisa\.link|bul\.tc|cy\.tc|fn\.tc|ftp\.tc|gr\.tc|hbr\.tc|heg\.tc|ins\.tc|ko\.tc|kod\.tc|lol\.tc|m2\.tc|ml\.tc|mmo\.tc|oy\.tc|pc\.tc|pubg\.tc|pvp\.tc|sro\.tc|tek\.link|tw\.tc|grabify\.link|catsnthing\.com|catsnthings\.fun|cheapcinema\.club|dateing\.club|fortnight\.space|fortnitechat\.site|freegiftcards\.co|gaming\-at\-my\.best|gamingfun\.me|headshot\.monster|imageshare\.best|joinmy\.site|leancoding\.co|locations\.quest|lovebird\.guru|myprivate\.pics|noodshare\.pics|partpicker\.shop|progaming\.monster|screenshare\.pics|screenshot\.best|shhh\.lol|shrekis\.life|sportshub\.bar|stopify\.co|trulove\.guru|yourmy\.monster)/,i
endif

8
sa-updates/30_text_de.cf
View File

@ -328,10 +328,10 @@ lang de describe BAYES_99 Spamwahrscheinlichkeit nach Bayes-Test: 99-100%
lang de describe BAYES_999 Spamwahrscheinlichkeit nach Bayes-Test: 99.9-100% lang de describe BAYES_999 Spamwahrscheinlichkeit nach Bayes-Test: 99.9-100%
endif endif
# #
lang de describe USER_IN_BLACKLIST Absenderadresse steht in Ihrer persönlichen schwarzen Liste lang de describe USER_IN_BLOCKLIST Absenderadresse steht in Ihrer persönlichen schwarzen Liste
lang de describe USER_IN_WHITELIST Absenderadresse steht in Ihrer persönlichen weißen Liste lang de describe USER_IN_WELCOMELIST Absenderadresse steht in Ihrer persönlichen weißen Liste
lang de describe USER_IN_DEF_WHITELIST Absenderadresse steht in der allgemeinen weißen Liste lang de describe USER_IN_DEF_WELCOMELIST Absenderadresse steht in der allgemeinen weißen Liste
lang de describe USER_IN_BLACKLIST_TO Empfängeradresse steht in Ihrer persönlichen schwarzen Liste lang de describe USER_IN_BLOCKLIST_TO Empfängeradresse steht in Ihrer persönlichen schwarzen Liste
lang de describe USER_IN_WELCOMELIST_TO Empfängeradresse steht in Ihrer persönlichen weißen Liste lang de describe USER_IN_WELCOMELIST_TO Empfängeradresse steht in Ihrer persönlichen weißen Liste
lang de describe USER_IN_MORE_SPAM_TO Empfängeradresse soll fast alle (Spam-) Nachrichten erhalten lang de describe USER_IN_MORE_SPAM_TO Empfängeradresse soll fast alle (Spam-) Nachrichten erhalten
lang de describe USER_IN_ALL_SPAM_TO Empfängeradresse soll alle (Spam-) Nachrichten erhalten lang de describe USER_IN_ALL_SPAM_TO Empfängeradresse soll alle (Spam-) Nachrichten erhalten

8
sa-updates/30_text_fr.cf
View File

@ -246,11 +246,11 @@ lang fr describe UPPERCASE_50_75 Message compos
lang fr describe UPPERCASE_75_100 Message composé de 75 à 100% de majuscules lang fr describe UPPERCASE_75_100 Message composé de 75 à 100% de majuscules
lang fr describe URG_BIZ Contient la formule "urgent business" lang fr describe URG_BIZ Contient la formule "urgent business"
lang fr describe USER_IN_ALL_SPAM_TO Destinataire sur la liste "all_spam_to" (config SA locale) lang fr describe USER_IN_ALL_SPAM_TO Destinataire sur la liste "all_spam_to" (config SA locale)
lang fr describe USER_IN_BLACKLIST Expéditeur sur la liste noire (config SA locale) lang fr describe USER_IN_BLOCKLIST Expéditeur sur la liste noire (config SA locale)
lang fr describe USER_IN_BLACKLIST_TO Destinataire sur la liste "blacklist_to" (config SA locale) lang fr describe USER_IN_BLOCKLIST_TO Destinataire sur la liste "blocklist_to" (config SA locale)
lang fr describe USER_IN_DEF_WHITELIST Expéditeur dans la liste OK par défaut de SpamAssassin lang fr describe USER_IN_DEF_WELCOMELIST Expéditeur dans la liste OK par défaut de SpamAssassin
lang fr describe USER_IN_MORE_SPAM_TO Destinataire sur la liste "more_spam_to" (config SA locale) lang fr describe USER_IN_MORE_SPAM_TO Destinataire sur la liste "more_spam_to" (config SA locale)
lang fr describe USER_IN_WHITELIST Expéditeur sur la liste blanche (OK) (config SA locale) lang fr describe USER_IN_WELCOMELIST Expéditeur sur la liste blanche (OK) (config SA locale)
lang fr describe USER_IN_WELCOMELIST_TO Destinataire sur la liste blanche (config SA) lang fr describe USER_IN_WELCOMELIST_TO Destinataire sur la liste blanche (config SA)
#lang fr describe US_DOLLARS_3 Escroq. nigérienne, version modifiée, phrase clé ($NN,NNN,NNN.NN) #lang fr describe US_DOLLARS_3 Escroq. nigérienne, version modifiée, phrase clé ($NN,NNN,NNN.NN)
lang fr describe DRUG_ED_ONLINE Vente de Viagra par correspondance lang fr describe DRUG_ED_ONLINE Vente de Viagra par correspondance

10
sa-updates/30_text_pl.cf
View File

@ -232,12 +232,12 @@ lang pl describe UPPERCASE_75_100 Tre
lang pl describe URG_BIZ Pilna sprawa lang pl describe URG_BIZ Pilna sprawa
#lang pl describe US_DOLLARS_3 Wspomina miliony $ ($NN,NNN,NNN.NN) #lang pl describe US_DOLLARS_3 Wspomina miliony $ ($NN,NNN,NNN.NN)
lang pl describe USER_IN_ALL_SPAM_TO Użytkownik jest wymieniony w 'all_spam_to' lang pl describe USER_IN_ALL_SPAM_TO Użytkownik jest wymieniony w 'all_spam_to'
lang pl describe USER_IN_BLACKLIST Od: zawiera adres z Twojej "czarnej listy" lang pl describe USER_IN_BLOCKLIST Od: zawiera adres z Twojej "czarnej listy"
lang pl describe USER_IN_BLACKLIST_TO U¿ytkownik jest wymieniony w 'blacklist_to' lang pl describe USER_IN_BLOCKLIST_TO U¿ytkownik jest wymieniony w 'blocklist_to'
lang pl describe USER_IN_DEF_WHITELIST U¿ytkownik jest wymieniony w domylnej white-list (bia³ej licie) lang pl describe USER_IN_DEF_WELCOMELIST U¿ytkownik jest wymieniony w domylnej welcome-list (bia³ej licie)
lang pl describe USER_IN_MORE_SPAM_TO Użytkownik jest wymieniony w 'more_spam_to' lang pl describe USER_IN_MORE_SPAM_TO Użytkownik jest wymieniony w 'more_spam_to'
lang pl describe USER_IN_WHITELIST Od: zawiera adres z white-list (bia³ej listy) lang pl describe USER_IN_WELCOMELIST Od: zawiera adres z welcome-list (bia³ej listy)
lang pl describe USER_IN_WELCOMELIST_TO U¿ytkownik jest wymieniony w 'whitelist_to' lang pl describe USER_IN_WELCOMELIST_TO U¿ytkownik jest wymieniony w 'welcomelist_to'
lang pl describe WEIRD_PORT Używa niestandardowego numeru portu dla HTTP lang pl describe WEIRD_PORT Używa niestandardowego numeru portu dla HTTP
lang pl describe WEIRD_QUOTING Dziwne, powtarzające się znaki podwójnego cytowania lang pl describe WEIRD_QUOTING Dziwne, powtarzające się znaki podwójnego cytowania
lang pl describe WITH_LC_SMTP Linia 'Received' zawiera spamerski podpis (smtp) lang pl describe WITH_LC_SMTP Linia 'Received' zawiera spamerski podpis (smtp)

50
sa-updates/30_text_pt_br.cf
View File

@ -50,16 +50,16 @@ lang pt_BR unsafe_report ou confirmar que seu endere
lang pt_BR unsafe_report Se quiser visualizar a mensagem, pode ser mais seguro salvá-la em um arquivo lang pt_BR unsafe_report Se quiser visualizar a mensagem, pode ser mais seguro salvá-la em um arquivo
lang pt_BR unsafe_report e abrí-la com um editor. lang pt_BR unsafe_report e abrí-la com um editor.
lang pt_BR describe USER_IN_BLACKLIST Endereço do From: está na blacklist do usuário lang pt_BR describe USER_IN_BLOCKLIST Endereço do From: está na blocklist do usuário
lang pt_BR describe USER_IN_WHITELIST Endereço do From: está na whitelist do usuário lang pt_BR describe USER_IN_WELCOMELIST Endereço do From: está na welcomelist do usuário
lang pt_BR describe USER_IN_DEF_WHITELIST Endereço do From: está na whitelist padrão lang pt_BR describe USER_IN_DEF_WELCOMELIST Endereço do From: está na welcomelist padrão
lang pt_BR describe USER_IN_BLACKLIST_TO Usuário está listado na 'blacklist_to' lang pt_BR describe USER_IN_BLOCKLIST_TO Usuário está listado na 'blocklist_to'
lang pt_BR describe USER_IN_WELCOMELIST_TO Usuário está listado na 'whitelist_to' lang pt_BR describe USER_IN_WELCOMELIST_TO Usuário está listado na 'welcomelist_to'
lang pt_BR describe USER_IN_MORE_SPAM_TO Usuário está listado na 'more_spam_to' lang pt_BR describe USER_IN_MORE_SPAM_TO Usuário está listado na 'more_spam_to'
lang pt_BR describe USER_IN_ALL_SPAM_TO Usuário está listado na 'all_spam_to' lang pt_BR describe USER_IN_ALL_SPAM_TO Usuário está listado na 'all_spam_to'
ifplugin Mail::SpamAssassin::Plugin::AWL ifplugin Mail::SpamAssassin::Plugin::AWL
lang pt_BR describe AWL Endereço do From: está na auto whitelist lang pt_BR describe AWL Endereço do From: está na auto welcomelist
endif endif
# 20_advance_fee.cf - These are removed and will break lint # 20_advance_fee.cf - These are removed and will break lint
@ -357,7 +357,7 @@ lang pt_BR describe EMPTY_MESSAGE Mensagem parece n
lang pt_BR describe NO_HEADERS_MESSAGE Mensagem parece não conter grande parte dos cabeçalhos RFC-822 lang pt_BR describe NO_HEADERS_MESSAGE Mensagem parece não conter grande parte dos cabeçalhos RFC-822
# 20_net_tests.cf # 20_net_tests.cf
lang pt_BR describe DIGEST_MULTIPLE Remetente está listado em mais de uma blacklist lang pt_BR describe DIGEST_MULTIPLE Remetente está listado em mais de uma blocklist
lang pt_BR describe NO_DNS_FOR_FROM Remetente não possui registros MX ou A no DNS lang pt_BR describe NO_DNS_FOR_FROM Remetente não possui registros MX ou A no DNS
# 20_phrases.cf # 20_phrases.cf
@ -579,17 +579,17 @@ lang pt_BR describe BODY_8BITS Body cont
endif endif
# 25_uribl.cf # 25_uribl.cf
lang pt_BR describe URIBL_SBL Contém uma URL listada na blacklist SBL lang pt_BR describe URIBL_SBL Contém uma URL listada na blocklist SBL
lang pt_BR describe URIBL_DBL_SPAM Contém uma URL listada na blacklist DBL blocklist lang pt_BR describe URIBL_DBL_SPAM Contém uma URL listada na blocklist DBL blocklist
lang pt_BR describe URIBL_DBL_ERROR Erro: Consultou a DBL por um IP lang pt_BR describe URIBL_DBL_ERROR Erro: Consultou a DBL por um IP
#lang pt_BR describe URIBL_SC_SURBL Contém uma URL listada na blacklist SC SURBL - removed bug 7279 #lang pt_BR describe URIBL_SC_SURBL Contém uma URL listada na blocklist SC SURBL - removed bug 7279
lang pt_BR describe URIBL_WS_SURBL Contém uma URL listada na blacklist WS SURBL lang pt_BR describe URIBL_WS_SURBL Contém uma URL listada na blocklist WS SURBL
lang pt_BR describe URIBL_PH_SURBL Contém uma URL listada na blacklist PH SURBL lang pt_BR describe URIBL_PH_SURBL Contém uma URL listada na blocklist PH SURBL
#lang pt_BR describe URIBL_OB_SURBL Contém uma URL listada na blacklist OB SURBL - REMOVED BUG 6853 #lang pt_BR describe URIBL_OB_SURBL Contém uma URL listada na blocklist OB SURBL - REMOVED BUG 6853
#lang pt_BR describe URIBL_AB_SURBL Contém uma URL listada na blacklist AB SURBL - removed bug 7279 #lang pt_BR describe URIBL_AB_SURBL Contém uma URL listada na blocklist AB SURBL - removed bug 7279
#Changed from JP to ABUSE per bug 7279 #Changed from JP to ABUSE per bug 7279
lang pt_BR describe URIBL_ABUSE_SURBL Contém uma URL listada na blacklist ABUSE SURBL lang pt_BR describe URIBL_ABUSE_SURBL Contém uma URL listada na blocklist ABUSE SURBL
lang pt_BR describe URIBL_BLACK Contém uma URL listada na blacklist URIBL lang pt_BR describe URIBL_BLACK Contém uma URL listada na blocklist URIBL
lang pt_BR describe URIBL_GREY Contém uma URL listada na greylist URIBL lang pt_BR describe URIBL_GREY Contém uma URL listada na greylist URIBL
lang pt_BR describe URIBL_RED Contém uma URL listada na redlist URIBL lang pt_BR describe URIBL_RED Contém uma URL listada na redlist URIBL
@ -598,16 +598,12 @@ ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
lang pt_BR describe SHORTCIRCUIT Nem todas as regras foram executadas por causa de um problema em uma delas lang pt_BR describe SHORTCIRCUIT Nem todas as regras foram executadas por causa de um problema em uma delas
endif endif
# 60_whitelist_dkim.cf # 60_welcomelist_dkim.cf
lang pt_BR describe USER_IN_DKIM_WHITELIST Endereço do From: está na whitelist de DKIM do usuário lang pt_BR describe USER_IN_DKIM_WELCOMELIST Endereço do From: está na welcomelist de DKIM do usuário
lang pt_BR describe USER_IN_DEF_DKIM_WL Endereço do From: está na whitelist de DKIM padrão lang pt_BR describe USER_IN_DEF_DKIM_WL Endereço do From: está na welcomelist de DKIM padrão
# 60_whitelist_spf.cf # 60_welcomelist_spf.cf
lang pt_BR describe USER_IN_SPF_WHITELIST Endereço do From: está na whitelist de SPF do usuário lang pt_BR describe USER_IN_SPF_WELCOMELIST Endereço do From: está na welcomelist de SPF do usuário
lang pt_BR describe USER_IN_DEF_SPF_WL Endereço do From: está na whitelist de SPF padrão lang pt_BR describe USER_IN_DEF_SPF_WL Endereço do From: está na welcomelist de SPF padrão
lang pt_BR describe ENV_AND_HDR_SPF_MATCH Endereço do From: confere com Envelope From e está na whitelist de SPF lang pt_BR describe ENV_AND_HDR_SPF_MATCH Endereço do From: confere com Envelope From e está na welcomelist de SPF
# 60_whitelist_subject.cf
lang pt_BR describe SUBJECT_IN_WHITELIST Assunto contém palavra que está na whitelist do usuário
lang pt_BR describe SUBJECT_IN_BLACKLIST Assunto contém palavra que está na blacklist do usuário

48
sa-updates/50_scores.cf
View File

@ -702,38 +702,35 @@ score NO_HEADERS_MESSAGE 0.001
score HTML_CHARSET_FARAWAY 0.500 score HTML_CHARSET_FARAWAY 0.500
score MIME_CHARSET_FARAWAY 2.450 score MIME_CHARSET_FARAWAY 2.450
# rescore never changes the whitelist/blacklist scores # rescore never changes the welcomelist/blocklist scores
ifplugin Mail::SpamAssassin::Plugin::WLBLEval ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#score USER_IN_BLACKLIST 100.000 - Moved to 60_whitelist.cf #score USER_IN_BLOCKLIST 100.000 - Moved to 60_welcomelist.cf
#score USER_IN_WHITELIST -100.000 - Moved to 60_whitelist.cf #score USER_IN_WELCOMELIST -100.000 - Moved to 60_welcomelist.cf
#score USER_IN_DEF_WHITELIST -15.000 - Moved to 60_whitelist.cf #score USER_IN_DEF_WELCOMELIST -15.000 - Moved to 60_welcomelist.cf
#score USER_IN_BLACKLIST_TO 10.000 - Moved to 60_whitelist.cf #score USER_IN_BLOCKLIST_TO 10.000 - Moved to 60_welcomelist.cf
#score URI_HOST_IN_BLACKLIST 100.0 - Moved to 60_whitelist.cf #score URI_HOST_IN_BLOCKLIST 100.0 - Moved to 60_welcomelist.cf
#score URI_HOST_IN_WHITELIST -100.0 - Moved to 60_whitelist.cf #score URI_HOST_IN_WELCOMELIST -100.0 - Moved to 60_welcomelist.cf
#Removed in bug 7256 #Removed in bug 7256
#score HEADER_HOST_IN_BLACKLIST 100.0 #score HEADER_HOST_IN_BLOCKLIST 100.0
#score HEADER_HOST_IN_WHITELIST -100.0 #score HEADER_HOST_IN_WELCOMELIST -100.0
# not really false positives but the user wants spam! # not really false positives but the user wants spam!
#score USER_IN_WHITELIST_TO -6.000 - Moved to 60_whitelist.cf #score USER_IN_WELCOMELIST_TO -6.000 - Moved to 60_welcomelist.cf
score USER_IN_MORE_SPAM_TO -20.000 score USER_IN_MORE_SPAM_TO -20.000
score USER_IN_ALL_SPAM_TO -100.000 score USER_IN_ALL_SPAM_TO -100.000
endif endif
ifplugin Mail::SpamAssassin::Plugin::WhiteListSubject
score SUBJECT_IN_WHITELIST -100
score SUBJECT_IN_BLACKLIST 100
endif # Mail::SpamAssassin::Plugin::WhiteListSubject
ifplugin Mail::SpamAssassin::Plugin::SPF ifplugin Mail::SpamAssassin::Plugin::SPF
score USER_IN_SPF_WHITELIST -100.000 score USER_IN_SPF_WELCOMELIST -100 # overridden in 60_welcomelist_spf.cf
score USER_IN_SPF_WHITELIST -100 # overridden in 60_welcomelist_spf.cf
score USER_IN_DEF_SPF_WL -7.500 score USER_IN_DEF_SPF_WL -7.500
score ENV_AND_HDR_SPF_MATCH -0.5 score ENV_AND_HDR_SPF_MATCH -0.5
endif # Mail::SpamAssassin::Plugin::SPF endif # Mail::SpamAssassin::Plugin::SPF
# DKIM # DKIM
ifplugin Mail::SpamAssassin::Plugin::DKIM ifplugin Mail::SpamAssassin::Plugin::DKIM
#score USER_IN_DKIM_WHITELIST -100.000 - Moved to 60_whitelist_dkim.cf score USER_IN_DKIM_WELCOMELIST -100 # overridden in 60_welcomelist_dkim.cf
score USER_IN_DKIM_WHITELIST -100 # overridden in 60_welcomelist_dkim.cf
score USER_IN_DEF_DKIM_WL -7.500 score USER_IN_DEF_DKIM_WL -7.500
score DKIM_SIGNED 0.1 score DKIM_SIGNED 0.1
score DKIM_VALID -0.1 score DKIM_VALID -0.1
@ -744,6 +741,12 @@ if (version >= 3.004002)
score DKIM_VALID_EF -0.1 score DKIM_VALID_EF -0.1
endif endif
if can(Mail::SpamAssassin::Plugin::DKIM::has_arc)
score ARC_SIGNED 0.001
score ARC_VALID -0.1
score ARC_INVALID 0.1
endif
score DKIM_VERIFIED 0 score DKIM_VERIFIED 0
score DKIM_POLICY_SIGNALL 0 score DKIM_POLICY_SIGNALL 0
score DKIM_POLICY_SIGNSOME 0 score DKIM_POLICY_SIGNSOME 0
@ -787,6 +790,17 @@ score SPF_SOFTFAIL 0 0.972 0 0.665 # n=0 n=2
# </gen:mutable> # </gen:mutable>
endif # Mail::SpamAssassin::Plugin::SPF endif # Mail::SpamAssassin::Plugin::SPF
# DMARC
ifplugin Mail::SpamAssassin::Plugin::DMARC
score DMARC_PASS -0.001
# <gen:mutable>
score DMARC_REJECT 0.001 1.797 0.001 1.797 # n=0 n=2
score DMARC_QUAR 0.001 1.198 0.001 1.198 # n=0 n=2
score DMARC_NONE 0.001 0.898 0.001 0.898 # n=0 n=2
# </gen:mutable>
score DMARC_MISSING 0.001
endif # Mail::SpamAssassin::Plugin::DMARC
# URIDNSBL # URIDNSBL
ifplugin Mail::SpamAssassin::Plugin::URIDNSBL ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
# <gen:mutable> # <gen:mutable>

8
sa-updates/60_awl.cf
View File

@ -1,4 +1,4 @@
# SpamAssassin rules file: auto-whitelist # SpamAssassin rules file: auto-welcomelist
# #
# Please don't modify this file as your changes will be overwritten with # Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead. # the next update. Use /etc/mail/spamassassin/local.cf instead.
@ -23,7 +23,13 @@
ifplugin Mail::SpamAssassin::Plugin::AWL ifplugin Mail::SpamAssassin::Plugin::AWL
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header AWL eval:check_from_in_auto_welcomelist()
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header AWL eval:check_from_in_auto_whitelist() header AWL eval:check_from_in_auto_whitelist()
endif
describe AWL Adjusted score from AWL reputation of From: address describe AWL Adjusted score from AWL reputation of From: address
tflags AWL userconf noautolearn tflags AWL userconf noautolearn
priority AWL 1000 priority AWL 1000

18
sa-updates/60_shortcircuit.cf
View File

@ -27,16 +27,18 @@
########################################################################### ###########################################################################
priority USER_IN_WHITELIST -1000 priority USER_IN_WELCOMELIST -1000
priority USER_IN_DEF_WHITELIST -1000 priority USER_IN_WHITELIST -1000
priority USER_IN_ALL_SPAM_TO -1000 priority USER_IN_DEF_WELCOMELIST -1000
priority SUBJECT_IN_WHITELIST -1000 priority USER_IN_DEF_WHITELIST -1000
priority USER_IN_ALL_SPAM_TO -1000
priority ALL_TRUSTED -950 priority ALL_TRUSTED -950
priority SUBJECT_IN_BLACKLIST -900 priority USER_IN_BLOCKLIST_TO -900
priority USER_IN_BLACKLIST_TO -900 priority USER_IN_BLOCKLIST -900
priority USER_IN_BLACKLIST -900 priority USER_IN_BLACKLIST_TO -900
priority USER_IN_BLACKLIST -900
########################################################################### ###########################################################################

263
sa-updates/60_welcomelist.cf Normal file
View File

@ -0,0 +1,263 @@
# SpamAssassin rules file: default welcomelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
###########################################################################
# Welcomelist rules
#
# Note that most of these get 'noautolearn'. They should not be
# considered when deciding whether to auto-learn a message, as a
# user slip-up could result in scribbling side-effects in the bayes
# db as a result -- which is hard to remedy.
# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_BLOCKLIST eval:check_from_in_blocklist()
describe USER_IN_BLOCKLIST From: user is listed in the block-list
tflags USER_IN_BLOCKLIST userconf nice noautolearn
score USER_IN_BLOCKLIST 100
# Backwards compatibility
# To disable set "enable_compat welcomelist_blocklist" in init.pre
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_BLACKLIST (USER_IN_BLOCKLIST)
describe USER_IN_BLACKLIST DEPRECATED: See USER_IN_BLOCKLIST
tflags USER_IN_BLACKLIST userconf nice noautolearn
score USER_IN_BLACKLIST 100
score USER_IN_BLOCKLIST 0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_BLOCKLIST eval:check_from_in_blacklist()
describe USER_IN_BLOCKLIST From: user is listed in the block-list
tflags USER_IN_BLOCKLIST userconf nice noautolearn
score USER_IN_BLOCKLIST 0.01
meta USER_IN_BLACKLIST (USER_IN_BLOCKLIST)
describe USER_IN_BLACKLIST DEPRECATED: See USER_IN_BLOCKLIST
tflags USER_IN_BLACKLIST userconf nice noautolearn
score USER_IN_BLACKLIST 100
endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_WELCOMELIST eval:check_from_in_welcomelist()
describe USER_IN_WELCOMELIST User is listed in 'welcomelist_from'
tflags USER_IN_WELCOMELIST userconf nice noautolearn
score USER_IN_WELCOMELIST -100
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_WHITELIST (USER_IN_WELCOMELIST)
describe USER_IN_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_WHITELIST userconf nice noautolearn
score USER_IN_WHITELIST -100
score USER_IN_WELCOMELIST -0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_WELCOMELIST eval:check_from_in_whitelist()
describe USER_IN_WELCOMELIST User is listed in 'welcomelist_from'
tflags USER_IN_WELCOMELIST userconf nice noautolearn
score USER_IN_WELCOMELIST -0.01
meta USER_IN_WHITELIST (USER_IN_WELCOMELIST)
describe USER_IN_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_WHITELIST userconf nice noautolearn
score USER_IN_WHITELIST -100
endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_DEF_WELCOMELIST eval:check_from_in_default_welcomelist()
describe USER_IN_DEF_WELCOMELIST From: user is listed in the default welcome-list
tflags USER_IN_DEF_WELCOMELIST userconf nice noautolearn
score USER_IN_DEF_WELCOMELIST -15
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_DEF_WHITELIST (USER_IN_DEF_WELCOMELIST)
describe USER_IN_DEF_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_DEF_WHITELIST userconf nice noautolearn
score USER_IN_DEF_WHITELIST -15
score USER_IN_DEF_WELCOMELIST -0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_DEF_WELCOMELIST eval:check_from_in_default_whitelist()
describe USER_IN_DEF_WELCOMELIST From: user is listed in the default welcome-list
tflags USER_IN_DEF_WELCOMELIST userconf nice noautolearn
score USER_IN_DEF_WELCOMELIST -0.01
meta USER_IN_DEF_WHITELIST (USER_IN_DEF_WELCOMELIST)
describe USER_IN_DEF_WHITELIST DEPRECATED: See USER_IN_DEF_WELCOMELIST
tflags USER_IN_DEF_WHITELIST userconf nice noautolearn
score USER_IN_DEF_WHITELIST -15
endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_BLOCKLIST_TO eval:check_to_in_blocklist()
describe USER_IN_BLOCKLIST_TO User is listed in 'blocklist_to'
tflags USER_IN_BLOCKLIST_TO userconf nice noautolearn
score USER_IN_BLOCKLIST_TO 10
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_BLACKLIST_TO (USER_IN_BLOCKLIST_TO)
describe USER_IN_BLACKLIST_TO DEPRECATED: See USER_IN_BLOCKLIST_TO
tflags USER_IN_BLACKLIST_TO userconf nice noautolearn
score USER_IN_BLACKLIST_TO 10
score USER_IN_BLOCKLIST_TO 0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_BLOCKLIST_TO eval:check_to_in_blacklist()
describe USER_IN_BLOCKLIST_TO User is listed in 'blocklist_to'
tflags USER_IN_BLOCKLIST_TO userconf nice noautolearn
score USER_IN_BLOCKLIST_TO 0.01
meta USER_IN_BLACKLIST_TO (USER_IN_BLOCKLIST_TO)
describe USER_IN_BLACKLIST_TO DEPRECATED: See USER_IN_BLOCKLIST_TO
tflags USER_IN_BLACKLIST_TO userconf nice noautolearn
score USER_IN_BLACKLIST_TO 10
endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_WELCOMELIST_TO eval:check_to_in_welcomelist()
describe USER_IN_WELCOMELIST_TO User is listed in 'welcomelist_to'
tflags USER_IN_WELCOMELIST_TO userconf nice noautolearn
score USER_IN_WELCOMELIST_TO -6
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_WHITELIST_TO (USER_IN_WELCOMELIST_TO)
describe USER_IN_WHITELIST_TO DEPRECATED: See USER_IN_WELCOMELIST_TO
tflags USER_IN_WHITELIST_TO userconf nice noautolearn
score USER_IN_WHITELIST_TO -6
score USER_IN_WELCOMELIST_TO -0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_WELCOMELIST_TO eval:check_to_in_whitelist()
describe USER_IN_WELCOMELIST_TO User is listed in 'welcomelist_to'
tflags USER_IN_WELCOMELIST_TO userconf nice noautolearn
score USER_IN_WELCOMELIST_TO -0.01
meta USER_IN_WHITELIST_TO (USER_IN_WELCOMELIST_TO)
describe USER_IN_WHITELIST_TO DEPRECATED: See USER_IN_WELCOMELIST_TO
tflags USER_IN_WHITELIST_TO userconf nice noautolearn
score USER_IN_WHITELIST_TO -6
endif
header USER_IN_MORE_SPAM_TO eval:check_to_in_more_spam()
describe USER_IN_MORE_SPAM_TO User is listed in 'more_spam_to'
tflags USER_IN_MORE_SPAM_TO userconf nice noautolearn
header USER_IN_ALL_SPAM_TO eval:check_to_in_all_spam()
describe USER_IN_ALL_SPAM_TO User is listed in 'all_spam_to'
tflags USER_IN_ALL_SPAM_TO userconf nice noautolearn
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
body URI_HOST_IN_BLOCKLIST eval:check_uri_host_in_blocklist()
describe URI_HOST_IN_BLOCKLIST Host or Domain is listed in the user's URI block-list
tflags URI_HOST_IN_BLOCKLIST userconf noautolearn
score URI_HOST_IN_BLOCKLIST 100
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta URI_HOST_IN_BLACKLIST (URI_HOST_IN_BLOCKLIST)
describe URI_HOST_IN_BLACKLIST DEPRECATED: See URI_HOST_IN_BLOCKLIST
tflags URI_HOST_IN_BLACKLIST userconf noautolearn
score URI_HOST_IN_BLACKLIST 100
score URI_HOST_IN_BLOCKLIST 0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
if (version >= 3.004000)
body URI_HOST_IN_BLOCKLIST eval:check_uri_host_in_blacklist()
describe URI_HOST_IN_BLOCKLIST Host or Domain is listed in the user's URI block-list
tflags URI_HOST_IN_BLOCKLIST userconf noautolearn
score URI_HOST_IN_BLOCKLIST 0.01
meta URI_HOST_IN_BLACKLIST (URI_HOST_IN_BLOCKLIST)
describe URI_HOST_IN_BLACKLIST DEPRECATED: See URI_HOST_IN_BLOCKLIST
tflags URI_HOST_IN_BLACKLIST userconf noautolearn
score URI_HOST_IN_BLACKLIST 100
endif
endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
body URI_HOST_IN_WELCOMELIST eval:check_uri_host_in_welcomelist()
describe URI_HOST_IN_WELCOMELIST Host or Domain is listed in the user's URI welcome-list
tflags URI_HOST_IN_WELCOMELIST userconf nice noautolearn
score URI_HOST_IN_WELCOMELIST -100
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta URI_HOST_IN_WHITELIST (URI_HOST_IN_WELCOMELIST)
describe URI_HOST_IN_WHITELIST DEPRECATED: See URI_HOST_IN_WELCOMELIST
tflags URI_HOST_IN_WHITELIST userconf nice noautolearn
score URI_HOST_IN_WHITELIST -100
score URI_HOST_IN_WELCOMELIST -0.01
endif
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
if (version >= 3.004000)
body URI_HOST_IN_WELCOMELIST eval:check_uri_host_in_whitelist()
describe URI_HOST_IN_WELCOMELIST Host or Domain is listed in the user's URI welcome-list
tflags URI_HOST_IN_WELCOMELIST userconf nice noautolearn
score URI_HOST_IN_WELCOMELIST -0.01
meta URI_HOST_IN_WHITELIST (URI_HOST_IN_WELCOMELIST)
describe URI_HOST_IN_WHITELIST DEPRECATED: See URI_HOST_IN_WELCOMELIST
tflags URI_HOST_IN_WHITELIST userconf nice noautolearn
score URI_HOST_IN_WHITELIST -100
endif
endif
# Bug 7256, using a header rule with an eval() function does not work the way
# this was intended.
# header HEADER_HOST_IN_BLACKLIST eval:check_uri_host_listed('BLOCK')
# describe HEADER_HOST_IN_BLACKLIST Host or Domain in header is listed in the user's URI black-list
# tflags HEADER_HOST_IN_BLACKLIST userconf noautolearn
# header HEADER_HOST_IN_WHITELIST eval:check_uri_host_listed('WELCOME')
# describe HEADER_HOST_IN_WHITELIST Host or Domain in header is listed in the user's URI white-list
# tflags HEADER_HOST_IN_WHITELIST userconf nice noautolearn
###########################################################################
# Default welcomelists. These should be addresses which send mail that is often
# tagged (incorrectly) as spam; it also helps that they be addresses of big
# companies with lots of lawyers, so if spammers impersonate them, they'll get
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
#
# Welcomelist and blocklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
#
# Please do not add unmoderated public mailing lists here. They are
# too easily abused by spammers.
# Should really not be used these days, use def_welcomelist_auth if possible.
# def_welcomelist_from_rcvd *@foo.com foo.com
#
#
#
endif # ifplugin Mail::SpamAssassin::Plugin::WLBLEval

22
sa-updates/60_whitelist_auth.cf → sa-updates/60_welcomelist_auth.cf
View File

@ -24,8 +24,6 @@
########################################################################### ###########################################################################
# SPF and DKIM whitelist rules # SPF and DKIM whitelist rules
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
########################################################################### ###########################################################################
# These should be primarily envelope-from addresses which send mail that is # These should be primarily envelope-from addresses which send mail that is
# often tagged (incorrectly) as spam or high-profile domains that are common # often tagged (incorrectly) as spam or high-profile domains that are common
@ -42,6 +40,9 @@ if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
# SA. Change the def_welcomelist_auth entry and search "older" and change # SA. Change the def_welcomelist_auth entry and search "older" and change
# the previous config entries in unison. # the previous config entries in unison.
# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
def_welcomelist_auth *@apache.org def_welcomelist_auth *@apache.org
def_welcomelist_auth *@*.apache.org def_welcomelist_auth *@*.apache.org
@ -120,6 +121,7 @@ def_welcomelist_auth *@*.docusign.com
# authentic emails # authentic emails
# #
def_welcomelist_auth *@*.indeed.com def_welcomelist_auth *@*.indeed.com
def_welcomelist_auth *@*.wellframe.com
def_welcomelist_auth *@*.hyatt.com def_welcomelist_auth *@*.hyatt.com
def_welcomelist_auth *@*.sears.com def_welcomelist_auth *@*.sears.com
def_welcomelist_auth *@*.jcpenney.com def_welcomelist_auth *@*.jcpenney.com
@ -433,7 +435,6 @@ def_welcomelist_auth *@logmein.com
def_welcomelist_auth *@lastpass.com def_welcomelist_auth *@lastpass.com
def_welcomelist_auth *@*.seabourn.com def_welcomelist_auth *@*.seabourn.com
def_welcomelist_auth *@*.execucar.com def_welcomelist_auth *@*.execucar.com
def_welcomelist_auth *@*.intuit.com
def_welcomelist_auth *@*.build.com def_welcomelist_auth *@*.build.com
def_welcomelist_auth *@*.trulia.com def_welcomelist_auth *@*.trulia.com
def_welcomelist_auth *@*.rentalcars.com def_welcomelist_auth *@*.rentalcars.com
@ -496,7 +497,6 @@ def_welcomelist_auth *@*.aarp.org
def_welcomelist_auth *@*.aeropostale.com def_welcomelist_auth *@*.aeropostale.com
def_welcomelist_auth *@*.zappos.com def_welcomelist_auth *@*.zappos.com
def_welcomelist_auth *@*.redhat.com def_welcomelist_auth *@*.redhat.com
def_welcomelist_auth *@*.freshdesk.com
def_welcomelist_auth *@*.planningcenteronline.com def_welcomelist_auth *@*.planningcenteronline.com
def_welcomelist_auth *@*.ihg.com def_welcomelist_auth *@*.ihg.com
def_welcomelist_auth *@*.opendns.com def_welcomelist_auth *@*.opendns.com
@ -796,7 +796,6 @@ def_welcomelist_auth *@*.endcitizensunited.org
def_welcomelist_auth *@*.redditgifts.com def_welcomelist_auth *@*.redditgifts.com
def_welcomelist_auth *@*.tdworld.com def_welcomelist_auth *@*.tdworld.com
def_welcomelist_auth *@*.thenorthface.com def_welcomelist_auth *@*.thenorthface.com
def_welcomelist_auth *@*.bark.com
def_welcomelist_auth *@*.center.io def_welcomelist_auth *@*.center.io
def_welcomelist_auth *@*.movethisworld.com def_welcomelist_auth *@*.movethisworld.com
def_welcomelist_auth *@*.pgsurveying.com def_welcomelist_auth *@*.pgsurveying.com
@ -1014,9 +1013,14 @@ def_welcomelist_auth *@*.testingmom.com
def_welcomelist_auth *@*.ceramicartsnetwork.org def_welcomelist_auth *@*.ceramicartsnetwork.org
def_welcomelist_auth *@*.verintefm.com def_welcomelist_auth *@*.verintefm.com
else endif # if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
#For older versions of SA, these old entries remain for SA before version 4.0
#
# For older versions of SA, these old entries remain for SA before version 4.0
#
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
def_whitelist_auth *@apache.org def_whitelist_auth *@apache.org
def_whitelist_auth *@*.apache.org def_whitelist_auth *@*.apache.org
@ -1409,7 +1413,6 @@ def_whitelist_auth *@logmein.com
def_whitelist_auth *@lastpass.com def_whitelist_auth *@lastpass.com
def_whitelist_auth *@*.seabourn.com def_whitelist_auth *@*.seabourn.com
def_whitelist_auth *@*.execucar.com def_whitelist_auth *@*.execucar.com
def_whitelist_auth *@*.intuit.com
def_whitelist_auth *@*.build.com def_whitelist_auth *@*.build.com
def_whitelist_auth *@*.trulia.com def_whitelist_auth *@*.trulia.com
def_whitelist_auth *@*.rentalcars.com def_whitelist_auth *@*.rentalcars.com
@ -1472,7 +1475,6 @@ def_whitelist_auth *@*.aarp.org
def_whitelist_auth *@*.aeropostale.com def_whitelist_auth *@*.aeropostale.com
def_whitelist_auth *@*.zappos.com def_whitelist_auth *@*.zappos.com
def_whitelist_auth *@*.redhat.com def_whitelist_auth *@*.redhat.com
def_whitelist_auth *@*.freshdesk.com
def_whitelist_auth *@*.planningcenteronline.com def_whitelist_auth *@*.planningcenteronline.com
def_whitelist_auth *@*.ihg.com def_whitelist_auth *@*.ihg.com
def_whitelist_auth *@*.opendns.com def_whitelist_auth *@*.opendns.com
@ -1990,5 +1992,5 @@ def_whitelist_auth *@*.testingmom.com
def_whitelist_auth *@*.ceramicartsnetwork.org def_whitelist_auth *@*.ceramicartsnetwork.org
def_whitelist_auth *@*.verintefm.com def_whitelist_auth *@*.verintefm.com
endif # if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist) endif # if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)

108
sa-updates/60_whitelist_dkim.cf → sa-updates/60_welcomelist_dkim.cf
View File

@ -21,60 +21,59 @@
# limitations under the License. # limitations under the License.
# </@LICENSE> # </@LICENSE>
ifplugin Mail::SpamAssassin::Plugin::DKIM
########################################################################### ###########################################################################
# DKIM whitelist rules # DKIM whitelist rules
#For those wondering why there's not just an ifplugin in front of all of this, there's a big involving it # 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
#in nested if statements if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist) header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_welcomelist_from()
ifplugin Mail::SpamAssassin::Plugin::DKIM describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist
#bz7826 renames whitelist to welcomelist and blacklist to blocklist tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf
header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_welcomelist_from() score USER_IN_DKIM_WELCOMELIST -100
describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist
tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf
score USER_IN_DKIM_WELCOMELIST -100.000
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST)
describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST
tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf
score USER_IN_DKIM_WELCOMELIST -0.01
score USER_IN_DKIM_WHITELIST -100.000
endif
endif
#might be a way to only have one instance of the below block, unsure if it's even necessary
reuse USER_IN_DKIM_WHITELSIT
reuse USER_IN_DKIM_WELCOMELIST reuse USER_IN_DKIM_WELCOMELIST
else # Backwards compatibility
ifplugin Mail::SpamAssassin::Plugin::DKIM # To disable set "enable_compat welcomelist_blocklist" in init.pre
header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_whitelist_from() if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist
tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf
score USER_IN_DKIM_WELCOMELIST -0.01
meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST) meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST)
describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST
tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf
score USER_IN_DKIM_WHITELIST -100.000 score USER_IN_DKIM_WHITELIST -100
reuse USER_IN_DKIM_WHITELIST
score USER_IN_DKIM_WELCOMELIST -0.01
endif endif
endif
reuse USER_IN_DKIM_WHITELSIT if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_DKIM_WELCOMELIST eval:check_for_dkim_whitelist_from()
describe USER_IN_DKIM_WELCOMELIST From: address is in the user's DKIM welcomelist
tflags USER_IN_DKIM_WELCOMELIST nice noautolearn net userconf
score USER_IN_DKIM_WELCOMELIST -100
reuse USER_IN_DKIM_WELCOMELIST reuse USER_IN_DKIM_WELCOMELIST
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_DKIM_WHITELIST (USER_IN_DKIM_WELCOMELIST)
describe USER_IN_DKIM_WHITELIST DEPRECATED: See USER_IN_DKIM_WELCOMELIST
tflags USER_IN_DKIM_WHITELIST nice noautolearn net userconf
score USER_IN_DKIM_WHITELIST -100
reuse USER_IN_DKIM_WHITELIST
score USER_IN_DKIM_WELCOMELIST -0.01
endif
endif endif
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist) header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_welcomelist_from()
ifplugin Mail::SpamAssassin::Plugin::DKIM describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list
tflags USER_IN_DEF_DKIM_WL nice noautolearn net
# The backwards compatibility for this rule will be after the else statement below reuse USER_IN_DEF_DKIM_WL
header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_welcomelist_from() endif
describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
tflags USER_IN_DEF_DKIM_WL nice noautolearn net header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_whitelist_from()
reuse USER_IN_DEF_DKIM_WL describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list
tflags USER_IN_DEF_DKIM_WL nice noautolearn net
reuse USER_IN_DEF_DKIM_WL
endif
########################################################################### ###########################################################################
# Default welcomelists. These should be e-mail addresses of authors (i.e. # Default welcomelists. These should be e-mail addresses of authors (i.e.
@ -87,6 +86,8 @@ reuse USER_IN_DEF_DKIM_WL
# Whitelist and blacklist addresses are file-glob-style patterns, so # Whitelist and blacklist addresses are file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work. # "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
def_welcomelist_from_dkim *@*.ebay.com ebay.com def_welcomelist_from_dkim *@*.ebay.com ebay.com
def_welcomelist_from_dkim *@ebay.com def_welcomelist_from_dkim *@ebay.com
def_welcomelist_from_dkim *@ebay.co.uk def_welcomelist_from_dkim *@ebay.co.uk
@ -195,22 +196,14 @@ def_welcomelist_from_dkim *@fisglobal.com
def_welcomelist_from_dkim *@*.msgfocus.com def_welcomelist_from_dkim *@*.msgfocus.com
def_welcomelist_from_dkim *@boredpanda.com mailersend.com def_welcomelist_from_dkim *@boredpanda.com mailersend.com
endif # Mail::SpamAssassin::Plugin::DKIM endif # if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
# #
# For older versions of SA, these old entries remain for SA before version 4.0 # For older versions of SA, these old entries remain for SA before version 4.0
# #
else if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
ifplugin Mail::SpamAssassin::Plugin::DKIM
header USER_IN_DEF_DKIM_WL eval:check_for_def_dkim_whitelist_from()
describe USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list
tflags USER_IN_DEF_DKIM_WL nice noautolearn net
reuse USER_IN_DEF_DKIM_WL
def_whitelist_from_dkim *@*.ebay.com ebay.com def_whitelist_from_dkim *@*.ebay.com ebay.com
def_whitelist_from_dkim *@ebay.com def_whitelist_from_dkim *@ebay.com
@ -320,6 +313,11 @@ def_whitelist_from_dkim *@fisglobal.com
def_whitelist_from_dkim *@*.msgfocus.com def_whitelist_from_dkim *@*.msgfocus.com
def_whitelist_from_dkim *@boredpanda.com mailersend.com def_whitelist_from_dkim *@boredpanda.com mailersend.com
endif # Mail::SpamAssassin::Plugin::DKIM endif # if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
endif # if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
#
#
#
endif # Mail::SpamAssassin::Plugin::DKIM

170
sa-updates/60_welcomelist_spf.cf Normal file
View File

@ -0,0 +1,170 @@
# SpamAssassin rules file: default SPF welcomelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
ifplugin Mail::SpamAssassin::Plugin::SPF
###########################################################################
# SPF welcomelist rules
# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_SPF_WELCOMELIST eval:check_for_spf_welcomelist_from()
describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist
tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net
score USER_IN_SPF_WELCOMELIST -100
reuse USER_IN_SPF_WELCOMELIST
# Backwards compatibility
# To disable set "enable_compat welcomelist_blocklist" in init.pre
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST)
describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST
tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net
score USER_IN_SPF_WHITELIST -100
reuse USER_IN_SPF_WHITELIST
score USER_IN_SPF_WELCOMELIST -0.01
endif
header USER_IN_DEF_SPF_WL eval:check_for_def_spf_welcomelist_from()
describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list
tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net
reuse USER_IN_DEF_SPF_WL
endif
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
header USER_IN_SPF_WELCOMELIST eval:check_for_spf_whitelist_from()
describe USER_IN_SPF_WELCOMELIST From: address is in the user's SPF welcomelist
tflags USER_IN_SPF_WELCOMELIST userconf nice noautolearn net
score USER_IN_SPF_WELCOMELIST -0.01
reuse USER_IN_SPF_WELCOMELIST
meta USER_IN_SPF_WHITELIST (USER_IN_SPF_WELCOMELIST)
describe USER_IN_SPF_WHITELIST DEPRECATED: See USER_IN_SPF_WELCOMELIST
tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net
score USER_IN_SPF_WHITELIST -100
reuse USER_IN_SPF_WHITELIST
header USER_IN_DEF_SPF_WL eval:check_for_def_spf_whitelist_from()
describe USER_IN_DEF_SPF_WL From: address is in the default SPF welcome-list
tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net
reuse USER_IN_DEF_SPF_WL
endif
meta ENV_AND_HDR_SPF_MATCH (USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH)
describe ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match
tflags ENV_AND_HDR_SPF_MATCH userconf nice noautolearn net
###########################################################################
# Default welcomelists. These should be addresses which send mail that is often
# tagged (incorrectly) as spam; it also helps that they be addresses of big
# companies with lots of lawyers, so if spammers impersonate them, they'll get
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
#
# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
#
# Please do not add unmoderated public mailing lists here. They are
# too easily abused by spammers.
if can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
def_welcomelist_from_spf *@nytimes.com
def_welcomelist_from_spf *@amazon.com
def_welcomelist_from_spf *@amazon.co.uk
def_welcomelist_from_spf *@*.amazon.co.uk
def_welcomelist_from_spf *@ora.com
def_welcomelist_from_spf *@*.ora.com
def_welcomelist_from_spf *@mypoints.com
def_welcomelist_from_spf *@*.mypoints.com
def_welcomelist_from_spf *@paypal.com
def_welcomelist_from_spf *@ebay.com
def_welcomelist_from_spf *@foolsubs.com
def_welcomelist_from_spf *@match.com
# bugtraq: can contain malicious Javascript etc.
def_welcomelist_from_spf *@securityfocus.com
def_welcomelist_from_spf *@mediaunspun.imakenews.net
# sender of Cringley newsletter
def_welcomelist_from_spf *@bdcimail.com
# Silicon.com newslettters - we see thousands of these
def_welcomelist_from_spf *@silicon.com
# C|Net news.com newsletters
def_welcomelist_from_spf *@newsletter.online.com
# bug 1348
def_welcomelist_from_spf *@enews.buy.com
def_welcomelist_from_spf *@palm.m0.net
def_welcomelist_from_spf *@handspring.4at1.com
endif
###
### For <4.0 compatibility
###
if !can(Mail::SpamAssassin::Conf::feature_welcomelist_blocklist)
def_whitelist_from_spf *@nytimes.com
def_whitelist_from_spf *@amazon.com
def_whitelist_from_spf *@amazon.co.uk
def_whitelist_from_spf *@*.amazon.co.uk
def_whitelist_from_spf *@ora.com
def_whitelist_from_spf *@*.ora.com
def_whitelist_from_spf *@mypoints.com
def_whitelist_from_spf *@*.mypoints.com
def_whitelist_from_spf *@paypal.com
def_whitelist_from_spf *@ebay.com
def_whitelist_from_spf *@foolsubs.com
def_whitelist_from_spf *@match.com
# bugtraq: can contain malicious Javascript etc.
def_whitelist_from_spf *@securityfocus.com
def_whitelist_from_spf *@mediaunspun.imakenews.net
# sender of Cringley newsletter
def_whitelist_from_spf *@bdcimail.com
# Silicon.com newslettters - we see thousands of these
def_whitelist_from_spf *@silicon.com
# C|Net news.com newsletters
def_whitelist_from_spf *@newsletter.online.com
# bug 1348
def_whitelist_from_spf *@enews.buy.com
def_whitelist_from_spf *@palm.m0.net
def_whitelist_from_spf *@handspring.4at1.com
endif
###
###
###
endif # Mail::SpamAssassin::Plugin::SPF

87
sa-updates/60_welcomelist_subject.cf Normal file
View File

@ -0,0 +1,87 @@
# SpamAssassin rules file: default welcomelist/blocklist subject
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
###########################################################################
# Welcomelist/Blocklist rules
#
# Note that most of these get 'noautolearn'. They should not be
# considered when deciding whether to auto-learn a message, as a
# user slip-up could result in scribbling side-effects in the bayes
# db as a result -- which is hard to remedy.
# 4.0 / Bug 7826 renames whitelist to welcomelist and blacklist to blocklist
# Module was renamed WhiteListSubject -> WelcomeListSubject
ifplugin Mail::SpamAssassin::Plugin::WelcomeListSubject
header SUBJECT_IN_WELCOMELIST eval:check_subject_in_welcomelist()
describe SUBJECT_IN_WELCOMELIST Subject: contains string in the user's welcome-list
tflags SUBJECT_IN_WELCOMELIST userconf nice noautolearn
score SUBJECT_IN_WELCOMELIST -100
# Backwards compatibility
# To disable set "enable_compat welcomelist_blocklist" in init.pre
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta SUBJECT_IN_WHITELIST (SUBJECT_IN_WELCOMELIST)
describe SUBJECT_IN_WHITELIST DEPRECATED: See SUBJECT_IN_WELCOMELIST
tflags SUBJECT_IN_WHITELIST userconf nice noautolearn
score SUBJECT_IN_WHITELIST -100
score SUBJECT_IN_WELCOMELIST -0.01
endif
header SUBJECT_IN_BLOCKLIST eval:check_subject_in_blocklist()
describe SUBJECT_IN_BLOCKLIST Subject: contains string in the user's block-list
tflags SUBJECT_IN_BLOCKLIST userconf noautolearn
score SUBJECT_IN_BLOCKLIST 100
if !can(Mail::SpamAssassin::Conf::compat_welcomelist_blocklist)
meta SUBJECT_IN_BLACKLIST (SUBJECT_IN_BLOCKLIST)
describe SUBJECT_IN_BLACKLIST DEPRECATED: See SUBJECT_IN_BLOCKLIST
tflags SUBJECT_IN_BLACKLIST userconf noautolearn
score SUBJECT_IN_BLACKLIST 100
score SUBJECT_IN_BLOCKLIST 0.01
endif
endif
if !plugin(Mail::SpamAssassin::Plugin::WelcomeListSubject)
ifplugin Mail::SpamAssassin::Plugin::WhiteListSubject
header SUBJECT_IN_WELCOMELIST eval:check_subject_in_whitelist()
describe SUBJECT_IN_WELCOMELIST Subject: contains string in the user's welcome-list
tflags SUBJECT_IN_WELCOMELIST userconf nice noautolearn
score SUBJECT_IN_WELCOMELIST -0.01
meta SUBJECT_IN_WHITELIST (SUBJECT_IN_WELCOMELIST)
describe SUBJECT_IN_WHITELIST DEPRECATED: See SUBJECT_IN_WELCOMELIST
tflags SUBJECT_IN_WHITELIST userconf nice noautolearn
score SUBJECT_IN_WHITELIST -100
header SUBJECT_IN_BLOCKLIST eval:check_subject_in_blacklist()
describe SUBJECT_IN_BLOCKLIST Subject: contains string in the user's block-list
tflags SUBJECT_IN_BLOCKLIST userconf noautolearn
score SUBJECT_IN_BLOCKLIST 0.01
meta SUBJECT_IN_BLACKLIST (SUBJECT_IN_BLOCKLIST)
describe SUBJECT_IN_BLACKLIST DEPRECATED: See SUBJECT_IN_BLOCKLIST
tflags SUBJECT_IN_BLACKLIST userconf noautolearn
score SUBJECT_IN_BLACKLIST 100
endif
endif

286
sa-updates/60_whitelist.cf
View File

@ -1,286 +0,0 @@
# SpamAssassin rules file: default welcomelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
###########################################################################
# Welcomelist rules
#
# Note that most of these get 'noautolearn'. They should not be
# considered when deciding whether to auto-learn a message, as a
# user slip-up could result in scribbling side-effects in the bayes
# db as a result -- which is hard to remedy.
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
header USER_IN_BLOCKLIST eval:check_from_in_blocklist()
describe USER_IN_BLOCKLIST From: user is listed in the block-list
tflags USER_IN_BLOCKLIST userconf nice noautolearn
score USER_IN_BLOCKLIST 100.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_BLACKLIST (USER_IN_BLOCKLIST)
describe USER_IN_BLACKLIST DEPRECATED: See USER_IN_BLOCKLIST
tflags USER_IN_BLACKLIST userconf nice noautolearn
score USER_IN_BLOCKLIST 0.01
score USER_IN_BLACKLIST 100.0
endif
endif
else
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_BLOCKLIST eval:check_from_in_blacklist()
describe USER_IN_BLOCKLIST From: user is listed in the block-list
tflags USER_IN_BLOCKLIST userconf nice noautolearn
score USER_IN_BLOCKLIST 0.01
meta USER_IN_BLACKLIST (USER_IN_BLOCKLIST)
describe USER_IN_BLACKLIST DEPRECATED: See USER_IN_BLOCKLIST
tflags USER_IN_BLACKLIST userconf nice noautolearn
score USER_IN_BLACKLIST 100.0
endif
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
header USER_IN_WELCOMELIST eval:check_from_in_welcomelist()
describe USER_IN_WELCOMELIST User is listed in 'welcomelist_from'
tflags USER_IN_WELCOMELIST userconf nice noautolearn
score USER_IN_WELCOMELIST -100.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_WHITELIST (USER_IN_WELCOMELIST)
describe USER_IN_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_WHITELIST userconf nice noautolearn
score USER_IN_WELCOMELIST -0.01
score USER_IN_WHITELIST -100.0
endif
endif
else
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_WELCOMELIST eval:check_from_in_whitelist()
describe USER_IN_WELCOMELIST User is listed in 'welcomelist_from'
tflags USER_IN_WELCOMELIST userconf nice noautolearn
score USER_IN_WELCOMELIST -0.01
meta USER_IN_WHITELIST (USER_IN_WELCOMELIST)
describe USER_IN_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_WHITELIST userconf nice noautolearn
score USER_IN_WHITELIST -100.0
endif
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
header USER_IN_DEF_WELCOMELIST eval:check_from_in_default_welcomelist()
describe USER_IN_DEF_WELCOMELIST From: user is listed in the default welcome-list
tflags USER_IN_DEF_WELCOMELIST userconf nice noautolearn
score USER_IN_DEF_WELCOMELIST -15.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_DEF_WHITELIST (USER_IN_DEF_WELCOMELIST)
describe USER_IN_DEF_WHITELIST DEPRECATED: See USER_IN_WELCOMELIST
tflags USER_IN_DEF_WHITELIST userconf nice noautolearn
score USER_IN_DEF_WELCOMELIST -0.01
score USER_IN_DEF_WHITELIST -15.0
endif
endif
else
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_DEF_WELCOMELIST eval:check_from_in_default_whitelist()
describe USER_IN_DEF_WELCOMELIST From: user is listed in the default welcome-list
tflags USER_IN_DEF_WELCOMELIST userconf nice noautolearn
score USER_IN_DEF_WELCOMELIST -0.01
meta USER_IN_DEF_WHITELIST (USER_IN_DEF_WELCOMELIST)
describe USER_IN_DEF_WHITELIST DEPRECATED: See USER_IN_DEF_WELCOMELIST
tflags USER_IN_DEF_WHITELIST userconf nice noautolearn
score USER_IN_DEF_WHITELIST -15.0
endif
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
header USER_IN_BLOCKLIST_TO eval:check_to_in_blocklist()
describe USER_IN_BLOCKLIST_TO User is listed in 'blocklist_to'
tflags USER_IN_BLOCKLIST_TO userconf nice noautolearn
score USER_IN_BLOCKLIST 10.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_BLACKLIST_TO (USER_IN_BLOCKLIST_TO)
describe USER_IN_BLACKLIST_TO DEPRECATED: See USER_IN_BLOCKLIST_TO
tflags USER_IN_BLACKLIST_TO userconf nice noautolearn
score USER_IN_BLOCKLIST_TO 0.01
score USER_IN_BLACKLIST_TO 10.0
endif
endif
else
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_BLOCKLIST_TO eval:check_to_in_blacklist()
describe USER_IN_BLOCKLIST_TO User is listed in 'blocklist_to'
tflags USER_IN_BLOCKLIST_TO userconf nice noautolearn
score USER_IN_BLOCKLIST_TO 0.01
meta USER_IN_BLACKLIST_TO (USER_IN_BLOCKLIST_TO)
describe USER_IN_BLACKLIST_TO DEPRECATED: See USER_IN_BLOCKLIST_TO
tflags USER_IN_BLACKLIST_TO userconf nice noautolearn
score USER_IN_BLACKLIST_TO 10.0
endif
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
header USER_IN_WELCOMELIST_TO eval:check_to_in_welcomelist()
describe USER_IN_WELCOMELIST_TO User is listed in 'welcomelist_to'
tflags USER_IN_WELCOMELIST_TO userconf nice noautolearn
score USER_IN_WELCOMELIST_TO -6.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta USER_IN_WHITELIST_TO (USER_IN_WELCOMELIST_TO)
describe USER_IN_WHITELIST_TO DEPRECATED: See USER_IN_WELCOMELIST_TO
tflags USER_IN_WHITELIST_TO userconf nice noautolearn
score USER_IN_WELCOMELIST_TO -0.01
score USER_IN_WHITELIST_TO -6.0
endif
endif
else
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_WELCOMELIST_TO eval:check_to_in_whitelist()
describe USER_IN_WELCOMELIST_TO User is listed in 'welcomelist_to'
tflags USER_IN_WELCOMELIST_TO userconf nice noautolearn
score USER_IN_WELCOMELIST_TO -0.01
meta USER_IN_WHITELIST_TO (USER_IN_WELCOMELIST_TO)
describe USER_IN_WHITELIST_TO DEPRECATED: See USER_IN_WELCOMELIST_TO
tflags USER_IN_WHITELIST_TO userconf nice noautolearn
score USER_IN_WHITELIST_TO -6.0
endif
endif
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
header USER_IN_MORE_SPAM_TO eval:check_to_in_more_spam()
describe USER_IN_MORE_SPAM_TO User is listed in 'more_spam_to'
tflags USER_IN_MORE_SPAM_TO userconf nice noautolearn
header USER_IN_ALL_SPAM_TO eval:check_to_in_all_spam()
describe USER_IN_ALL_SPAM_TO User is listed in 'all_spam_to'
tflags USER_IN_ALL_SPAM_TO userconf nice noautolearn
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
body URI_HOST_IN_BLOCKLIST eval:check_uri_host_in_blocklist()
describe URI_HOST_IN_BLOCKLIST Host or Domain is listed in the user's URI block-list
tflags URI_HOST_IN_BLOCKLIST userconf noautolearn
score URI_HOST_IN_BLOCKLIST 100.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta URI_HOST_IN_BLACKLIST (URI_HOST_IN_BLOCKLIST)
describe URI_HOST_IN_BLACKLIST DEPRECATED: See URI_HOST_IN_BLOCKLIST
tflags URI_HOST_IN_BLACKLIST userconf noautolearn
score URI_HOST_IN_BLOCKLIST -0.01
score URI_HOST_IN_BLACKLIST 100.0
endif
endif
else
if (version >= 3.004000)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
body URI_HOST_IN_BLOCKLIST eval:check_uri_host_in_blacklist()
describe URI_HOST_IN_BLOCKLIST Host or Domain is listed in the user's URI block-list
tflags URI_HOST_IN_BLOCKLIST userconf noautolearn
score URI_HOST_IN_BLOCKLIST -0.01
meta URI_HOST_IN_BLACKLIST (URI_HOST_IN_BLOCKLIST)
describe URI_HOST_IN_BLACKLIST DEPRECATED: See URI_HOST_IN_BLOCKLIST
tflags URI_HOST_IN_BLACKLIST userconf noautolearn
score URI_HOST_IN_BLACKLIST 100.0
endif
endif
endif
if can(Mail::SpamAssassin::Conf::feature_blocklist_welcomelist)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
#bz7826 renames whitelist to welcomelist and blacklist to blocklist
body URI_HOST_IN_WELCOMELIST eval:check_uri_host_in_welcomelist()
describe URI_HOST_IN_WELCOMELIST Host or Domain is listed in the user's URI welcome-list
tflags URI_HOST_IN_WELCOMELIST userconf nice noautolearn
score URI_HOST_IN_WELCOMELIST -100.0
ifplugin Mail::SpamAssassin::Plugin::RaciallyCharged
meta URI_HOST_IN_WHITELIST (URI_HOST_IN_WELCOMELIST)
describe URI_HOST_IN_WHITELIST DEPRECATED: See URI_HOST_IN_WELCOMELIST
tflags URI_HOST_IN_WHITELIST userconf nice noautolearn
score URI_HOST_IN_WELCOMELIST -0.01
score URI_HOST_IN_WHITELIST -100.0
endif
endif
else
if (version >= 3.004000)
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
body URI_HOST_IN_WELCOMELIST eval:check_uri_host_in_whitelist()
describe URI_HOST_IN_WELCOMELIST Host or Domain is listed in the user's URI welcome-list
tflags URI_HOST_IN_WELCOMELIST userconf nice noautolearn
score URI_HOST_IN_WELCOMELIST -0.01
meta URI_HOST_IN_WHITELIST (URI_HOST_IN_WELCOMELIST)
describe URI_HOST_IN_WHITELIST DEPRECATED: See URI_HOST_IN_WELCOMELIST
tflags URI_HOST_IN_WHITELIST userconf nice noautolearn
score URI_HOST_IN_WHITELIST -100.0
endif
endif
endif
# Bug 7256, using a header rule with an eval() function does not work the way
# this was intended.
# header HEADER_HOST_IN_BLACKLIST eval:check_uri_host_listed('BLACK')
# describe HEADER_HOST_IN_BLACKLIST Host or Domain in header is listed in the user's URI black-list
# tflags HEADER_HOST_IN_BLACKLIST userconf noautolearn
# header HEADER_HOST_IN_WHITELIST eval:check_uri_host_listed('WHITE')
# describe HEADER_HOST_IN_WHITELIST Host or Domain in header is listed in the user's URI white-list
# tflags HEADER_HOST_IN_WHITELIST userconf nice noautolearn
###########################################################################
# Default welcomelists. These should be addresses which send mail that is often
# tagged (incorrectly) as spam; it also helps that they be addresses of big
# companies with lots of lawyers, so if spammers impersonate them, they'll get
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
#
# Welcomelist and blocklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
#
# Please do not add unmoderated public mailing lists here. They are
# too easily abused by spammers.
# Should really not be used these days, use def_welcomelist_auth if possible.
ifplugin Mail::SpamAssassin::Plugin::WLBLEval
# def_welcomelist_from_rcvd *@foo.com foo.com
endif

87
sa-updates/60_whitelist_spf.cf
View File

@ -1,87 +0,0 @@
# SpamAssassin rules file: default SPF whitelists
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at:
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
###########################################################################
# SPF whitelist rules
ifplugin Mail::SpamAssassin::Plugin::SPF
header USER_IN_SPF_WHITELIST eval:check_for_spf_whitelist_from()
describe USER_IN_SPF_WHITELIST From: address is in the user's SPF whitelist
tflags USER_IN_SPF_WHITELIST userconf nice noautolearn net
reuse USER_IN_SPF_WHITELIST
header USER_IN_DEF_SPF_WL eval:check_for_def_spf_whitelist_from()
describe USER_IN_DEF_SPF_WL From: address is in the default SPF white-list
tflags USER_IN_DEF_SPF_WL userconf nice noautolearn net
reuse USER_IN_DEF_SPF_WL
meta ENV_AND_HDR_SPF_MATCH (USER_IN_DEF_SPF_WL && __ENV_AND_HDR_FROM_MATCH)
describe ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match
tflags ENV_AND_HDR_SPF_MATCH userconf nice noautolearn net
###########################################################################
# Default whitelists. These should be addresses which send mail that is often
# tagged (incorrectly) as spam; it also helps that they be addresses of big
# companies with lots of lawyers, so if spammers impersonate them, they'll get
# into big trouble, so it doesn't provide a shortcut around SpamAssassin.
#
# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
#
# Please do not add unmoderated public mailing lists here. They are
# too easily abused by spammers.
def_whitelist_from_spf *@nytimes.com
def_whitelist_from_spf *@amazon.com
def_whitelist_from_spf *@amazon.co.uk
def_whitelist_from_spf *@*.amazon.co.uk
def_whitelist_from_spf *@ora.com
def_whitelist_from_spf *@*.ora.com
def_whitelist_from_spf *@mypoints.com
def_whitelist_from_spf *@*.mypoints.com
def_whitelist_from_spf *@paypal.com
def_whitelist_from_spf *@ebay.com
def_whitelist_from_spf *@foolsubs.com
def_whitelist_from_spf *@match.com
# bugtraq: can contain malicious Javascript etc.
def_whitelist_from_spf *@securityfocus.com
def_whitelist_from_spf *@mediaunspun.imakenews.net
# sender of Cringley newsletter
def_whitelist_from_spf *@bdcimail.com
# Silicon.com newslettters - we see thousands of these
def_whitelist_from_spf *@silicon.com
# C|Net news.com newsletters
def_whitelist_from_spf *@newsletter.online.com
# bug 1348
def_whitelist_from_spf *@enews.buy.com
def_whitelist_from_spf *@palm.m0.net
def_whitelist_from_spf *@handspring.4at1.com
endif # Mail::SpamAssassin::Plugin::SPF

1818
sa-updates/72_active.cf
View File

File diff suppressed because one or more lines are too long

474
sa-updates/72_scores.cf
View File

@ -1,8 +1,7 @@
score ACCT_PHISHING_MANY 2.999 2.996 2.999 2.996
score AC_BR_BONANZA 0.001 0.001 0.001 0.001 score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001 score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
score AC_FROM_MANY_DOTS 3.000 0.578 3.000 0.578 score AC_FROM_MANY_DOTS 2.999 2.999 2.999 2.999
score AC_HTML_NONSENSE_TAGS 1.999 1.997 1.999 1.997 score AC_HTML_NONSENSE_TAGS 2.000 1.999 2.000 1.999
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000 score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
@ -13,281 +12,280 @@ score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADMITS_SPAM 2.899 1.510 2.899 1.510 score ADMITS_SPAM 3.200 3.113 3.200 3.113
score ADULT_DATING_COMPANY 10.001 10.001 10.001 10.001 score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000 score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FRM_MNY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_MONEY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
score ADVANCE_FEE_3_NEW 2.836 1.673 2.836 1.673 score ADVANCE_FEE_3_NEW 2.039 3.448 2.039 3.448
score ADVANCE_FEE_3_NEW_FRM_MNY 1.536 2.197 1.536 2.197 score ADVANCE_FEE_3_NEW_MONEY 0.342 2.523 0.342 2.523
score ADVANCE_FEE_3_NEW_MONEY 2.799 0.001 2.799 0.001 score ADVANCE_FEE_4_NEW 2.400 2.192 2.400 2.192
score ADVANCE_FEE_4_NEW 2.210 0.001 2.210 0.001 score ADVANCE_FEE_4_NEW_MONEY 1.643 1.642 1.643 1.642
score ADVANCE_FEE_4_NEW_FRM_MNY 0.199 1.098 0.199 1.098 score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.001 0.001 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.406 0.722 0.406 0.722
score ADVANCE_FEE_5_NEW 0.091 0.001 0.091 0.001
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 1.080 0.001 1.080
score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001 score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001
score AD_PREFS 0.312 0.498 0.312 0.498 score AD_PREFS 0.499 0.001 0.499 0.001
score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000 score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000
score AMAZON_IMG_NOT_RCVD_AMZN 2.499 0.001 2.499 0.001 score AMAZON_IMG_NOT_RCVD_AMZN 0.001 0.001 0.001 0.001
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000 score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.997 1.000 1.997 score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
score AXB_XMAILER_MIMEOLE_OL_024C2 0.403 0.001 0.403 0.001 score ARC_SIGNED 0.001 0.001 0.001 0.001
score ARC_VALID 0.001 0.001 0.001 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
score AXB_X_FF_SEZ_S 3.099 3.100 3.099 3.100
score BAT_BDRY_TO_MALF 2.499 1.637 2.499 1.637
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000 score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
score BIGNUM_EMAILS_FREEM 0.159 0.001 0.159 0.001 score BIGNUM_EMAILS_FREEM 1.336 0.017 1.336 0.017
score BIGNUM_EMAILS_MANY 2.999 0.003 2.999 0.003 score BIGNUM_EMAILS_MANY 2.743 1.670 2.743 1.670
score BITCOIN_BOMB 1.000 1.000 1.000 1.000 score BITCOIN_BOMB 1.000 1.000 1.000 1.000
score BITCOIN_DEADLINE 1.000 1.000 1.000 1.000 score BITCOIN_DEADLINE 1.753 1.000 1.753 1.000
score BITCOIN_EXTORT_01 1.000 1.000 1.000 1.000 score BITCOIN_EXTORT_01 2.102 2.692 2.102 2.692
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000 score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
score BITCOIN_IMGUR 2.236 3.496 2.236 3.496 score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
score BITCOIN_MALF_HTML 0.001 2.487 0.001 2.487 score BITCOIN_MALF_HTML 2.095 0.142 2.095 0.142
score BITCOIN_MALWARE 1.000 0.001 1.000 0.001 score BITCOIN_MALWARE 1.043 0.001 1.043 0.001
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000 score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
score BITCOIN_ONAN 1.000 1.000 1.000 1.000 score BITCOIN_ONAN 2.011 2.867 2.011 2.867
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000 score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_02 2.499 1.083 2.499 1.083 score BITCOIN_SPAM_02 2.189 1.279 2.189 1.279
score BITCOIN_SPAM_03 1.000 1.875 1.000 1.875 score BITCOIN_SPAM_03 2.225 0.919 2.225 0.919
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_05 0.001 2.255 0.001 2.255 score BITCOIN_SPAM_05 0.001 2.027 0.001 2.027
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_07 3.499 3.496 3.499 3.496 score BITCOIN_SPAM_07 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_09 1.499 1.498 1.499 1.498 score BITCOIN_SPAM_09 1.499 1.499 1.499 1.499
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000 score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
score BITCOIN_XPRIO 1.490 0.001 1.490 0.001 score BITCOIN_XPRIO 1.051 0.001 1.051 0.001
score BITCOIN_YOUR_INFO 2.999 2.975 2.999 2.975 score BITCOIN_YOUR_INFO 1.268 0.708 1.268 0.708
score BODY_SINGLE_URI 1.746 2.497 1.746 2.497 score BODY_URI_ONLY 2.499 1.958 2.499 1.958
score BODY_SINGLE_WORD 0.001 0.001 0.001 0.001 score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
score BODY_URI_ONLY 1.000 1.533 1.000 1.533 score BOGUS_MSM_HDRS 1.126 0.001 1.126 0.001
score BOGUS_MIME_VERSION 3.499 3.496 3.499 3.496
score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000
score BOMB_FREEM 1.000 1.000 1.000 1.000 score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000 score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000 score BTC_ORG 1.000 1.000 1.000 1.000
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000 score BULK_RE_SUSP_NTLD 0.999 1.000 0.999 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000 score CANT_SEE_AD 1.000 1.000 1.000 1.000
score CK_HELO_GENERIC 0.250 0.001 0.250 0.001 score CK_HELO_GENERIC 0.249 0.001 0.249 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000 score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
score COMPENSATION 1.000 0.001 1.000 0.001 score COMPENSATION 1.000 1.000 1.000 1.000
score CONTENT_AFTER_HTML 2.182 0.001 2.182 0.001 score CONTENT_AFTER_HTML 1.000 1.000 1.000 1.000
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
score CTE_8BIT_MISMATCH 0.999 0.001 0.999 0.001 score CTE_8BIT_MISMATCH 0.999 0.001 0.999 0.001
score DATE_IN_FUTURE_Q_PLUS 2.700 2.700 2.700 2.700
score DAY_I_EARNED 1.000 1.000 1.000 1.000 score DAY_I_EARNED 1.000 1.000 1.000 1.000
score DEAR_BENEFICIARY 0.841 1.432 0.841 1.432 score DEAR_BENEFICIARY 1.641 2.148 1.641 2.148
score DKIMWL_BL 0.001 2.996 0.001 2.996 score DKIMWL_BL 0.001 1.000 0.001 1.000
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001 score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -0.702 0.001 -0.702 score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001 score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001 score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000 score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
score DX_TEXT_03 1.200 0.001 1.200 0.001 score DX_TEXT_03 1.200 1.299 1.200 1.299
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000 score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000 score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000 score ENCRYPTED_MESSAGE -1.000 -0.999 -1.000 -0.999
score END_FUTURE_EMAILS 1.000 0.001 1.000 0.001 score END_FUTURE_EMAILS 2.499 1.000 2.499 1.000
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000 score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
score FACEBOOK_IMG_NOT_RCVD_FB 1.498 1.318 1.498 1.318 score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
score FBI_MONEY 1.000 1.000 1.000 1.000 score FBI_MONEY 0.227 0.911 0.227 0.911
score FBI_SPOOF 1.000 1.000 1.000 1.000 score FBI_SPOOF 1.573 0.887 1.573 0.887
score FILL_THIS_FORM 1.699 1.597 1.699 1.597 score FILL_THIS_FORM 0.952 1.000 0.952 1.000
score FONT_INVIS_DIRECT 0.001 0.001 0.001 0.001 score FONT_INVIS_DIRECT 0.001 0.001 0.001 0.001
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000 score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
score FONT_INVIS_HTML_NOHTML 2.178 0.001 2.178 0.001 score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000
score FONT_INVIS_LONG_LINE 2.588 2.993 2.588 2.993 score FONT_INVIS_LONG_LINE 2.999 2.999 2.999 2.999
score FONT_INVIS_MSGID 2.499 1.810 2.499 1.810 score FONT_INVIS_MSGID 1.942 2.195 1.942 2.195
score FONT_INVIS_NORDNS 1.000 1.000 1.000 1.000 score FONT_INVIS_NORDNS 0.001 1.894 0.001 1.894
score FONT_INVIS_POSTEXTRAS 1.392 1.352 1.392 1.352 score FONT_INVIS_POSTEXTRAS 1.174 2.900 1.174 2.900
score FORM_FRAUD 1.000 0.001 1.000 0.001 score FORM_FRAUD 0.999 0.999 0.999 0.999
score FORM_FRAUD_5 0.001 0.001 0.001 0.001 score FORM_FRAUD_3 2.399 0.001 2.399 0.001
score FOUND_YOU 3.249 3.246 3.249 3.246 score FORM_FRAUD_5 0.001 1.742 0.001 1.742
score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.248 0.250 0.248 score FOUND_YOU 1.000 1.000 1.000 1.000
score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.001 0.250 0.001
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000 score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000 score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
score FROM_2_EMAILS_SHORT 2.999 2.585 2.999 2.585 score FROM_2_EMAILS_SHORT 0.001 0.921 0.001 0.921
score FROM_ADDR_WS 1.000 1.000 1.000 1.000 score FROM_ADDR_WS 3.000 2.999 3.000 2.999
score FROM_BANK_NOAUTH 0.001 0.998 0.001 0.998 score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001 score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
score FROM_FMBLA_NEWDOM 0.001 1.498 0.001 1.498 score FROM_FMBLA_NEWDOM 0.001 1.499 0.001 1.499
score FROM_FMBLA_NEWDOM14 0.001 0.998 0.001 0.998 score FROM_FMBLA_NEWDOM14 0.001 0.999 0.001 0.999
score FROM_FMBLA_NEWDOM28 0.001 0.798 0.001 0.798 score FROM_FMBLA_NEWDOM28 0.001 0.001 0.001 0.001
score FROM_GOV_DKIM_AU 0.001 -0.001 0.001 -0.001 score FROM_GOV_DKIM_AU 0.001 -0.001 0.001 -0.001
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000 score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000 score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
score FROM_IN_TO_AND_SUBJ 2.099 2.197 2.099 2.197 score FROM_MISSPACED 1.999 1.999 1.999 1.999
score FROM_MISSPACED 1.217 0.001 1.217 0.001 score FROM_MISSP_DYNIP 1.928 0.042 1.928 0.042
score FROM_MISSP_EH_MATCH 0.001 0.001 0.001 0.001 score FROM_MISSP_EH_MATCH 1.999 1.201 1.999 1.201
score FROM_MISSP_FREEMAIL 3.199 2.996 3.199 2.996 score FROM_MISSP_FREEMAIL 0.001 1.149 0.001 1.149
score FROM_MISSP_MSFT 2.450 0.001 2.450 0.001 score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
score FROM_MISSP_PHISH 2.953 3.496 2.953 3.496 score FROM_MISSP_REPLYTO 2.199 0.001 2.199 0.001
score FROM_MISSP_REPLYTO 1.000 0.001 1.000 0.001
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001 score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_USER 0.001 0.001 0.001 0.001 score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MULTI_NORDNS 2.491 1.896 2.491 1.896 score FROM_MULTI_NORDNS 1.332 1.895 1.332 1.895
score FROM_NEWDOM_BTC 0.001 0.863 0.001 0.863 score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000 score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000
score FROM_NTLD_REPLY_FREEMAIL 1.999 1.000 1.999 1.000 score FROM_NTLD_REPLY_FREEMAIL 1.512 1.000 1.512 1.000
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000 score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
score FROM_NUMERIC_TLD 1.000 1.000 1.000 1.000 score FROM_PAYPAL_SPOOF 0.001 1.599 0.001 1.599
score FROM_PAYPAL_SPOOF 0.001 1.597 0.001 1.597 score FROM_SUSPICIOUS_NTLD 0.500 0.001 0.500 0.001
score FROM_SUSPICIOUS_NTLD 0.469 0.001 0.469 0.001 score FROM_SUSPICIOUS_NTLD_FP 1.999 0.694 1.999 0.694
score FROM_SUSPICIOUS_NTLD_FP 1.821 1.997 1.821 1.997
score FROM_WSP_TRAIL 2.399 1.402 2.399 1.402
score FSL_BULK_SIG 0.001 0.001 0.001 0.001 score FSL_BULK_SIG 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001 score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_HELO_FAKE 0.001 0.001 0.001 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001 score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
score FUZZY_AMAZON 0.001 0.001 0.001 0.001 score FUZZY_AMAZON 0.001 0.001 0.001 0.001
score FUZZY_BITCOIN 2.799 1.802 2.799 1.802 score FUZZY_BITCOIN 0.001 0.001 0.001 0.001
score FUZZY_WALLET 2.599 2.097 2.599 2.097 score FUZZY_IMPORTANT 2.700 1.190 2.700 1.190
score GAPPY_LOW_CONTRAST 2.499 2.497 2.499 2.497 score FUZZY_PORN 1.836 0.001 1.836 0.001
score FUZZY_SECURITY 2.399 2.299 2.399 2.299
score FUZZY_WALLET 1.799 0.001 1.799 0.001
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000 score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
score GB_FAKE_RF_SHORT 1.999 0.073 1.999 0.073 score GB_BITCOIN_CP 2.645 2.999 2.645 2.999
score GB_BITCOIN_NH 1.994 0.001 1.994 0.001
score GB_CUSTOM_HTM_URI 0.350 0.036 0.350 0.036
score GB_FAKE_RF_SHORT 1.292 0.820 1.292 0.820
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000 score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
score GB_FREEMAIL_DISPTO 0.499 0.498 0.499 0.498 score GB_FREEMAIL_DISPTO 0.499 0.166 0.499 0.166
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500 score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750 score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
score GB_GOOG_IMG_NOT_RCVD_GOOG 1.000 1.000 1.000 1.000 score GB_HASHBL_BTC 0.001 0.562 0.001 0.562
score GB_STORAGE_GOOGLE_EMAIL 1.000 1.000 1.000 1.000
score GB_URI_FLEEK_STO_HTM 0.999 0.999 0.999 0.999
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000 score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000 score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000 score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000 score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_NORDNS 2.499 1.452 2.499 1.452 score GOOG_REDIR_NORDNS 2.502 2.899 2.502 2.899
score GOOG_STO_EMAIL_PHISH 2.999 2.217 2.999 2.217 score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000 score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_HTML 2.999 2.996 2.999 2.996 score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000 score GOOG_STO_IMG_NOHTML 2.500 2.499 2.500 2.499
score GOOG_STO_NOIMG_HTML 2.999 2.996 2.999 2.996 score GOOG_STO_NOIMG_HTML 2.706 2.893 2.706 2.893
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000 score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.999 0.807 1.999 0.807 score HAS_X_OUTGOING_SPAM_STAT 0.502 0.207 0.502 0.207
score HDRS_LCASE 0.100 0.001 0.100 0.001 score HDRS_LCASE 0.100 0.001 0.100 0.001
score HDRS_LCASE_IMGONLY 0.099 0.098 0.099 0.098 score HDRS_LCASE_IMGONLY 0.099 0.099 0.099 0.099
score HDRS_MISSP 2.500 0.810 2.500 0.810 score HDRS_MISSP 2.499 2.499 2.499 2.499
score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001 score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001 0.001 0.001 0.001 score HDR_ORDER_FTSDMCXX_NORDNS 0.349 0.001 0.349 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.249 0.249 0.249 score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.250 0.250 0.250
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001 score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000 score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_CTE_RAW 1.000 1.000 1.000 1.000 score HK_CTE_RAW 1.000 1.000 1.000 1.000
score HK_LOTTO 0.999 0.998 0.999 0.998 score HK_LOTTO 0.999 0.242 0.999 0.242
score HK_NAME_MR_MRS 1.000 0.476 1.000 0.476 score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
score HK_RANDOM_ENVFROM 0.999 0.001 0.999 0.001 score HK_RANDOM_ENVFROM 1.000 0.001 1.000 0.001
score HK_RANDOM_FROM 0.999 0.998 0.999 0.998 score HK_RANDOM_FROM 0.999 1.000 0.999 1.000
score HK_RANDOM_REPLYTO 0.999 0.001 0.999 0.001 score HK_RANDOM_REPLYTO 0.999 1.000 0.999 1.000
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000 score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
score HK_SCAM 0.409 0.551 0.409 0.551 score HK_SCAM 1.999 1.999 1.999 1.999
score HK_WIN 1.000 0.998 1.000 0.998 score HOSTED_IMG_DIRECT_MX 0.001 0.001 0.001 0.001
score HOSTED_IMG_DIRECT_MX 0.001 0.091 0.001 0.091
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000 score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
score HOSTED_IMG_FREEM 3.499 3.496 3.499 3.496 score HOSTED_IMG_FREEM 3.499 2.673 3.499 2.673
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000 score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
score HOSTED_IMG_MULTI_PUB_01 2.999 2.996 2.999 2.996 score HOSTED_IMG_MULTI_PUB_01 2.999 0.001 2.999 0.001
score HTML_ENTITY_ASCII 2.843 0.706 2.843 0.706 score HTML_ENTITY_ASCII 1.000 2.999 1.000 2.999
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000 score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
score HTML_FONT_TINY_NORDNS 1.999 1.997 1.999 1.997 score HTML_FONT_TINY_NORDNS 1.999 1.824 1.999 1.824
score HTML_OFF_PAGE 0.400 0.001 0.400 0.001 score HTML_OFF_PAGE 2.601 2.996 2.601 2.996
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000 score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 1.000 0.001 1.000 0.001 score HTML_SINGLET_MANY 2.499 1.000 2.499 1.000
score HTML_TAG_BALANCE_CENTER 2.085 2.930 2.085 2.930 score HTML_TAG_BALANCE_CENTER 1.940 3.099 1.940 3.099
score HTML_TEXT_INVISIBLE_FONT 1.000 0.739 1.000 0.739 score HTML_TEXT_INVISIBLE_FONT 1.999 0.258 1.999 0.258
score HTML_TEXT_INVISIBLE_STYLE 2.098 1.698 2.098 1.698 score HTML_TEXT_INVISIBLE_STYLE 1.275 0.892 1.275 0.892
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000 score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
score JH_SPAMMY_HEADERS 3.499 3.496 3.499 3.496 score JH_SPAMMY_HEADERS 3.499 3.500 3.499 3.500
score JH_SPAMMY_PATTERN01 2.999 2.872 2.999 2.872 score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000 score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
score KHOP_HELO_FCRDNS 0.400 0.001 0.400 0.001 score KHOP_FAKE_EBAY 0.001 0.001 0.001 0.001
score KHOP_HELO_FCRDNS 0.399 0.001 0.399 0.001
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000 score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000 score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000 score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
score LONGLN_LOW_CONTRAST 1.285 0.001 1.285 0.001 score LONG_HEX_URI 2.999 1.614 2.999 1.614
score LONG_HEX_URI 2.999 0.926 2.999 0.926 score LONG_IMG_URI 2.802 0.001 2.802 0.001
score LONG_IMG_URI 0.001 0.001 0.001 0.001 score LONG_INVISIBLE_TEXT 2.990 2.999 2.990 2.999
score LONG_INVISIBLE_TEXT 0.001 0.750 0.001 0.750
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010 score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
score LOTTO_AGENT 0.001 0.001 0.001 0.001 score LOTTO_AGENT 1.499 1.499 1.499 1.499
score LOTTO_DEPT 2.000 1.999 2.000 1.999
score LUCRATIVE 1.000 1.000 1.000 1.000 score LUCRATIVE 1.000 1.000 1.000 1.000
score MALFORMED_FREEMAIL 2.899 2.999 2.899 2.999
score MALF_HTML_B64 1.000 1.000 1.000 1.000 score MALF_HTML_B64 1.000 1.000 1.000 1.000
score MALWARE_NORDNS 0.001 0.248 0.001 0.248 score MALWARE_NORDNS 0.001 0.126 0.001 0.126
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000 score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
score MANY_HDRS_LCASE 0.100 0.100 0.100 0.100 score MAY_BE_FORGED 1.699 0.001 1.699 0.001
score MILLION_HUNDRED 0.001 0.710 0.001 0.710 score MILLION_HUNDRED 0.241 1.309 0.241 1.309
score MIMEOLE_DIRECT_TO_MX 1.000 0.001 1.000 0.001 score MILLION_USD 0.548 0.449 0.548 0.449
score MIMEOLE_DIRECT_TO_MX 0.001 0.001 0.001 0.001
score MIME_NO_TEXT 1.000 1.000 1.000 1.000 score MIME_NO_TEXT 1.000 1.000 1.000 1.000
score MIXED_AREA_CASE 0.719 0.199 0.719 0.199 score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
score MIXED_CENTER_CASE 2.499 1.854 2.499 1.854 score MIXED_CENTER_CASE 1.000 1.000 1.000 1.000
score MIXED_ES 3.252 2.882 3.252 2.882 score MIXED_ES 2.699 2.599 2.699 2.599
score MIXED_FONT_CASE 1.945 2.328 1.945 2.328 score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
score MIXED_HREF_CASE 0.816 0.408 0.816 0.408 score MIXED_HREF_CASE 1.000 1.000 1.000 1.000
score MIXED_IMG_CASE 0.295 1.169 0.295 1.169 score MIXED_IMG_CASE 2.999 1.509 2.999 1.509
score MONERO_DEADLINE 1.000 1.000 1.000 1.000 score MONERO_DEADLINE 1.000 1.000 1.000 1.000
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000 score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
score MONERO_MALWARE 1.000 1.000 1.000 1.000 score MONERO_MALWARE 1.000 1.000 1.000 1.000
score MONERO_PAY_ME 1.000 1.000 1.000 1.000 score MONERO_PAY_ME 1.000 1.000 1.000 1.000
score MONEY_ATM_CARD 1.799 2.899 1.799 2.899
score MONEY_FORM 0.001 0.001 0.001 0.001 score MONEY_FORM 0.001 0.001 0.001 0.001
score MONEY_FORM_SHORT 1.176 1.318 1.176 1.318 score MONEY_FORM_SHORT 2.499 2.499 2.499 2.499
score MONEY_FRAUD_3 1.395 0.657 1.395 0.657 score MONEY_FRAUD_3 2.472 2.599 2.472 2.599
score MONEY_FRAUD_5 3.081 1.999 3.081 1.999 score MONEY_FRAUD_5 0.001 0.001 0.001 0.001
score MONEY_FRAUD_8 3.099 0.001 3.099 0.001 score MONEY_FRAUD_8 0.039 0.001 0.039 0.001
score MONEY_FREEMAIL_REPTO 1.148 0.001 1.148 0.001 score MONEY_FREEMAIL_REPTO 3.000 2.379 3.000 2.379
score MONEY_FROM_41 1.999 0.001 1.999 0.001 score MONEY_FROM_41 1.999 0.840 1.999 0.840
score MONEY_FROM_MISSP 1.385 0.001 1.385 0.001 score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000 score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000 score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
score MSGID_NOFQDN1 0.001 0.001 0.001 0.001 score MSMAIL_PRI_ABNORMAL 1.499 0.912 1.499 0.912
score MSMAIL_PRI_ABNORMAL 0.001 0.001 0.001 0.001
score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000 score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
score NA_DOLLARS 1.055 1.498 1.055 1.498 score NAME_EMAIL_DIFF 1.729 0.001 1.729 0.001
score NA_DOLLARS 1.281 1.499 1.281 1.499
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000 score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
score NEW_PRODUCTS 1.000 1.000 1.000 1.000 score NEW_PRODUCTS 1.000 1.000 1.000 1.000
score NICE_REPLY_A -4.151 -1.993 -4.151 -1.993 score NICE_REPLY_A -0.001 -0.257 -0.001 -0.257
score NORDNS_LOW_CONTRAST 1.888 0.001 1.888 0.001
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001 score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001 score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
score NSL_RCVD_HELO_USER 2.186 0.211 2.186 0.211 score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
score OBFU_BITCOIN 1.736 1.914 1.736 1.914 score NUMBERONLY_BITCOIN_EXP 0.001 1.228 0.001 1.228
score OBFU_TEXT_ATTACH 1.196 0.950 1.196 0.950 score OBFU_BITCOIN 0.001 0.001 0.001 0.001
score ODD_FREEM_REPTO 2.999 2.214 2.999 2.214 score OBFU_TEXT_ATTACH 0.569 1.444 0.569 1.444
score OFFER_ONLY_AMERICA 0.853 1.000 0.853 1.000 score ODD_FREEM_REPTO 3.000 2.532 3.000 2.532
score PDS_BTC_ID 0.499 0.498 0.499 0.498 score PDS_BAD_THREAD_QP_64 0.001 0.180 0.001 0.180
score PDS_BTC_MSGID 0.999 0.001 0.999 0.001 score PDS_BTC_ID 0.500 0.318 0.500 0.318
score PDS_BTC_NTLD 0.807 0.001 0.807 0.001 score PDS_BTC_MSGID 0.001 0.001 0.001 0.001
score PDS_DBL_URL_TNB_RUNON 1.999 1.997 1.999 1.997 score PDS_BTC_NTLD 0.515 0.554 0.515 0.554
score PDS_FRNOM_TODOM_DBL_URL 1.425 1.373 1.425 1.373 score PDS_DBL_URL_TNB_RUNON 1.999 1.000 1.999 1.000
score PDS_FRNOM_TODOM_NAKED_TO 1.499 1.498 1.499 1.498 score PDS_FROM_2_EMAILS 1.268 1.923 1.268 1.923
score PDS_FROM_NAME_TO_DOMAIN 1.999 1.997 1.999 1.997
score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000 score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000
score PDS_HP_HELO_NORDNS 0.001 0.001 0.001 0.001 score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999
score PDS_OTHER_BAD_TLD 1.999 0.001 1.999 0.001 score PDS_NO_FULL_NAME_SPOOFED_URL 0.750 0.750 0.750 0.750
score PDS_PHPEXP_BOT 1.499 0.001 1.499 0.001 score PDS_OTHER_BAD_TLD 1.999 1.999 1.999 1.999
score PDS_PHP_EVAL 0.959 1.498 0.959 1.498
score PDS_RDNS_DYNAMIC_FP 0.001 0.001 0.001 0.001 score PDS_RDNS_DYNAMIC_FP 0.001 0.001 0.001 0.001
score PDS_SHORT_SPOOFED_URL 1.999 1.999 1.999 1.999
score PDS_TINYSUBJ_URISHRT 1.000 1.000 1.000 1.000 score PDS_TINYSUBJ_URISHRT 1.000 1.000 1.000 1.000
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 0.745 1.999 0.745 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.000 1.000 1.000 1.000
score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999 1.997 1.999 1.997
score PDS_TO_EQ_FROM_NAME 3.299 2.796 3.299 2.796
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500 score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000 score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
score PHOTO_EDITING_DIRECT 1.000 1.000 1.000 1.000
score PHOTO_EDITING_FREEM 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000 score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
score PHP_ORIG_SCRIPT 2.499 2.249 2.499 2.249 score PHP_ORIG_SCRIPT 2.499 2.491 2.499 2.491
score PHP_ORIG_SCRIPT_EVAL 2.293 2.996 2.293 2.996 score PHP_SCRIPT 2.499 2.352 2.499 2.352
score PHP_SCRIPT 2.499 2.497 2.499 2.497
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000 score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.998 0.999 0.998 score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500 score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000 score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000 score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000 score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000 score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000 score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
score RAND_MKTG_HEADER 1.999 1.997 1.999 1.997 score RAND_MKTG_HEADER 1.999 1.999 1.999 1.999
score RATWARE_NO_RDNS 0.001 0.001 0.001 0.001 score RATWARE_NO_RDNS 0.001 0.001 0.001 0.001
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000 score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000 score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
@ -303,13 +301,13 @@ score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000 score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
score RDNS_NUM_TLD_XM 2.999 2.009 2.999 2.009 score RDNS_NUM_TLD_XM 1.000 1.000 1.000 1.000
score REPLYTO_EMPTY 3.099 2.896 3.099 2.896 score READY_TO_SHIP 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD 1.000 2.996 1.000 2.996 score REPTO_419_FRAUD 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_GM 2.999 2.996 2.999 2.996 score REPTO_419_FRAUD_GM 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_GM_LOOSE 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_GM_LOOSE 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000
@ -319,94 +317,92 @@ score REPTO_419_FRAUD_YH 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_YH_LOOSE 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YH_LOOSE 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000 score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
score RISK_FREE 2.299 2.197 2.299 2.197 score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
score SCRIPT_GIBBERISH 0.001 0.001 0.001 0.001 score RISK_FREE 0.001 0.001 0.001 0.001
score SENDGRID_REDIR 1.499 0.910 1.499 0.910 score SCC_CANSPAM_2 2.700 0.631 2.700 0.631
score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000
score SCC_ISEMM_LID_1A 3.301 3.499 3.301 3.499
score SCC_ISEMM_LID_1B 1.499 1.499 1.499 1.499
score SENDGRID_REDIR 1.499 1.062 1.499 1.062
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000 score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
score SEO_SUSP_NTLD 0.001 1.000 0.001 1.000 score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
score SERGIO_SUBJECT_VIAGRA01 3.239 0.001 3.239 0.001 score SERGIO_SUBJECT_VIAGRA01 3.135 1.313 3.135 1.313
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 2.497 2.499 2.497 score SHOPIFY_IMG_NOT_RCVD_SFY 2.038 2.499 2.038 2.499
score SHORTENED_URL_SRC 2.399 2.397 2.399 2.397 score SHORTENER_SHORT_IMG 1.045 1.296 1.045 1.296
score SHORTENER_SHORT_IMG 2.411 2.210 2.411 2.210
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000 score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
score SHORT_SHORTNER 2.000 1.997 2.000 1.997 score SHORT_SHORTNER 1.999 1.999 1.999 1.999
score SPOOFED_FREEMAIL 0.001 1.324 0.001 1.324 score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001
score SPOOFED_FREEMAIL_NO_RDNS 1.000 0.001 1.000 0.001 score SPOOFED_FREEMAIL_NO_RDNS 0.001 0.001 0.001 0.001
score SPOOFED_FREEM_REPTO 0.001 2.497 0.001 2.497 score SPOOFED_FREEM_REPTO 0.001 0.502 0.001 0.502
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000 score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000 score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
score SPOOF_GMAIL_MID 1.000 1.497 1.000 1.497 score SPOOF_GMAIL_MID 1.499 0.001 1.499 0.001
score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001 score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001
score STOCK_TIP 1.000 1.000 1.000 1.000 score STOCK_TIP 1.000 1.000 1.000 1.000
score SUBJ_ATTENTION 0.499 0.499 0.499 0.499
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000 score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
score SUBJ_OBFU_LOW_CNTRST 2.499 1.488 2.499 1.488
score SURBL_BLOCKED 0.001 0.001 0.001 0.001 score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SUSP_UTF8_WORD_SUBJ 1.999 1.997 1.999 1.997 score SUSP_UTF8_WORD_SUBJ 2.000 0.367 2.000 0.367
score SYSADMIN 1.000 1.000 1.000 1.000 score SYSADMIN 1.000 1.000 1.000 1.000
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000 score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000 score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
score THIS_AD 1.199 0.998 1.199 0.998 score THIS_AD 1.899 1.799 1.899 1.799
score THIS_IS_ADV_SUSP_NTLD 0.001 1.000 0.001 1.000 score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000 score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
score TO_EQ_FM_DIRECT_MX 0.001 0.001 0.001 0.001 score TO_EQ_FM_DIRECT_MX 1.000 1.000 1.000 1.000
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.099 0.098 0.099 0.098 score TO_IN_SUBJ 0.100 0.100 0.100 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999 2.959 2.999 2.959 score TO_NAME_SUBJ_NO_RDNS 1.000 1.000 1.000 1.000
score TO_NO_BRKTS_DYNIP 0.001 0.250 0.001 0.250 score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499
score TO_NO_BRKTS_FROM_MSSP 2.499 1.706 2.499 1.706 score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_HTML_IMG 1.999 1.997 1.999 1.997 score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999 1.997 1.999 1.997 score TO_NO_BRKTS_MSFT 0.001 0.001 0.001 0.001
score TO_NO_BRKTS_MSFT 1.000 0.001 1.000 0.001 score TO_NO_BRKTS_NORDNS_HTML 2.000 1.999 2.000 1.999
score TO_NO_BRKTS_NORDNS_HTML 1.999 1.203 1.999 1.203 score TO_NO_BRKTS_PCNT 2.499 2.500 2.499 2.500
score TO_NO_BRKTS_PCNT 2.260 1.219 2.260 1.219 score TVD_RCVD_SPACE_BRACKET 0.126 0.557 0.126 0.557
score TRANSFORM_LIFE 2.499 2.497 2.499 2.497 score TVD_SPACE_ENCODED 2.046 0.001 2.046 0.001
score TVD_RCVD_SPACE_BRACKET 2.899 2.696 2.899 2.696 score TVD_SPACE_RATIO_MINFP 0.796 0.001 0.796 0.001
score TVD_SPACE_ENCODED 1.000 0.001 1.000 0.001
score TVD_SPACE_ENC_FM_MIME 1.000 1.000 1.000 1.000
score TVD_SPACE_RATIO_MINFP 1.000 0.001 1.000 0.001
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000 score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000 score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score UNDISC_FREEM 3.299 3.096 3.299 3.096 score UNDISC_FREEM 2.899 2.799 2.899 2.799
score UNDISC_MONEY 3.599 3.396 3.599 3.396 score UNDISC_MONEY 3.299 3.200 3.299 3.200
score UNICODE_OBFU_ASC 2.499 2.497 2.499 2.497 score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000 score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
score URI_ADOBESPARK 1.000 1.000 1.000 1.000 score URI_ADOBESPARK 1.000 1.000 1.000 1.000
score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000 score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000 score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000 score URI_DATA 1.000 1.000 1.000 1.000
score URI_DOTEDU 1.999 1.997 1.999 1.997 score URI_DOTEDU 1.999 1.265 1.999 1.265
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000 score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
score URI_FIREBASEAPP 2.999 2.996 2.999 2.996 score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
score URI_GOOGLE_PROXY 2.499 2.397 2.499 2.397 score URI_GOOGLE_PROXY 2.199 2.199 2.199 2.199
score URI_GOOG_STO_SPAMMY 2.999 2.996 2.999 2.996 score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
score URI_HEX_IP 1.000 1.000 1.000 1.000 score URI_HEX_IP 1.000 1.000 1.000 1.000
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000 score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
score URI_IN_URI_10 2.699 2.497 2.699 2.497
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000 score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
score URI_ONLY_MSGID_MALF 1.000 1.997 1.000 1.997 score URI_OBFU_DOM 2.499 2.500 2.499 2.500
score URI_ONLY_MSGID_MALF 0.001 1.000 0.001 1.000
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000 score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
score URI_PHISH 3.999 3.625 3.999 3.625 score URI_PHISH 3.999 3.699 3.999 3.699
score URI_PHP_REDIR 3.500 3.169 3.500 3.169 score URI_PHP_REDIR 1.000 1.000 1.000 1.000
score URI_TRY_3LD 1.940 1.204 1.940 1.204 score URI_TRY_3LD 1.948 0.378 1.948 0.378
score URI_TRY_USME 1.000 1.000 1.000 1.000 score URI_TRY_USME 1.000 1.000 1.000 1.000
score URI_WPADMIN 2.699 2.596 2.699 2.596 score URI_WPADMIN 1.686 2.199 1.686 2.199
score URI_WP_DIRINDEX 3.499 3.496 3.499 3.496 score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
score URI_WP_HACKED 1.000 3.496 1.000 3.496 score URI_WP_HACKED 1.686 3.499 1.686 3.499
score URI_WP_HACKED_2 2.499 2.497 2.499 2.497 score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000 score USB_DRIVES 1.000 1.000 1.000 1.000
score USER_IN_DKIM_WELCOMELIST 0.001 0.001 0.001 0.001 score VFY_ACCT_NORDNS 2.528 1.970 2.528 1.970
score VFY_ACCT_NORDNS 2.912 2.996 2.912 2.996
score VPS_NO_NTLD 1.000 1.000 1.000 1.000 score VPS_NO_NTLD 1.000 1.000 1.000 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000 score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
score WORD_INVIS 1.000 1.000 1.000 1.000 score WORD_INVIS 0.544 0.001 0.544 0.001
score WORD_INVIS_MANY 1.000 1.000 1.000 1.000 score WORD_INVIS_MANY 2.999 2.999 2.999 2.999
score XFER_LOTSA_MONEY 1.000 0.998 1.000 0.998 score XFER_LOTSA_MONEY 0.999 0.001 0.999 0.001
score XM_DIGITS_ONLY 1.930 0.858 1.930 0.858 score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
score XM_LIGHT_HEAVY 2.499 2.497 2.499 2.497 score XM_RANDOM 1.799 0.001 1.799 0.001
score XM_RANDOM 2.499 2.497 2.499 2.497 score XPRIO 1.104 0.001 1.104 0.001
score XM_RECPTID 2.999 2.996 2.999 2.996 score XPRIO_SHORT_SUBJ 1.170 2.499 1.170 2.499
score XPRIO 1.000 0.001 1.000 0.001 score XPRIO_URL_SHORTNER 0.999 0.999 0.999 0.999
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000 score YOU_INHERIT 1.606 2.237 1.606 2.237
score YOU_INHERIT 0.549 0.001 0.549 0.001
score ZW_OBFU_FREEM 1.999 1.997 1.999 1.997

BIN
sa-updates/languages
View File

Binary file not shown.