Modified: spamassassin/site/tests_3_1_x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_3_1_x.html?view=diff&rev=464539&r1=464538&r2=464539
==============================================================================
--- spamassassin/site/tests_3_1_x.html (original)
+++ spamassassin/site/tests_3_1_x.html Mon Oct 16 09:06:16 2006
@@ -5,7 +5,7 @@
SpamAssassin: Tests Performed: v3.1.x
</title>
<link rel="icon" href="images/favicon.png" type="image/png" />
- <meta name="generator" content="WebMake/2.4" />
+ <meta name="generator" content="WebMake/2.3" />
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<style type="text/css" media="all">
body {
@@ -58,10 +58,6 @@
}
</style>
<link rel="meta" title="DOAP" type="application/rdf+xml" href="doap.rdf" />
- <!--
- Link to WPoison to thwart spambots:
- <a href="http://SpamAssassin.taint.org/moreinfo.whtml">More Info</a>
- -->
</head>
<body>
@@ -181,8 +177,18110 @@
</th>
</tr>
</p>
-<!--etsafe-->
- <!--/etsafe-->
+ <br />
+ <!--etsafe-->
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Generic Test for Unsolicited Bulk Email
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ GTUBE
+ </font>
+ </td>
+ <td>
+ 1000.000
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Incorporates a tracking ID number
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ TRACKER_ID
+ </font>
+ </td>
+ <td>
+ 2.000 1.295 2.292 1.032
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Weird repeated double-quotation marks
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ WEIRD_QUOTING
+ </font>
+ </td>
+ <td>
+ 1.120 1.200 1.295 1.341
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Extra blank lines in base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_BLANKS
+ </font>
+ </td>
+ <td>
+ 0 0 0.184 0.224
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ base64 attachment does not have a file name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_NO_NAME
+ </font>
+ </td>
+ <td>
+ 0 0 0 0.224
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message text disguised using base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_TEXT
+ </font>
+ </td>
+ <td>
+ 2.048 1.522 2.749 1.885
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME section missing boundary
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_MISSING_BOUNDARY
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Missing blank line between MIME header and body
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MISSING_MIME_HB_SEP
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Multipart message mostly text/html MIME
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_MOSTLY
+ </font>
+ </td>
+ <td>
+ 1.703 0.699 2.309 1.102
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message only has text/html MIME parts
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_ONLY
+ </font>
+ </td>
+ <td>
+ 0.414 0.001 0.389 0.001
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Quoted-printable line longer than 76 chars
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_LONG_LINE
+ </font>
+ </td>
+ <td>
+ 0.159 0 0.234 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTML and text parts are different
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MPART_ALT_DIFF
+ </font>
+ </td>
+ <td>
+ 0.425 0.137 1.142 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTML and text parts are different
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MPART_ALT_DIFF_COUNT
+ </font>
+ </td>
+ <td>
+ 1.649 0 1.607 0.708
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME character set is an unknown ISO charset
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BAD_ISO_CHARSET
+ </font>
+ </td>
+ <td>
+ 3.360 3.360 3.885 4.185
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Character set indicates a foreign language
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CHARSET_FARAWAY
+ </font>
+ </td>
+ <td>
+ 3.200
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Body contains a ROT13-encoded email address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ EMAIL_ROT13
+ </font>
+ </td>
+ <td>
+ 1.600 1.680 1.850 2.000
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 70-80% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_70_80
+ </font>
+ </td>
+ <td>
+ 1.499 1.236 1.757 1.805
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 80-90% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_80_90
+ </font>
+ </td>
+ <td>
+ 0.272 0.107 0.810 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 90-100% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_90_100
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has many words used only once
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ UNIQUE_WORDS
+ </font>
+ </td>
+ <td>
+ 2.066 1.336 2.543 2.347
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body mentions many internet domains
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DOMAIN_RATIO
+ </font>
+ </td>
+ <td>
+ 0 0 0.184 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ IP to HTTPS link found in HTML
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTTPS_IP_MISMATCH
+ </font>
+ </td>
+ <td>
+ 1.920 1.920 2.220 2.400
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message looks to contain HTML-interrupted text
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ INTERRUPTUS
+ </font>
+ </td>
+ <td>
+ 1.154 0.533 1.106 0.182
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Passed through trusted hosts only via SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ALL_TRUSTED
+ </font>
+ </td>
+ <td>
+ -1.360 -1.440 -1.665 -1.800
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Informational: message was not relayed via SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NO_RELAYS
+ </font>
+ </td>
+ <td>
+ -0.001
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_RELAY
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: dialup sender did non-local SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_DUL
+ </font>
+ </td>
+ <td>
+ 0 1.713 0 1.946
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed spam source
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_SPAM
+ </font>
+ </td>
+ <td>
+ 0 1.905 0 2.775
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sent through multi-stage open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_MULTI
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open formmail
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_CGI
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open proxy
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_PROXY
+ </font>
+ </td>
+ <td>
+ 0 0.327 0 0.721
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open HTTP proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_HTTP
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SOCKS proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SOCKS
+ </font>
+ </td>
+ <td>
+ 0 1.823 0 2.159
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_MISC
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SMTP relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SMTP
+ </font>
+ </td>
+ <td>
+ 0 0 0 0.201
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is a abuseable web server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_WEB
+ </font>
+ </td>
+ <td>
+ 0 1.236 0 1.456
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender demands to never be tested
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_BLOCK
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is on a hijacked network
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_ZOMBIE
+ </font>
+ </td>
+ <td>
+ 0 0.240 0 0.258
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sent directly from dynamic IP address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_DUL
+ </font>
+ </td>
+ <td>
+ 0 1.988 0 2.046
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus SBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SBL
+ </font>
+ </td>
+ <td>
+ 0 2.712 0 3.160
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus XBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_XBL
+ </font>
+ </td>
+ <td>
+ 0 3.114 0 3.897
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in dsn.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_DSN
+ </font>
+ </td>
+ <td>
+ 0 2.872 0 2.597
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in postmaster.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_POST
+ </font>
+ </td>
+ <td>
+ 0 1.440 0 1.708
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in abuse.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_ABUSE
+ </font>
+ </td>
+ <td>
+ 0 0.479 0 0.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in whois.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_WHOIS
+ </font>
+ </td>
+ <td>
+ 0 0.879 0 1.447
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in bogusmx.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_BOGUSMX
+ </font>
+ </td>
+ <td>
+ 0 2.034 0 1.945
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on bogons IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_BOGONS
+ </font>
+ </td>
+ <td>
+ 0 1.811 0 2.430
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on hijacked IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_HIJACKED
+ </font>
+ </td>
+ <td>
+ 0 1.0 0 1.0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on invalid IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_INVALID
+ </font>
+ </td>
+ <td>
+ 0 2.151 0 2.234
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in list.dsbl.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_DSBL
+ </font>
+ </td>
+ <td>
+ 0 1.801 0 2.600
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: sender listed in dnsbl.ahbl.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_AHBL_RHSBL
+ </font>
+ </td>
+ <td>
+ 0 0.306 0 0.231
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in blackholes.securitysage.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_SECURITYSAGE
+ </font>
+ </td>
+ <td>
+ 0 2.001 0 1.513
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in bl.spamcop.net
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BL_SPAMCOP_NET
+ </font>
+ </td>
+ <td>
+ 0 1.332 0 1.558
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RBL, http://www.mail-abuse.org/rbl/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RBL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in DUL, http://www.mail-abuse.org/dul/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_DUL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RSS, http://www.mail-abuse.org/rss/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RSS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in NML, http://www.mail-abuse.org/nml/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_NML
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (trusted relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_TRUSTED
+ </font>
+ </td>
+ <td>
+ 0 -4.3 0 -4.3
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (other relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_OTHER
+ </font>
+ </td>
+ <td>
+ 0 -0.1 0 -0.1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ISIPP IADB lists as vouched-for sender
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_IADB_VOUCHED
+ </font>
+ </td>
+ <td>
+ 0 -1.825 0 -2.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Accredited Confirmed Opt-In or Better
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_ACCREDITED_COI
+ </font>
+ </td>
+ <td>
+ 0 -8.0 0 -8.0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Accredited Opt-In or Better
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_ACCREDITED_SOI
+ </font>
+ </td>
+ <td>
+ 0 -4.3 0 -4.3
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Checked
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_CHECKED
+ </font>
+ </td>
+ <td>
+ 0 -0.2 0 -0.2
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'cialis'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_C
+ </font>
+ </td>
+ <td>
+ 2.880 1.035 3.140 0.614
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'levitra'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_L
+ </font>
+ </td>
+ <td>
+ 1.840 1.840 2.118 2.300
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'phentermine'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_P
+ </font>
+ </td>
+ <td>
+ 0.542 0.563 0.834 0.699
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'soma'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_S
+ </font>
+ </td>
+ <td>
+ 1.729 0.378 2.498 1.581
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'valium'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_VA
+ </font>
+ </td>
+ <td>
+ 2.437 2.442 2.743 2.619
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'vicodin'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_VIC
+ </font>
+ </td>
+ <td>
+ 2.720 2.720 3.145 2.656
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'xanax'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_X
+ </font>
+ </td>
+ <td>
+ 2.262 2.334 2.447 2.401
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Talks about price per dose
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_DOSAGE
+ </font>
+ </td>
+ <td>
+ 2.337 1.592 2.745 2.242
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Mentions an E.D. drug
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_CAPS
+ </font>
+ </td>
+ <td>
+ 0.547 0.352 1.011 0.501
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Viagra and other drugs
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_COMBO
+ </font>
+ </td>
+ <td>
+ 1.280 1.280 1.353 1.375
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Talks about an E.D. drug using its chemical name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_SILD
+ </font>
+ </td>
+ <td>
+ 1.440 0 1.594 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Mentions Generic Viagra
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_GENERIC
+ </font>
+ </td>
+ <td>
+ 2.140 1.814 2.461 1.807
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Fast Viagra Delivery
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_ONLINE
+ </font>
+ </td>
+ <td>
+ 2.160 2.160 2.498 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Deep discount medications
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DEEP_DISC_MEDS
+ </font>
+ </td>
+ <td>
+ 1.440 1.132 1.665 1.177
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Online Pharmacy
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ONLINE_PHARMACY
+ </font>
+ </td>
+ <td>
+ 2.720 2.102 3.145 2.043
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ No prescription needed
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NO_PRESCRIPTION
+ </font>
+ </td>
+ <td>
+ 3.200 2.888 3.700 3.887
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Attempts to disguise the word 'viagra'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ VIA_GAP_GRA
+ </font>
+ </td>
+ <td>
+ 2.480 2.419 2.867 2.529
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Two or more drugs crammed together into one word
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUGS_SMEAR1
+ </font>
+ </td>
+ <td>
+ 1.310 1.372 1.576 1.337
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: msn.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MSN
+ </font>
+ </td>
+ <td>
+ 2.080 2.060 2.358 2.509
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: mail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_COM
+ </font>
+ </td>
+ <td>
+ 1.920 1.920 2.220 2.369
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: email.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EMAIL_COM
+ </font>
+ </td>
+ <td>
+ 1.440 1.440 1.665 1.335
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: eudoramail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EUDORAMAIL
+ </font>
+ </td>
+ <td>
+ 1.360 1.440 1.665 1.705
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: excite.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EXCITE
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: lycos.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_LYCOS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: yahoo.ca
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_YAHOO_CA
+ </font>
+ </td>
+ <td>
+ 1.186 1.353 1.466 1.599
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd with suspicious hostname (mail.com)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_COM_DOM
+ </font>
+ </td>
+ <td>
+ 2.160 2.160 2.498 2.700
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (IP addr 1)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_IPADDR
+ </font>
+ </td>
+ <td>
+ 3.360 3.360 3.885 4.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (DHCP)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_DHCP
+ </font>
+ </td>
+ <td>
+ 3.280 2.664 3.792 3.066
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (HCC)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_HCC
+ </font>
+ </td>
+ <td>
+ 3.280 3.280 3.792 4.100
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (ATTBI.com)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_ATTBI
+ </font>
+ </td>
+ <td>
+ 2.400 2.400 2.775 2.692
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (Rogers)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_ROGERS
+ </font>
+ </td>
+ <td>
+ 1.840 1.203 2.127 1.580
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (Adelphia)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_ADELPHIA
+ </font>
+ </td>
+ <td>
+ 1.680 1.680 1.942 1.787
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (T-Dialin)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_DIALIN
+ </font>
+ </td>
+ <td>
+ 2.080 2.080 2.405 2.600
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (Hex IP)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_HEXIP
+ </font>
+ </td>
+ <td>
+ 1.280 1.280 1.480 1.600
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (Split IP)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_SPLIT_IP
+ </font>
+ </td>
+ <td>
+ 2.880 2.880 3.330 2.191
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (YahooBB)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_YAHOOBB
+ </font>
+ </td>
+ <td>
+ 2.240 2.240 2.590 2.800
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
[... 15828 lines stripped ...]