You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Rules Report Cron <no...@spamassassin.apache.org> on 2009/07/08 10:31:31 UTC

[auto] bad sandbox rules report

HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

Use of uninitialized value in concatenation (.) or string at masses/rule-qa/list-bad-rules line 181.
demoting : config: found endif without matching conditional at masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value in hash element at masses/rule-qa/list-bad-rules line 183.

rulesrc/sandbox/mmartinec/20_misc.cf (9 rules, 2 bad):

  LONGLINE:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.71
  MSGID_NOFQDN2:  bad, avg S/O=0.67 avg Spam%=24.73 avg Ham%=11.94

rulesrc/sandbox/maddoc/99_doc_test.cf (34 rules, 17 bad):

  FSL_BLOGSPOT_ABUSE:  bad, avg S/O=0.11 avg Spam%=0.11 avg Ham%=0.95
  FSL_FREEMAIL_1:  bad, avg S/O=0.43 avg Spam%=1.33 avg Ham%=1.77
  FSL_FREEMAIL_2:  bad, avg S/O=0.36 avg Spam%=0.61 avg Ham%=1.08
  FSL_GD2_URI:  no hits of target type
  FSL_HAS_TINYURL:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.12
  FSL_HELO_FAKE:  bad, avg S/O=0.67 avg Spam%=0.86 avg Ham%=0.42
  FSL_HELO_HOME:  bad, avg S/O=0.72 avg Spam%=0.49 avg Ham%=0.19
  FSL_HELO_NON_FQDN_2:  bad, avg S/O=0.47 avg Spam%=86.58 avg Ham%=99.09
  FSL_RCVD_USER:  bad, avg S/O=0.72 avg Spam%=4.34 avg Ham%=1.72
  FSL_SINGLE_URI:  bad, avg S/O=0.54 avg Spam%=34.81 avg Ham%=29.21
  FSL_SPAMWARE_STRING_1:  bad, avg S/O=0.69 avg Spam%=0.23 avg Ham%=0.10
  FSL_UA:  bad, avg S/O=0.56 avg Spam%=0.16 avg Ham%=0.13
  __ANY_HTTP_URI:  bad, avg S/O=0.53 avg Spam%=90.17 avg Ham%=79.96
      # used in: FSL_SINGLE_URI
  __FROM_FREEMAIL:  bad, avg S/O=0.13 avg Spam%=1.68 avg Ham%=10.97
      # used in: FSL_FREEMAIL_2
  __FSL_UA_2:  bad, avg S/O=0.56 avg Spam%=0.16 avg Ham%=0.13
      # used in: FSL_UA
  __HAS_REPLY_TO:  bad, avg S/O=0.20 avg Spam%=10.66 avg Ham%=43.22
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __REPLY_FREEMAIL:  bad, avg S/O=0.43 avg Spam%=1.33 avg Ham%=1.77
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.48 avg Spam%=1.74 avg Ham%=1.87
  __KAM_MX3:  bad, avg S/O=0.48 avg Spam%=1.73 avg Ham%=1.87
      # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (18 rules, 2 bad):

  KAM_REPLACE:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.21
  __KAM_REP2:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.21
      # used in: KAM_REPLACE

rulesrc/sandbox/kb/20_header.cf (5 rules, 1 bad):

  KB_DATE_CONTAINS_TAB:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/jm/80_sane.cf (48 rules, 4 bad):

  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.03
  SANE_d0d2b0f6373bf91253d66dd74c594b87:  no hits of target type
  SANE_e0b42866efae083b5d78a87e2e6710e9:  no hits of target type
  SANE_e761c503a58719e688c96a3ee254fbce:  no hits of target type

rulesrc/sandbox/jm/20_basic.cf (72 rules, 10 bad):

  CURR_PRICE:  no hits of target type
  IMG_ALT_HSPACE_CID_ALIGN:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  MIME_BOUND_EQ_REL:  no hits of target type
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.59
  PART_CID_STOCK:  bad, avg S/O=0.69 avg Spam%=0.40 avg Ham%=0.18
  PART_CID_STOCK_LESS:  bad, avg S/O=0.22 avg Spam%=0.03 avg Ham%=0.10
  STOX_BOUND_090909_B:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.23
  STOX_UA:  no hits of target type
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.16
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.83
      # used in: MSNBC_THREAD_INDEX

rulesrc/sandbox/jhardin/20_fillform.cf (8 rules, 5 bad):

  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.34 avg Spam%=0.13 avg Ham%=0.25
  FILL_THIS_FORM_LONG:  bad, avg S/O=0.74 avg Spam%=0.16 avg Ham%=0.06
      # used in: FILL_THIS_FORM_FRAUD_PHISH FILL_THIS_FORM_FRAUD_PHISH
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.63 avg Spam%=0.79 avg Ham%=0.46
  __FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.23 avg Spam%=8.59 avg Ham%=27.91
      # used in: FILL_THIS_FORM_FRAUD_PHISH
  __FILL_THIS_FORM_PARTIAL:  bad, avg S/O=0.37 avg Spam%=0.24 avg Ham%=0.40
      # used in: FILL_THIS_FORM_FRAUD_PHISH

rulesrc/sandbox/hege/20_FreeMail_mass.cf (15 rules, 11 bad):

  FREEMAIL_FORGED_REPLYTO:  bad, avg S/O=0.71 avg Spam%=0.05 avg Ham%=0.02
  FREEMAIL_FROM:  bad, avg S/O=0.18 avg Spam%=2.99 avg Ham%=13.71
      # used in: FREEMAIL_FORGED_REPLYTO
  FREEMAIL_FROM_END_DIGIT:  bad, avg S/O=0.45 avg Spam%=1.32 avg Ham%=1.60
  FREEMAIL_SUBJECT:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  __freemail_hdr_replyto:  bad, avg S/O=0.25 avg Spam%=0.40 avg Ham%=1.17
      # used in: FREEMAIL_FORGED_REPLYTO
  __freemail_safe:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=73.70
      # used in: FREEMAIL_FORGED_REPLYTO
  __freemail_safe_fwd:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=13.89
      # used in: FREEMAIL_FORGED_REPLYTO __freemail_safe
  __freemail_safe_ml1:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=68.58
      # used in: FREEMAIL_FORGED_REPLYTO __freemail_safe
  __freemail_safe_ml2:  no hits of target type
      # used in: FREEMAIL_FORGED_REPLYTO __freemail_safe
  __freemail_safe_ml3:  no hits of target type
      # used in: FREEMAIL_FORGED_REPLYTO __freemail_safe
  __freemail_safe_rls:  no hits of target type
      # used in: FREEMAIL_FORGED_REPLYTO __freemail_safe

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (55 rules, 47 bad):

  FAKE_REPLY_A1:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  FAKE_REPLY_B:  no hits of target type
  FAKE_REPLY_C:  no hits of target type
  FAKE_REPLY_SURE_A:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=33.43
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=38.00
  NICE_REPLY_A:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type
  __BOTH_INR_AND_REF:  bad, avg S/O=0.31 avg Spam%=2.51 avg Ham%=5.63
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A
  __BROKE_MUAS:  bad, avg S/O=0.35 avg Spam%=0.11 avg Ham%=0.21
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __INR_AND_NO_REF:  bad, avg S/O=0.19 avg Spam%=2.32 avg Ham%=9.79
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B
  __MISSING_REF:  bad, avg S/O=0.63 avg Spam%=99.98 avg Ham%=58.34
      # used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B
  __MISSING_REPLY:  bad, avg S/O=0.63 avg Spam%=95.95 avg Ham%=55.24
      # used in: FAKE_REPLY_A1 FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_C
  __MISSING_THREAD:  bad, avg S/O=0.52 avg Spam%=98.59 avg Ham%=91.13
      # used in: FAKE_REPLY_SURE_A
  __NO_INR_YES_REF:  bad, avg S/O=0.78 avg Spam%=26.97 avg Ham%=7.80
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __SUBJ_RE:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=48.00
      # used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B TEST_REPLY_C
  __UA_GNUS:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __UA_IMP:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.19
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_KMAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.13
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_KNODE:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __UA_MOZ5:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.16
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_MSENTOUR:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_MSOEMAC:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_MUTT:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __UA_PAN:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __XM_AOL:  bad, avg S/O=0.24 avg Spam%=0.04 avg Ham%=0.14
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_APPLEMAIL:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=4.87
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_COMMUNIG:  bad, avg S/O=0.63 avg Spam%=0.08 avg Ham%=0.05
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_ELM:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_LOTUSN:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.17
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_LOTUSN5:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_MAILSMITH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MIMETOOLS:  bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MOZ4:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __XM_MSCDO:  bad, avg S/O=0.10 avg Spam%=0.04 avg Ham%=0.33
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MSOUT:  bad, avg S/O=0.11 avg Spam%=0.22 avg Ham%=1.86
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_NETMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_NOVELL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.07
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_PEGASUS:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.04
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_QUALCOM:  bad, avg S/O=0.59 avg Spam%=1.90 avg Ham%=1.34
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_SQRLMAIL:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.09
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_SYLPHEED:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.08
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_WWWMAIL:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C __NO_INR_YES_REF
  __XM_XIMEVOL:  bad, avg S/O=0.36 avg Spam%=0.02 avg Ham%=0.04
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF

rulesrc/sandbox/felicity/70_phishing.cf (38 rules, 10 bad):

  TVD_PH_1:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_7:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.05
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.05
  TVD_PH_FR5:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.16
  TVD_PH_SUBJ_ACCOUNTS_PRE:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
  TVD_PH_SUBJ_META_ALL:  bad, avg S/O=0.72 avg Spam%=0.05 avg Ham%=0.02
  TVD_PH_SUBJ_UPDATE:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
      # used in: TVD_PH_SUBJ_META_ALL
  __PH_TVD_FROM2:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.33
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_02:  no hits of target type
      # used in: TVD_PH_BODY_META_ALL

rulesrc/sandbox/felicity/70_other.cf (61 rules, 32 bad):

  FUZZY_SPRM:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  HEADER_COUNT_SUBJECT:  no hits of target type
  NULL_IN_BODY:  no hits of target type
  RCVD_BAD_ID:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  TVD_ACT_193:  no hits of target type
  TVD_APP_LOAN:  no hits of target type
  TVD_DOLLARS_US:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.02
  TVD_FLOAT_GENERAL:  no hits of target type
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.03
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FUZZY_SYMBOL:  no hits of target type
  TVD_FW_GRAPHIC_ID1:  bad, avg S/O=0.52 avg Spam%=0.40 avg Ham%=0.36
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.11
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.11
  TVD_GET_STOCK:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  TVD_HEAD_KERNEL:  no hits of target type
  TVD_LONG_WORD5:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.15
  TVD_SECTION:  no hits of target type
  TVD_SINGLE_SPAN_DIV:  no hits of target type
  TVD_SPACED_SUBJECT_WORD5:  no hits of target type
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.15
  T_TVD_IP_HEX:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.02
  T_TVD_MIME_EPI:  bad, avg S/O=0.47 avg Spam%=0.30 avg Ham%=0.34
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.16
  T_TVD_SUBJ_FINGER_05:  no hits of target type
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.74 avg Spam%=1.61 avg Ham%=0.57
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.77 avg Spam%=1.91 avg Ham%=0.58
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.77 avg Spam%=1.91 avg Ham%=0.58
  __HEAD_X_KERNEL:  no hits of target type
      # used in: TVD_HEAD_KERNEL
  __TVD_INT_CID:  bad, avg S/O=0.73 avg Spam%=4.08 avg Ham%=1.53
      # used in: TVD_FW_GRAPHIC_ID3
  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.18
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2

rulesrc/sandbox/emailed/99_alex_dev.cf (3 rules, 1 bad):

  AXB_XMID_DIGDOTSHRT:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/emailed/00_FVGT_File001.cf (376 rules, 105 bad):

  FB_ALMOST_SEX:  bad, avg S/O=0.71 avg Spam%=0.01 avg Ham%=0.01
  FB_DDDD_BUCKS:  no hits of target type
  FB_DROWNING_DEBT:  no hits of target type
  FB_EXPLOSIVE:  no hits of target type
  FB_EXP_POWER_OF:  no hits of target type
  FB_FUNNY_WEIGHT:  no hits of target type
  FB_LIMITED_TIME:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  FB_SPACED_PHN_3B:  no hits of target type
  FB_SSEX:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  FB_TIRED_OF_YOUR:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
  FB_WORD1_END_DOLLAR:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.01
  FB_WORD2_END_DOLLAR:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.15
  FB_YOUR_MORTGAGE:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_REFI:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_REFILL:  no hits of target type
  FB_YOUR_WEIGHT:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FF_IHOPE_YOU_SINK:  bad, avg S/O=0.07 avg Spam%=0.04 avg Ham%=0.49
  FF_LEO_FLOAT_RIGHT:  no hits of target type
  FH_HAS_XID:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  FH_MSGID_01C67:  no hits of target type
  FH_RANDOM_SURE:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02
  FH_RCVD_FROM_2_WDS:  no hits of target type
  FH_XMAIL_HEX20:  no hits of target type
  FM_BIG_REASON:  bad, avg S/O=0.67 avg Spam%=0.04 avg Ham%=0.02
  FM_CLAIM_IPOD:  no hits of target type
  FM_FORGED_GMAIL:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=3.52
  FM_LOTTO_MONEY:  bad, avg S/O=0.70 avg Spam%=0.02 avg Ham%=0.01
  FM_MAKE_MONEY_HOME:  no hits of target type
  FM_MORTGAGE3PLUS:  no hits of target type
  FM_RATSIGN_1106:  no hits of target type
  FM_RE_HELLO_SPAM:  no hits of target type
  FM_WEIGHT_LOSS:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  FM_XMAIL_F_OUT:  no hits of target type
  FRT_ADULT2:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.01
  FRT_BELOW2:  bad, avg S/O=0.49 avg Spam%=0.02 avg Ham%=0.02
  FRT_CANSPAM:  no hits of target type
  FRT_CLICK:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.08
  FRT_CONTACT:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.87
  FRT_ERECTION:  bad, avg S/O=0.63 avg Spam%=0.01 avg Ham%=0.01
  FRT_FOLLOW1:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  FRT_FOLLOW2:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.01
  FRT_FRIEND:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  FRT_FUCK1:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
  FRT_HEALTH:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  FRT_LITTLE:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
  FRT_LOLITA1:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.03
  FRT_MEETING:  no hits of target type
  FRT_PHARMAC:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.04
  FRT_PRICE:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  FRT_PROFILE1:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.11
  FRT_PROFILE2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.14
  FRT_PROFIT1:  no hits of target type
  FRT_PROFIT2:  no hits of target type
  FRT_SLUT:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
  FRT_STOCK1:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  FRT_STOCK2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.26
  FRT_STRONG1:  no hits of target type
  FRT_VALIUM1:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
  FRT_VALIUM2:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02
  FRT_XANAX1:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FR_3TAG_3TAG:  no hits of target type
  FR_IMPORT_CSS:  no hits of target type
  FR_PORN_NOT_URL:  no hits of target type
  FR_P_END_P_MANY10:  no hits of target type
  FS_END_BILLS:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FS_SINGLE_LETTER_H:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  FU_16R:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  FU_RX_DIR:  no hits of target type
  FU_UKGEOCITIES:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  __ALL_RANDOM:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
      # used in: FH_RANDOM_SURE
  __APPROVALFVGT:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.72
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS
  __BIGDOLLARSFVGT:  bad, avg S/O=0.23 avg Spam%=0.22 avg Ham%=0.74
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS
  __DATE_700:  bad, avg S/O=0.33 avg Spam%=6.16 avg Ham%=12.65
      # used in: FM_RATSIGN_1106
  __FB_BEST:  bad, avg S/O=0.77 avg Spam%=0.91 avg Ham%=0.28
      # used in: FM_BIG_REASON
  __FB_BIG:  bad, avg S/O=0.49 avg Spam%=0.33 avg Ham%=0.35
      # used in: FM_BIG_REASON
  __FB_FIND_OUT:  bad, avg S/O=0.48 avg Spam%=0.58 avg Ham%=0.62
      # used in: FM_MAKE_MONEY_HOME
  __FB_FROM_YOUR:  bad, avg S/O=0.38 avg Spam%=0.73 avg Ham%=1.17
      # used in: FM_MAKE_MONEY_HOME
  __FB_GENERATE:  bad, avg S/O=0.19 avg Spam%=0.68 avg Ham%=2.91
      # used in: FM_MAKE_MONEY_HOME
  __FB_HOME_HOUSE:  bad, avg S/O=0.37 avg Spam%=8.03 avg Ham%=13.68
      # used in: FM_MAKE_MONEY_HOME
  __FB_LOTTERY:  bad, avg S/O=0.35 avg Spam%=0.11 avg Ham%=0.20
      # used in: FM_LOTTO_MONEY
  __FB_NATIONAL:  bad, avg S/O=0.27 avg Spam%=1.30 avg Ham%=3.54
      # used in: FM_LOTTO_MONEY
  __FB_REASON:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.06
      # used in: FM_BIG_REASON
  __FH_HAS_XMSMAIL:  bad, avg S/O=0.78 avg Spam%=32.85 avg Ham%=9.26
      # used in: FM_RE_HELLO_SPAM
  __FH_HAS_XPRIORITY:  bad, avg S/O=0.74 avg Spam%=38.68 avg Ham%=13.46
      # used in: FM_RE_HELLO_SPAM
  __FH_MSGID_01C7:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.05
      # used in: FM_RE_HELLO_SPAM
  __FM_LARGE_MONEY:  bad, avg S/O=0.10 avg Spam%=0.52 avg Ham%=4.78
      # used in: FM_LOTTO_MONEY
  __FM_MORTGAGE3PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS
  __FM_NAT_LOTTERY:  bad, avg S/O=0.46 avg Spam%=0.03 avg Ham%=0.03
      # used in: FM_LOTTO_MONEY
  __FROM_GMAIL:  bad, avg S/O=0.06 avg Spam%=0.32 avg Ham%=5.49
      # used in: FM_FORGED_GMAIL
  __FS_IPODXBOX:  bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.06
      # used in: FM_CLAIM_IPOD
  __FS_MP3PLAY:  no hits of target type
      # used in: FM_CLAIM_IPOD
  __FS_SUBJ_RE:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=40.76
      # used in: FM_RE_HELLO_SPAM
  __F_LARGE_MONEY:  bad, avg S/O=0.10 avg Spam%=0.35 avg Ham%=3.27
      # used in: FM_LOTTO_MONEY __FM_LARGE_MONEY
  __F_LARGE_MONEY_2:  bad, avg S/O=0.10 avg Spam%=0.18 avg Ham%=1.74
      # used in: FM_LOTTO_MONEY __FM_LARGE_MONEY
  __HOMELOANFVGT:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __LOANURIFVGT:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.02
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __MSGID_GMAIL:  bad, avg S/O=0.02 avg Spam%=0.14 avg Ham%=8.58
      # used in: FM_FORGED_GMAIL
  __MSGID_VGA:  no hits of target type
      # used in: FM_RATSIGN_1106
  __PREAPPROVEDFVGT:  no hits of target type
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __RAW_RANDOM:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.02
      # used in: FH_RANDOM_SURE
  __SEEN_ON_ABC:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.18
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CBS:  bad, avg S/O=0.51 avg Spam%=0.30 avg Ham%=0.29
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CNN:  bad, avg S/O=0.51 avg Spam%=0.11 avg Ham%=0.11
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_NBC:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.16
      # used in: FM_WEIGHT_LOSS
  __YOUR_CREDITFVGT:  bad, avg S/O=0.52 avg Spam%=0.44 avg Ham%=0.41
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS

rulesrc/sandbox/duncf/20_header.cf (3 rules, 2 bad):

  APOSTROPHE_TOCC:  no hits of target type
  STUDDLYCAPS:  bad, avg S/O=0.69 avg Spam%=0.42 avg Ham%=0.19

rulesrc/sandbox/dos/70_other.cf (56 rules, 12 bad):

  DOS_FAKE_SQUIRREL:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.07
  DOS_OUTLOOK_TO_MX:  bad, avg S/O=0.54 avg Spam%=0.08 avg Ham%=0.07
  DOS_OUTLOOK_TO_MX_IMAGE:  no hits of target type
      # used in: DOS_OUTLOOK_TO_MX
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.61 avg Spam%=2.65 avg Ham%=1.72
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=68.58
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=75.14
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_MAILING_LIST:  no hits of target type
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_MAILER_SM:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.09
      # used in: DOS_FAKE_SQUIRREL
  __DOS_RELAYED_EXT:  bad, avg S/O=0.13 avg Spam%=14.30 avg Ham%=95.72
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_RELAY_SM:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.32
      # used in: DOS_FAKE_SQUIRREL
  __DOS_SM_MID:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.28
      # used in: DOS_FAKE_SQUIRREL
  __DOS_UA_SM:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.30
      # used in: DOS_FAKE_SQUIRREL

rulesrc/sandbox/dos/20_uri.cf (1 rules, 1 bad):

  GEO_QUERY_STRING:  no hits of target type

rules/72_active.cf (11 rules, 7 bad):

  TVD_FW_GRAPHIC_NAME_LONG:  bad, avg S/O=0.32 avg Spam%=0.02 avg Ham%=0.05
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.12
  __ANY_IMAGE_ATTACH:  bad, avg S/O=0.75 avg Spam%=4.82 avg Ham%=1.65
      # used in: PART_CID_STOCK PART_CID_STOCK_LESS DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __PART_CID_STOCK_LESS:  bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.11
      # used in: PART_CID_STOCK_LESS
  __PART_STOCK_CD_F:  bad, avg S/O=0.66 avg Spam%=4.74 avg Ham%=2.39
      # used in: PART_CID_STOCK
  __PART_STOCK_CID:  bad, avg S/O=0.55 avg Spam%=0.40 avg Ham%=0.33
      # used in: PART_CID_STOCK
  __PART_STOCK_CL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.17
      # used in: PART_CID_STOCK

rules/25_replace.cf (32 rules, 16 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_AMBIEN:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.03
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.40 avg Spam%=0.06 avg Ham%=0.09
  FUZZY_ERECT:  bad, avg S/O=0.63 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_MORTGAGE:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_ROLEX:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.02
  FUZZY_VPILL:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  SUBJECT_FUZZY_CHEAP:  no hits at all

rules/25_dkim.cf (17 rules, 3 bad):

  NML_ADSP_CUSTOM_HIGH:  no hits at all
  NML_ADSP_CUSTOM_LOW:  no hits at all
  NML_ADSP_CUSTOM_MED:  no hits at all

rules/20_vbounce.cf (160 rules, 150 bad):

  ANY_BOUNCE_MESSAGE:  no hits of target type
  BOUNCE_MESSAGE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE
  CHALLENGE_RESPONSE:  no hits at all
  VBOUNCE_MESSAGE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE
  __AUTO_GEN_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_4:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_AG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_BBTL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_CM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_PREC:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_XBT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_XXSP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ADDR_ERR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_GENERATED:  bad, avg S/O=0.14 avg Spam%=0.02 avg Ham%=0.14
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_REPLY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPOND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPONSE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_COULD_NOT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_CTYPE:  bad, avg S/O=0.19 avg Spam%=0.03 avg Ham%=0.14
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DATA_FORMAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DEL_FAIL:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ESMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_FROM_DAEMON:  bad, avg S/O=0.47 avg Spam%=0.15 avg Ham%=0.17
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAILDELFAIL:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.06
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAIL_DEL_FAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MSGDELFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NEVER_SEE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NONWORKING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NOTDEL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_RESEND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_VAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_READ_NOTIFICATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RETURNED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RET_MAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_ERRMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_MD:  bad, avg S/O=0.57 avg Spam%=0.15 avg Ham%=0.11
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_NULL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.05
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_STAT_FAIL:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_SYMANTEC:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.03
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_UNDELIVERABLE_ML:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.02
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_X_ERR_STAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_Y_AUTOGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_HEADER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VANQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __HAVE_BOUNCE_RELAYS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY2:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_SUBJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MY_SERVERS_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE CHALLENGE_RESPONSE VBOUNCE_MESSAGE
  __NONBOUNCE_READ_RECEIPT_CTYPE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __VBOUNCE_ALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ANTIGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATTACHMENT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AVREPORT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CISCO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DETECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DUTCH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMANAGER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMVD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EXIM:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FROMPT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GSHIELD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GUIN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INFLEX:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_JMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_LUTHER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAJORDOMO_HELP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MELDING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MMS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MSGLABS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_RAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_UNDELIV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_WARNING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __X_CRON_ENV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED

rules/20_uri_tests.cf (18 rules, 16 bad):

  HTTP_77:  no hits at all
  HTTP_ESCAPED_HOST:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  HTTP_EXCESSIVE_ESCAPES:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  IP_LINK_PLUS:  no hits at all
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.41 avg Spam%=0.34 avg Ham%=0.50
  NUMERIC_HTTP_ADDR:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.00
  SPOOF_COM2COM:  bad, avg S/O=0.45 avg Spam%=0.01 avg Ham%=0.01
  SPOOF_COM2OTH:  bad, avg S/O=0.50 avg Spam%=0.02 avg Ham%=0.02
  SPOOF_NET2COM:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  URI_HEX:  bad, avg S/O=0.08 avg Spam%=0.04 avg Ham%=0.49
  URI_NO_WWW_BIZ_CGI:  no hits at all
  URI_NO_WWW_INFO_CGI:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.01
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.13
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (92 rules, 26 bad):

  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_OUTLOOK_HTML:  bad, avg S/O=0.74 avg Spam%=0.05 avg Ham%=0.02
  FORGED_THEBAT_HTML:  no hits at all
  RATWARE_GECKO_BUILD:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  __ANY_OUTLOOK_MUA:  bad, avg S/O=0.70 avg Spam%=28.82 avg Ham%=12.29
      # used in: FORGED_OUTLOOK_HTML DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __CTYPE_CHARSET_QUOTED:  bad, avg S/O=0.59 avg Spam%=45.91 avg Ham%=32.36
      # used in: FORGED_MUA_THEBAT_CS
  __GATED_THROUGH_RCVD_REMOVER:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __HOTMAIL_BAYDAV_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IMS_MSGID:  bad, avg S/O=0.07 avg Spam%=0.23 avg Ham%=3.04
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IPLANET_MESSAGING_SERVER:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.04
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __MAILMAN_21:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=17.91
      # used in: FORGED_MUA_THEBAT_CS
  __RATWARE_0_TZ_DATE:  bad, avg S/O=0.55 avg Spam%=5.36 avg Ham%=4.44
      # used in: RATWARE_NAME_ID RATWARE_ZERO_TZ
  __RATWARE_NAME_ID:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.48
      # used in: RATWARE_NAME_ID
  __SYMPATICO_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __THEBAT_MUA_V1:  bad, avg S/O=0.44 avg Spam%=0.01 avg Ham%=0.01
      # used in: FORGED_THEBAT_HTML
  __UNUSABLE_MSGID:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=52.37
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID
  __YAHOO_BULK:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
      # used in: FORGED_OUTLOOK_HTML

rules/20_porn.cf (4 rules, 3 bad):

  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (48 rules, 26 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.03
  BAD_CREDIT:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.03
  BANG_GUAR:  bad, avg S/O=0.77 avg Spam%=0.04 avg Ham%=0.01
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
  DEAR_SOMETHING:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.12
  EM_ROLEX:  no hits at all
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  no hits at all
  INVESTMENT_ADVICE:  no hits at all
  JOIN_MILLIONS:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.01
  LOW_PRICE:  bad, avg S/O=0.49 avg Spam%=0.16 avg Ham%=0.17
  MARKETING_PARTNERS:  no hits of target type
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits at all
  ONE_TIME:  no hits at all
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits of target type
  URG_BIZ:  bad, avg S/O=0.49 avg Spam%=0.02 avg Ham%=0.02
  US_DOLLARS_3:  bad, avg S/O=0.45 avg Spam%=0.04 avg Ham%=0.05
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 6 bad):

  NO_HEADERS_MESSAGE:  no hits at all
  PERCENT_RANDOM:  no hits at all
  UPPERCASE_75_100:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.02
  __PC_RND_HEADER:  no hits at all
      # used in: PERCENT_RANDOM
  __PC_RND_RAWBODY:  no hits at all
      # used in: PERCENT_RANDOM
  __UPPERCASE_75_100:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.02
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 12 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.77 avg Spam%=0.06 avg Ham%=0.02
  DC_IMAGE_SPAM_HTML:  bad, avg S/O=0.70 avg Spam%=0.06 avg Ham%=0.02
  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.68 avg Spam%=0.06 avg Ham%=0.03
  DC_PNG_UNO_LARGO:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_IMG_TEXT_RATIO:  bad, avg S/O=0.79 avg Spam%=2.11 avg Ham%=0.58
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  no hits at all
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.51 avg Spam%=0.06 avg Ham%=0.06
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __GIF_ATTACH_1:  bad, avg S/O=0.57 avg Spam%=0.58 avg Ham%=0.44
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_ATTACH_2P:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.40
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO __DC_PNG_MULTI_LARGO
  __PNG_ATTACH_2P:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 29 bad):

  HIDE_WIN_STATUS:  no hits of target type
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.22 avg Spam%=0.02 avg Ham%=0.06
  HTML_COMMENT_SHORT:  no hits at all
  HTML_EMBEDS:  no hits of target type
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.54 avg Spam%=0.28 avg Ham%=0.24
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.12 avg Spam%=0.06 avg Ham%=0.47
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.02
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.35 avg Spam%=0.60 avg Ham%=1.09
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.76 avg Spam%=1.03 avg Ham%=0.32
  HTML_NONELEMENT_30_40:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  HTML_NONELEMENT_40_50:  no hits of target type
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_10_20:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.80 avg Spam%=1.32 avg Ham%=0.34
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits of target type
  __JS_DOCWRITE:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.32
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.04
      # used in: OBFUSCATING_COMMENT

rules/20_head_tests.cf (153 rules, 56 bad):

  CONFIRMED_FORGED:  no hits at all
  DATE_IN_PAST_03_06:  bad, avg S/O=0.74 avg Spam%=0.54 avg Ham%=0.19
  DATE_IN_PAST_24_48:  bad, avg S/O=0.79 avg Spam%=0.25 avg Ham%=0.07
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  EXTRA_MPART_TYPE:  bad, avg S/O=0.57 avg Spam%=0.88 avg Ham%=0.65
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_TELESP_RCVD:  no hits at all
  FROM_EXCESS_BASE64:  bad, avg S/O=0.80 avg Spam%=0.56 avg Ham%=0.14
  GAPPY_SUBJECT:  bad, avg S/O=0.65 avg Spam%=0.03 avg Ham%=0.02
  INVALID_DATE_TZ_ABSURD:  no hits of target type
  INVALID_TZ_EST:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.01
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  MISSING_HEADERS:  bad, avg S/O=0.29 avg Spam%=0.25 avg Ham%=0.61
  MISSING_MIMEOLE:  bad, avg S/O=0.53 avg Spam%=0.23 avg Ham%=0.21
  MISSING_SUBJECT:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.03
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.15 avg Spam%=0.77 avg Ham%=4.52
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  NO_RDNS_DOTCOM_HELO:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  PLING_QUERY:  bad, avg S/O=0.77 avg Spam%=0.33 avg Ham%=0.10
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.01
  SUBJ_ALL_CAPS:  bad, avg S/O=0.78 avg Spam%=1.64 avg Ham%=0.46
  SUBJ_AS_SEEN:  no hits at all
  SUBJ_BUY:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_DOLLARS:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.12
  SUSPICIOUS_RECIPS:  bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
  UNRESOLVED_TEMPLATE:  bad, avg S/O=0.74 avg Spam%=0.02 avg Ham%=0.01
  WITH_LC_SMTP:  no hits at all
  X_PRIORITY_CC:  no hits at all
  __DOUBLE_IP_LOOSE:  bad, avg S/O=0.69 avg Spam%=0.02 avg Ham%=0.01
      # used in: RCVD_DOUBLE_IP_LOOSE
  __DOUBLE_IP_SPAM_1:  no hits at all
      # used in: RCVD_DOUBLE_IP_LOOSE
  __FORGED_AOL_RCVD:  no hits at all
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_HOTMAIL_RCVD:  bad, avg S/O=0.74 avg Spam%=0.02 avg Ham%=0.01
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_RCVD_TRAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.38
      # used in: CONFIRMED_FORGED
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.15 avg Spam%=0.27 avg Ham%=1.59
      # used in: MSGID_FROM_MTA_HEADER
  __FROM_NEEDS_MIME:  bad, avg S/O=0.74 avg Spam%=2.48 avg Ham%=0.86
      # used in: FROM_EXCESS_BASE64
  __HAS_MIMEOLE:  bad, avg S/O=0.69 avg Spam%=34.12 avg Ham%=15.57
      # used in: MISSING_MIMEOLE
  __HAS_MSMAIL_PRI:  bad, avg S/O=0.78 avg Spam%=32.85 avg Ham%=9.26
      # used in: MISSING_MIMEOLE
  __HAS_SQUIRRELMAIL_IN_MAILER:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.09
      # used in: MISSING_MIMEOLE
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=99.97
      # used in: MISSING_SUBJECT
  __JAPANESE_UCE_BODY:  no hits at all
      # used in: JAPANESE_UCE_BODY
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=55.45
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=68.58
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=70.96
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
  __ML4:  no hits of target type
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=19.88
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.71
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.13 avg Spam%=0.78 avg Ham%=5.26
      # used in: MSGID_FROM_MTA_HEADER
  __MY_RCVD_EXCITE:  no hits at all
      # used in: FORGED_MSGID_EXCITE
  __VIA_ML:  bad, avg S/O=0.00 avg Spam%=0.06 avg Ham%=71.82
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED

rules/20_fake_helo_tests.cf (16 rules, 3 bad):

  HELO_DYNAMIC_ROGERS:  no hits at all
  HELO_STATIC_HOST:  no hits at all
  __HELO_STATIC_ROGERS:  no hits at all
      # used in: HELO_STATIC_HOST

rules/20_drugs.cf (86 rules, 5 bad):

  DRUGS_ANXIETY_OBFU:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=100.00
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (29 rules, 14 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_BLANKS:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.07
  MIME_BASE64_TEXT:  bad, avg S/O=0.72 avg Spam%=0.07 avg Ham%=0.03
  MIME_HTML_MOSTLY:  bad, avg S/O=0.58 avg Spam%=0.33 avg Ham%=0.24
  MIME_HTML_ONLY_MULTI:  no hits at all
  MPART_ALT_DIFF:  bad, avg S/O=0.48 avg Spam%=0.47 avg Ham%=0.51
  MULTIPART_ALT_NON_TEXT:  no hits at all
  TRACKER_ID:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  TVD_SPACE_RATIO:  bad, avg S/O=0.69 avg Spam%=0.63 avg Ham%=0.27
  URI_TRUNCATED:  no hits at all
  WEIRD_QUOTING:  bad, avg S/O=0.44 avg Spam%=0.02 avg Ham%=0.02
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.70 avg Spam%=30.21 avg Ham%=12.73
      # used in: MIME_HTML_ONLY_MULTI