You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2012/03/22 09:50:02 UTC
svn commit: r1303687 - /spamassassin/trunk/rules/active.list

Author: spamassassin_role
Date: Thu Mar 22 08:50:01 2012
New Revision: 1303687

URL: http://svn.apache.org/viewvc?rev=1303687&view=rev
Log:
promotions validated

Modified:
    spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/active.list?rev=1303687&r1=1303686&r2=1303687&view=diff
==============================================================================
--- spamassassin/trunk/rules/active.list (original)
+++ spamassassin/trunk/rules/active.list Thu Mar 22 08:50:01 2012
@@ -1,16 +1,82 @@
 # active ruleset list, automatically generated from http://ruleqa.spamassassin.org/
-# with results from: day 1: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1 zmi; day 2: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-guenther_fraud bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1; day 3: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-guenther_fraud bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1 zmi
+# with results from: day 1: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-guenther_fraud bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1 zmi; day 2: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1 zmi; day 3: axb-fraud-autofilter axb-fraud-feeds axb-generic axb-ham axb-ned-phish axb-ned-spam axb-phish bb-guenther_fraud bb-jhardin bb-jhardin_fraud bb-jm danmcdonald darxus grenier jarif llanga wt-en1 wt-en3 wt-jp1
+
+# good enough
+ACH_CANCELLED
+
+# tflags 
+ADVANCE_FEE_2_NEW_FORM
+
+# good enough
+ADVANCE_FEE_2_NEW_FRM_MNY
+
+# tflags 
+ADVANCE_FEE_2_NEW_MONEY
+
+# tflags 
+ADVANCE_FEE_3_NEW
+
+# tflags 
+ADVANCE_FEE_3_NEW_FORM
+
+# good enough
+ADVANCE_FEE_3_NEW_FRM_MNY
+
+# tflags 
+ADVANCE_FEE_3_NEW_MONEY
+
+# tflags 
+ADVANCE_FEE_4_NEW
+
+# good enough
+ADVANCE_FEE_4_NEW_FORM
+
+# good enough
+ADVANCE_FEE_4_NEW_FRM_MNY
+
+# good enough
+ADVANCE_FEE_4_NEW_MONEY
+
+# good enough
+ADVANCE_FEE_5_NEW
+
+# good enough
+ADVANCE_FEE_5_NEW_FORM
+
+# good enough
+ADVANCE_FEE_5_NEW_FRM_MNY
+
+# good enough
+ADVANCE_FEE_5_NEW_MONEY
 
 # tflags userconf
 ALL_TRUSTED
 
 # good enough
+ANY_PILL_PRICE
+
+# good enough
+AXB_BODYMAIL_SBL112884
+
+# good enough
+AXB_HELO_HOME_UN
+
+# good enough
 AXB_OBFU_MULE
 
 # good enough
+AXB_XMA_BASP
+
+# good enough
 AXB_XRCVD_EYOU_SEND
 
 # good enough
+AXB_X_AOL_SEZ_S
+
+# good enough
+AXB_X_RCV_WLOCAL
+
+# good enough
 BANKING_LAWS
 
 # good enough
@@ -49,12 +115,33 @@ CHARSET_FARAWAY
 # tflags userconf
 CHARSET_FARAWAY_HEADER
 
+# good enough
+CK_HELO_DYNAMIC_SPLIT_IP
+
+# good enough
+CN_B2B_SPAMMER
+
 # tflags 
 CORRUPT_FROM_LINE_IN_HDRS
 
 # good enough
+DATE_DOTS
+
+# good enough
+DATE_IN_FUTURE_96_Q
+
+# good enough
+DATE_IN_FUTURE_Q_PLUS
+
+# good enough
+DEAR_BENEFICIARY
+
+# good enough
 DEAR_WINNER
 
+# good enough
+DECEASED_NO_ML
+
 # tflags net
 DIGEST_MULTIPLE
 
@@ -115,6 +202,9 @@ DYN_RDNS_AND_INLINE_IMAGE
 # good enough
 DYN_RDNS_SHORT_HELO_HTML
 
+# good enough
+EMRCP
+
 # tflags userconf
 ENV_AND_HDR_SPF_MATCH
 
@@ -122,21 +212,33 @@ ENV_AND_HDR_SPF_MATCH
 FAKE_REPLY_C
 
 # good enough
+FB_ACHIEVE_BACH
+
+# good enough
 FB_CIALIS_LEO3
 
 # good enough
 FB_EXTRA_INCHES
 
 # good enough
+FB_GREAT_BEST_SEX
+
+# good enough
 FB_IMAGIRL
 
 # good enough
+FB_NOT_CREDIT
+
+# good enough
 FB_QUALITY_REPLICA
 
 # good enough
 FB_REPLICA_ROLEX
 
 # good enough
+FB_STAMINA_IN_BED
+
+# good enough
 FH_FAKE_RCVD_LINE
 
 # good enough
@@ -163,6 +265,9 @@ FH_HELO_EQ_D_D_D_D
 # good enough
 FH_HOST_EQ_DYNAMICIP
 
+# tflags 
+FILL_THIS_FORM
+
 # good enough
 FILL_THIS_FORM_FRAUD_PHISH
 
@@ -176,21 +281,99 @@ FILL_THIS_FORM_LONG
 FM_FRM_RN_L_BRACK
 
 # good enough
+FM_LOTTO_MONEY
+
+# good enough
 FM_LOTTO_YOU_WON
 
 # good enough
 FM_SEX_HELODDDD
 
+# good enough
+FORGED_RELAY_MUA_TO_MX
+
+# tflags 
+FORM_FRAUD_3
+
+# tflags 
+FORM_FRAUD_5
+
 # tflags userconf
 FRAGMENTED_MESSAGE
 
+# good enough
+FROM_12LTRDOM
+
 # tflags userconf
 FROM_DOMAIN_NOVOWEL
 
+# tflags 
+FROM_IN_TO_AND_SUBJ
+
 # tflags userconf
 FROM_LOCAL_NOVOWEL
 
 # good enough
+FROM_MISSPACED
+
+# tflags net
+FROM_MISSP_DKIM
+
+# good enough
+FROM_MISSP_DYNIP
+
+# good enough
+FROM_MISSP_EH_MATCH
+
+# good enough
+FROM_MISSP_FREEMAIL
+
+# good enough
+FROM_MISSP_MSFT
+
+# good enough
+FROM_MISSP_NO_TO
+
+# good enough
+FROM_MISSP_REPLYTO
+
+# tflags net
+FROM_MISSP_SPF_FAIL
+
+# good enough
+FROM_MISSP_TO_UNDISC
+
+# good enough
+FROM_MISSP_URI
+
+# good enough
+FROM_MISSP_USER
+
+# good enough
+FROM_WSP_LEAD
+
+# good enough
+FR_DOT_FEVER_5
+
+# good enough
+FR_TITLE_CONS_6
+
+# good enough
+FR_WATCHES_HTTP
+
+# good enough
+FSL_BOTSPAM_1
+
+# good enough
+FSL_CTYPE_WIN1251
+
+# good enough
+FSL_FREEMAIL_1
+
+# good enough
+FSL_FREEMAIL_2
+
+# good enough
 FSL_HELO_BARE_IP_1
 
 # good enough
@@ -200,12 +383,36 @@ FSL_HELO_DEVICE
 FSL_HELO_NON_FQDN_1
 
 # good enough
+FSL_MID_419
+
+# good enough
+FSL_MISSP_REPLYTO
+
+# good enough
+FSL_NEW_HELO_USER
+
+# good enough
+FSL_RCVD_USER
+
+# good enough
+FSL_UA
+
+# good enough
+FSL_XM_419
+
+# good enough
 FS_ABIGGER
 
 # good enough
 FS_PHARMASUB2
 
 # good enough
+FS_PORN_STAR
+
+# good enough
+FS_REFI
+
+# good enough
 FS_REPLICA
 
 # good enough
@@ -217,6 +424,9 @@ FS_START_LOSE
 # good enough
 FS_WEIGHT_LOSS
 
+# good enough
+GAPPY_HTML
+
 # tflags userconf
 GTUBE
 
@@ -244,6 +454,9 @@ HASHCASH_2SPEND
 # tflags userconf
 HASHCASH_HIGH
 
+# good enough
+HDRS_LCASE_1K
+
 # tflags userconf
 HEAD_LONG
 
@@ -251,52 +464,196 @@ HEAD_LONG
 HELO_LH_HOME
 
 # good enough
-HELO_OEM
+HELO_MISC_IP
 
 # good enough
-HK_LOTTO
+HELO_NO_DOMAIN
 
 # good enough
-HK_RANDOM_REPLYTO
-
-# tflags userconf
-HTML_CHARSET_FARAWAY
+HELO_OEM
 
 # good enough
-KB_DATE_CONTAINS_TAB
+HK_GOLDDUST
 
 # good enough
-KB_FAKED_THE_BAT
+HK_LOTTO
 
 # good enough
-KB_RATWARE_MSGID
+HK_LOTTO_NAME
 
 # good enough
-LOTTERY_1
+HK_LOTTO_SUBJECT
 
 # good enough
-LOTTERY_PH_004470
+HK_NAME_FM_DR
 
-# tflags userconf
-MIME_CHARSET_FARAWAY
+# good enough
+HK_NAME_FM_FROM
 
-# tflags userconf
-MISSING_HB_SEP
+# good enough
+HK_NAME_FM_MR_MRS
 
 # good enough
-MSOE_MID_WRONG_CASE
+HK_NAME_FREE
 
-# tflags net
-NO_DNS_FOR_FROM
+# good enough
+HK_NAME_FROM
 
-# tflags userconf
-NO_RECEIVED
+# good enough
+HK_NAME_MR_MRS
 
-# tflags userconf
-NO_RELAYS
+# good enough
+HK_PNIS
 
 # good enough
-NULL_IN_BODY
+HK_RANDOM_FROM
+
+# good enough
+HK_RANDOM_REPLYTO
+
+# good enough
+HK_SCAM_N1
+
+# good enough
+HK_SCAM_N12
+
+# good enough
+HK_SCAM_N13
+
+# good enough
+HK_SCAM_N15
+
+# good enough
+HK_SCAM_N2
+
+# good enough
+HK_SCAM_N3
+
+# good enough
+HK_SCAM_N4
+
+# good enough
+HK_SCAM_N8
+
+# good enough
+HK_SCAM_S15
+
+# good enough
+HK_SCAM_S25
+
+# good enough
+HK_SCAM_S7
+
+# good enough
+HK_SPAMMY_FILENAME
+
+# tflags userconf
+HTML_CHARSET_FARAWAY
+
+# good enough
+JM_FAKE_PSMTP_RCVD
+
+# good enough
+KB_DATE_CONTAINS_TAB
+
+# good enough
+KB_FAKED_THE_BAT
+
+# good enough
+KB_RATWARE_MSGID
+
+# good enough
+KHOP_JS_OBFUSCATION
+
+# tflags 
+LOTS_OF_MONEY
+
+# good enough
+LOTTERY_1
+
+# good enough
+LOTTERY_PH_004470
+
+# good enough
+LOTTO_AGENT
+
+# good enough
+LOTTO_AGENT_RPLY
+
+# good enough
+LOTTO_DEPT
+
+# good enough
+LOTTO_URI
+
+# good enough
+MANY_PILL_PRICE
+
+# tflags 
+MANY_SPAN_IN_TEXT
+
+# tflags userconf
+MIME_CHARSET_FARAWAY
+
+# tflags userconf
+MISSING_HB_SEP
+
+# good enough
+MONEY_ATM_CARD
+
+# good enough
+MONEY_FORM
+
+# tflags 
+MONEY_FRAUD_3
+
+# tflags 
+MONEY_FRAUD_5
+
+# tflags 
+MONEY_FRAUD_8
+
+# good enough
+MONEY_FROM_MISSP
+
+# good enough
+MONEY_LOTTERY
+
+# good enough
+MONEY_PERCENT
+
+# good enough
+MSOE_MID_WRONG_CASE
+
+# tflags net
+NO_DNS_FOR_FROM
+
+# tflags userconf
+NO_RECEIVED
+
+# tflags userconf
+NO_RELAYS
+
+# good enough
+NSL_RCVD_FROM_USER
+
+# good enough
+NSL_RCVD_HELO_USER
+
+# good enough
+NULL_IN_BODY
+
+# good enough
+OBFU_ATTACH_MISSP
+
+# good enough
+OBFU_HTML_ATTACH
+
+# tflags 
+OBFU_JVSCR_ESC
+
+# tflags 
+OBFU_TEXT_ATTACH
 
 # tflags net
 PYZOR_CHECK
@@ -526,6 +883,30 @@ RCVD_IN_SORBS_ZOMBIE
 # tflags net
 RCVD_IN_XBL
 
+# good enough
+RISK_FREE
+
+# good enough
+SCANNED_EXTERNAL
+
+# good enough
+SERGIO_SUBJECT_PORN009
+
+# good enough
+SERGIO_SUBJECT_VIAGRA01
+
+# good enough
+SHARE_50_50
+
+# good enough
+SINGLE_HEADER_1K
+
+# good enough
+SINGLE_HEADER_2K
+
+# good enough
+SINGLE_HEADER_3K
+
 # tflags net
 SPF_FAIL
 
@@ -553,6 +934,9 @@ SPF_SOFTFAIL
 # good enough
 STOCK_IMG_HDR_FROM
 
+# good enough
+STYLE_GIBBERISH
+
 # tflags userconf
 SUBJECT_IN_BLACKLIST
 
@@ -560,490 +944,100 @@ SUBJECT_IN_BLACKLIST
 SUBJECT_IN_WHITELIST
 
 # good enough
-TT_MSGID_TRUNC
+TAB_IN_FROM
 
 # good enough
-TVD_FINGER_02
+TINY_FLOAT
 
 # good enough
-TVD_INCREASE_SIZE
+TO_EQ_FM_DIRECT_MX
 
 # good enough
-TVD_PH_SUBJ_META1
+TO_EQ_FM_DOM_HTML_IMG
 
 # good enough
-TVD_RCVD_SINGLE
+TO_EQ_FM_DOM_HTML_ONLY
 
-# good enough
-TVD_VISIT_PHARMA
+# tflags net
+TO_EQ_FM_DOM_SPF_FAIL
 
 # good enough
-ACH_CANCELLED
-
-# tflags 
-ADVANCE_FEE_2_NEW_FORM
+TO_EQ_FM_HTML_DIRECT
 
 # good enough
-ADVANCE_FEE_2_NEW_FRM_MNY
-
-# tflags 
-ADVANCE_FEE_2_NEW_MONEY
-
-# tflags 
-ADVANCE_FEE_3_NEW
+TO_EQ_FM_HTML_ONLY
 
-# tflags 
-ADVANCE_FEE_3_NEW_FORM
+# tflags net
+TO_EQ_FM_SPF_FAIL
 
 # good enough
-ADVANCE_FEE_3_NEW_FRM_MNY
-
-# tflags 
-ADVANCE_FEE_3_NEW_MONEY
-
-# tflags 
-ADVANCE_FEE_4_NEW
+TO_IN_SUBJ
 
 # good enough
-ADVANCE_FEE_4_NEW_FORM
+TO_NO_BRKTS_DIRECT
 
 # good enough
-ADVANCE_FEE_4_NEW_FRM_MNY
+TO_NO_BRKTS_FROM_MSSP
 
 # good enough
-ADVANCE_FEE_4_NEW_MONEY
+TO_NO_BRKTS_MSFT
 
 # good enough
-ADVANCE_FEE_5_NEW
+TO_NO_BRKTS_PCNT
 
 # good enough
-ADVANCE_FEE_5_NEW_FORM
+TR_JS_FROMCHARCODE
 
 # good enough
-ADVANCE_FEE_5_NEW_FRM_MNY
+TT_MSGID_TRUNC
 
 # good enough
-ADVANCE_FEE_5_NEW_MONEY
+TVD_FINGER_02
 
 # good enough
-ANY_PILL_PRICE
+TVD_FROM_1
 
 # good enough
-AXB_BODYMAIL_SBL112884
+TVD_INCREASE_SIZE
 
 # good enough
-AXB_HELO_HOME_UN
+TVD_PH_1
 
 # good enough
-AXB_XMA_BASP
+TVD_PH_BODY_META
 
 # good enough
-AXB_X_AOL_SEZ_S
+TVD_PH_SUBJ_META1
 
 # good enough
-AXB_X_RCV_WLOCAL
+TVD_RCVD_SINGLE
 
 # good enough
-CK_HELO_DYNAMIC_SPLIT_IP
+TVD_SUBJ_NUM_OBFU_MINFP
 
 # good enough
-CN_B2B_SPAMMER
+TVD_VISIT_PHARMA
 
 # good enough
-DATE_DOTS
+FRT_PROFIT2
 
 # good enough
-DATE_IN_FUTURE_96_Q
+FS_LOW_INTMOR
 
 # good enough
-DATE_IN_FUTURE_Q_PLUS
+MONEY_FORM_SHORT
 
 # good enough
-DEAR_BENEFICIARY
+MSGID_WSP_TRAIL
 
 # good enough
-DECEASED_NO_ML
+SERGIO_SUBJECT_PORN005
 
 # good enough
-EMRCP
+SINGLE_HEADER_4K
 
-# good enough
-END_FUTURE_EMAILS
-
-# good enough
-FB_ACHIEVE_BACH
-
-# good enough
-FB_GREAT_BEST_SEX
-
-# good enough
-FB_NOT_CREDIT
-
-# good enough
-FB_STAMINA_IN_BED
-
-# tflags 
-FILL_THIS_FORM
-
-# good enough
-FM_LOTTO_MONEY
-
-# good enough
-FORGED_RELAY_MUA_TO_MX
-
-# tflags 
-FORM_FRAUD_3
-
-# tflags 
-FORM_FRAUD_5
-
-# good enough
-FROM_12LTRDOM
-
-# tflags 
-FROM_IN_TO_AND_SUBJ
-
-# good enough
-FROM_MISSPACED
-
-# tflags net
-FROM_MISSP_DKIM
-
-# good enough
-FROM_MISSP_DYNIP
-
-# good enough
-FROM_MISSP_EH_MATCH
-
-# good enough
-FROM_MISSP_FREEMAIL
-
-# good enough
-FROM_MISSP_MSFT
-
-# good enough
-FROM_MISSP_NO_TO
-
-# good enough
-FROM_MISSP_REPLYTO
-
-# tflags net
-FROM_MISSP_SPF_FAIL
-
-# good enough
-FROM_MISSP_TO_UNDISC
-
-# good enough
-FROM_MISSP_URI
-
-# good enough
-FROM_MISSP_USER
-
-# good enough
-FROM_WSP_LEAD
-
-# good enough
-FRT_PROFIT2
-
-# good enough
-FR_DOT_FEVER_5
-
-# good enough
-FR_TITLE_CONS_6
-
-# good enough
-FR_WATCHES_HTTP
-
-# good enough
-FSL_BOTSPAM_1
-
-# good enough
-FSL_CTYPE_WIN1251
-
-# good enough
-FSL_FREEMAIL_1
-
-# good enough
-FSL_FREEMAIL_2
-
-# good enough
-FSL_MID_419
-
-# good enough
-FSL_MISSP_REPLYTO
-
-# good enough
-FSL_NEW_HELO_USER
-
-# good enough
-FSL_RCVD_USER
-
-# good enough
-FSL_UA
-
-# good enough
-FSL_XM_419
-
-# good enough
-FS_PORN_STAR
-
-# good enough
-FS_REFI
-
-# good enough
-GAPPY_HTML
-
-# good enough
-HDRS_LCASE_1K
-
-# good enough
-HELO_MISC_IP
-
-# good enough
-HELO_NO_DOMAIN
-
-# good enough
-HK_GOLDDUST
-
-# good enough
-HK_LOTTO_NAME
-
-# good enough
-HK_LOTTO_SUBJECT
-
-# good enough
-HK_NAME_FM_DR
-
-# good enough
-HK_NAME_FM_FROM
-
-# good enough
-HK_NAME_FM_MR_MRS
-
-# good enough
-HK_NAME_FREE
-
-# good enough
-HK_NAME_FROM
-
-# good enough
-HK_NAME_MR_MRS
-
-# good enough
-HK_PNIS
-
-# good enough
-HK_RANDOM_FROM
-
-# good enough
-HK_SCAM_N1
-
-# good enough
-HK_SCAM_N12
-
-# good enough
-HK_SCAM_N13
-
-# good enough
-HK_SCAM_N15
-
-# good enough
-HK_SCAM_N2
-
-# good enough
-HK_SCAM_N3
-
-# good enough
-HK_SCAM_N4
-
-# good enough
-HK_SCAM_N8
-
-# good enough
-HK_SCAM_S1
-
-# good enough
-HK_SCAM_S15
-
-# good enough
-HK_SCAM_S25
-
-# good enough
-HK_SCAM_S7
-
-# good enough
-HK_SPAMMY_FILENAME
-
-# good enough
-JM_FAKE_PSMTP_RCVD
-
-# good enough
-KHOP_JS_OBFUSCATION
-
-# tflags 
-LOTS_OF_MONEY
-
-# good enough
-LOTTO_AGENT
-
-# good enough
-LOTTO_AGENT_RPLY
-
-# good enough
-LOTTO_DEPT
-
-# good enough
-LOTTO_URI
-
-# good enough
-MANY_PILL_PRICE
-
-# tflags 
-MANY_SPAN_IN_TEXT
-
-# good enough
-MONEY_ATM_CARD
-
-# good enough
-MONEY_FORM
-
-# tflags 
-MONEY_FRAUD_3
-
-# tflags 
-MONEY_FRAUD_5
-
-# tflags 
-MONEY_FRAUD_8
-
-# good enough
-MONEY_FROM_MISSP
-
-# good enough
-MONEY_LOTTERY
-
-# good enough
-MONEY_PERCENT
-
-# good enough
-MSGID_WSP_TRAIL
-
-# good enough
-NSL_RCVD_FROM_USER
-
-# good enough
-NSL_RCVD_HELO_USER
-
-# good enough
-OBFU_ATTACH_MISSP
-
-# tflags 
-OBFU_JVSCR_ESC
-
-# tflags 
-OBFU_TEXT_ATTACH
-
-# good enough
-RISK_FREE
-
-# good enough
-SCANNED_EXTERNAL
-
-# good enough
-SERGIO_SUBJECT_PORN005
-
-# good enough
-SERGIO_SUBJECT_PORN009
-
-# good enough
-SERGIO_SUBJECT_VIAGRA01
-
-# good enough
-SHARE_50_50
-
-# good enough
-SINGLE_HEADER_1K
-
-# good enough
-SINGLE_HEADER_2K
-
-# good enough
-SINGLE_HEADER_3K
-
-# good enough
-SINGLE_HEADER_4K
-
-# good enough
-STYLE_GIBBERISH
-
-# good enough
-TAB_IN_FROM
-
-# good enough
-TINY_FLOAT
-
-# good enough
-TO_EQ_FM_DIRECT_MX
-
-# good enough
-TO_EQ_FM_DOM_HTML_IMG
-
-# good enough
-TO_EQ_FM_DOM_HTML_ONLY
-
-# tflags net
-TO_EQ_FM_DOM_SPF_FAIL
-
-# good enough
-TO_EQ_FM_HTML_DIRECT
-
-# good enough
-TO_EQ_FM_HTML_ONLY
-
-# tflags net
-TO_EQ_FM_SPF_FAIL
-
-# good enough
-TO_IN_SUBJ
-
-# good enough
-TO_NO_BRKTS_DIRECT
-
-# good enough
-TO_NO_BRKTS_FROM_MSSP
-
-# good enough
-TO_NO_BRKTS_MSFT
-
-# good enough
-TO_NO_BRKTS_PCNT
-
-# good enough
-TR_JS_FROMCHARCODE
-
-# good enough
-TVD_FROM_1
-
-# good enough
-TVD_PH_1
-
-# good enough
-TVD_PH_BODY_META
-
-# good enough
-TVD_SUBJ_NUM_OBFU_MINFP
-
-# good enough
-URI_DEOBFU_INSTR
-
-# good enough
-URI_OBFU_TLD
-
-# good enough
-XM_PHPMAILER_FORGED
-
-# tflags userconf
-UNPARSEABLE_RELAY
+# tflags userconf
+UNPARSEABLE_RELAY
 
 # tflags net
 URIBL_AB_SURBL
@@ -1093,9 +1087,15 @@ URIBL_SC_SURBL
 # tflags net
 URIBL_WS_SURBL
 
+# good enough
+URI_DEOBFU_INSTR
+
 # tflags userconf
 URI_NOVOWEL
 
+# good enough
+URI_OBFU_TLD
+
 # tflags userconf
 USER_IN_ALL_SPAM_TO
 
@@ -1133,13 +1133,10 @@ USER_IN_WHITELIST_TO
 XMAILER_MIMEOLE_OL_1ECD5
 
 # good enough
-XMAILER_MIMEOLE_OL_22B61
-
-# good enough
 XMAILER_MIMEOLE_OL_8627E
 
 # good enough
-XMAILER_MIMEOLE_OL_9B90B
+XM_PHPMAILER_FORGED
 
 # tflags net
 __DKIMDOMAIN_IN_DWL_ANY