Modified: spamassassin/site/tests_2_6x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_2_6x.html?view=diff&rev=464539&r1=464538&r2=464539
==============================================================================
--- spamassassin/site/tests_2_6x.html (original)
+++ spamassassin/site/tests_2_6x.html Mon Oct 16 09:06:16 2006
@@ -5,7 +5,7 @@
SpamAssassin: Tests Performed: v2.6x
</title>
<link rel="icon" href="images/favicon.png" type="image/png" />
- <meta name="generator" content="WebMake/2.4" />
+ <meta name="generator" content="WebMake/2.3" />
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<style type="text/css" media="all">
body {
@@ -58,10 +58,6 @@
}
</style>
<link rel="meta" title="DOAP" type="application/rdf+xml" href="doap.rdf" />
- <!--
- Link to WPoison to thwart spambots:
- <a href="http://SpamAssassin.taint.org/moreinfo.whtml">More Info</a>
- -->
</head>
<body>
@@ -181,8 +177,21560 @@
</th>
</tr>
</p>
-<!--etsafe-->
- <!--/etsafe-->
+ <br />
+ <!--etsafe-->
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Generic Test for Unsolicited Bulk Email
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ GTUBE
+ </font>
+ </td>
+ <td>
+ 1000
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>full</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Listed in Razor2 (http://razor.sf.net/)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RAZOR2_CHECK
+ </font>
+ </td>
+ <td>
+ 0 0.899 0 1.047
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Razor2 gives confidence between 11 and 50
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RAZOR2_CF_RANGE_11_50
+ </font>
+ </td>
+ <td>
+ 0 0.559 0 0.876
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Razor2 gives confidence between 51 and 100
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RAZOR2_CF_RANGE_51_100
+ </font>
+ </td>
+ <td>
+ 0 1.552 0 1.101
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>full</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DCC_CHECK
+ </font>
+ </td>
+ <td>
+ 0 1.806 0 2.907
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>full</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Listed in Pyzor (http://pyzor.sf.net/)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ PYZOR_CHECK
+ </font>
+ </td>
+ <td>
+ 0 0.322 0 3.511
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ List removal information
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ REMOVE_IN_QUOTES
+ </font>
+ </td>
+ <td>
+ 0.001 0.187 0.001 0.001
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Click-to-remove with mailto: found
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CLICK_TO_REMOVE_2
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Contains an ASCII-formatted form
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ASCII_FORM_ENTRY
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Incorporates a tracking ID number
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ TRACKER_ID
+ </font>
+ </td>
+ <td>
+ 2.528 3.527 3.261 3.784
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RAND found, spammer tried to use a random-ID
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MARKUP_RAND
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 0 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SSPL found, spammer tried to use a random-ID
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MARKUP_SSPL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Contains a large block of hexadecimal code
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ LARGE_HEX
+ </font>
+ </td>
+ <td>
+ 0.633 1.595 1.193 1.160
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ A WHOLE LINE OF YELLING DETECTED
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ LINES_OF_YELLING
+ </font>
+ </td>
+ <td>
+ 0 0.011 0 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ 2 WHOLE LINES OF YELLING DETECTED
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ LINES_OF_YELLING_2
+ </font>
+ </td>
+ <td>
+ 0 0.105 0 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ 3 WHOLE LINES OF YELLING DETECTED
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ LINES_OF_YELLING_3
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Weird repeated double-quotation marks
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ WEIRD_QUOTING
+ </font>
+ </td>
+ <td>
+ 1.373 0.471 0.061 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Extra blank lines in base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_BLANKS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ base64 attachment uses illegal characters
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_ILLEGAL
+ </font>
+ </td>
+ <td>
+ 0.432 1.715 0 1.581
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Latin alphabet text using base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_LATIN
+ </font>
+ </td>
+ <td>
+ 1.101 1.101 0.500 0.500
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ base64 attachment does not have a file name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_NO_NAME
+ </font>
+ </td>
+ <td>
+ 0.189 0 0 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message text disguised using base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_TEXT
+ </font>
+ </td>
+ <td>
+ 1.101 1.101 1.001 1.008
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message text in HTML without charset
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_NO_CHARSET
+ </font>
+ </td>
+ <td>
+ 1.064 0.716 1.030 0.561
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME section missing boundary
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_MISSING_BOUNDARY
+ </font>
+ </td>
+ <td>
+ 1.179 0.803 0 1.838
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Multipart message mostly text/html MIME
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_MOSTLY
+ </font>
+ </td>
+ <td>
+ 1.587 1.162 1.180 1.238
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message only has text/html MIME parts
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_ONLY
+ </font>
+ </td>
+ <td>
+ 0.666 0.100 0.248 0.320
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Deficient quoted-printable encoding in body
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_DEFICIENT
+ </font>
+ </td>
+ <td>
+ 1.048 1.797 2.097 1.912
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Excessive quoted-printable encoding in body
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_EXCESSIVE
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Quoted-printable line longer than 76 chars
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_LONG_LINE
+ </font>
+ </td>
+ <td>
+ 0.242 0 0 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Quoted-printable inline text with no charset
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_NO_CHARSET
+ </font>
+ </td>
+ <td>
+ 0.931 0.714 0.047 0.197
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message includes Microsoft executable program
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MICROSOFT_EXECUTABLE
+ </font>
+ </td>
+ <td>
+ 0.100
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME filename does not match content
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_SUSPECT_NAME
+ </font>
+ </td>
+ <td>
+ 0.100
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Character set indicates a foreign language
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CHARSET_FARAWAY
+ </font>
+ </td>
+ <td>
+ 3.200
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message written in an undesired language
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ UNWANTED_LANGUAGE_BODY
+ </font>
+ </td>
+ <td>
+ 2.800
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Body includes 8 consecutive 8-bit characters
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BODY_8BITS
+ </font>
+ </td>
+ <td>
+ 1.500
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Contains a hashbuster in Send-Safe format
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RATWARE_HASH_DASH
+ </font>
+ </td>
+ <td>
+ 1.101 4.300 1.920 4.100
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Body contains a ROT13-encoded email address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ EMAIL_ROT13
+ </font>
+ </td>
+ <td>
+ 4.400 4.300 2.590 4.100
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 70-80% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_70_80
+ </font>
+ </td>
+ <td>
+ 1.999 0.867 1.424 2.126
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 80-90% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_80_90
+ </font>
+ </td>
+ <td>
+ 1.643 1.489 2.596 2.599
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 90-100% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_90_100
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Has Habeas warrant mark (http://www.habeas.com/)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_SWE
+ </font>
+ </td>
+ <td>
+ -8.0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_RELAY
+ </font>
+ </td>
+ <td>
+ 0 1.133 0 0.824
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: dialup sender did non-local SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_DUL
+ </font>
+ </td>
+ <td>
+ 0 1.580 0 1.708
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed spam source
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_SPAM
+ </font>
+ </td>
+ <td>
+ 0 0.899 0 0.951
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sent through multi-stage open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_MULTI
+ </font>
+ </td>
+ <td>
+ 0 0.101 0 0.101
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open formmail
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_CGI
+ </font>
+ </td>
+ <td>
+ 0 0.1 0 0.100
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open proxy
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_PROXY
+ </font>
+ </td>
+ <td>
+ 0 1.186 0 2.342
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open HTTP proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_HTTP
+ </font>
+ </td>
+ <td>
+ 0 0.000 0 1.203
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_MISC
+ </font>
+ </td>
+ <td>
+ 0 0.118 0 0.004
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SMTP relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SMTP
+ </font>
+ </td>
+ <td>
+ 0 1.630 0 0.382
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SOCKS proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SOCKS
+ </font>
+ </td>
+ <td>
+ 0 1.603 0 0.927
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is a abuseable web server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_WEB
+ </font>
+ </td>
+ <td>
+ 0 0.000 0 0.353
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender demands to never be tested
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_BLOCK
+ </font>
+ </td>
+ <td>
+ 0 0.001 0 0.001
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is on a hijacked network
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_ZOMBIE
+ </font>
+ </td>
+ <td>
+ 0 0.948 0 0.918
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sent directly from dynamic IP address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_DUL
+ </font>
+ </td>
+ <td>
+ 0 0.067 0 0.092
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus SBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SBL
+ </font>
+ </td>
+ <td>
+ 0 0.814 0 0.875
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus XBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_XBL
+ </font>
+ </td>
+ <td>
+ 0 2.333 0 4.923
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in list.dsbl.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_DSBL
+ </font>
+ </td>
+ <td>
+ 0 1.101 0 0.706
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sent via a relay in ipwhois.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_RFCI
+ </font>
+ </td>
+ <td>
+ 0 0.100 0 0.100
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: sender listed in dsn.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFCI_DSN
+ </font>
+ </td>
+ <td>
+ 0 1.389 0 0.291
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Has Habeas warrant mark and on Infringer List
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_VIOLATOR
+ </font>
+ </td>
+ <td>
+ 16.0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (trusted relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_TRUSTED
+ </font>
+ </td>
+ <td>
+ 0 -4.3 0 -4.3
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (other relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_OTHER
+ </font>
+ </td>
+ <td>
+ 0 -0.1 0 -0.1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in bl.spamcop.net
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BL_SPAMCOP_NET
+ </font>
+ </td>
+ <td>
+ 0 2.25 0 1.50
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RBL, http://www.mail-abuse.org/rbl/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RBL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in DUL, http://www.mail-abuse.org/dul/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_DUL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RSS, http://www.mail-abuse.org/rss/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RSS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in NML, http://www.mail-abuse.org/nml/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_NML
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: aol.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_AOL
+ </font>
+ </td>
+ <td>
+ 1.916 1.875 1.788 2.354
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: hotmail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_HOTMAIL
+ </font>
+ </td>
+ <td>
+ 1.172 0 2.335 1.499
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: usa.net
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_USA_NET
+ </font>
+ </td>
+ <td>
+ 2.800 2.800 2.696 2.488
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: shaw.ca
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_SHAW_CA
+ </font>
+ </td>
+ <td>
+ 0.298 0.904 2.800 0.585
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: netscape.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_NETSCAPE_COM
+ </font>
+ </td>
+ <td>
+ 0.583 1.133 2.078 1.817
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: netzero.net
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_NETZERO
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: msn.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MSN
+ </font>
+ </td>
+ <td>
+ 0.700 1.883 1.576 0.319
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: mail.ru
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_RU
+ </font>
+ </td>
+ <td>
+ 2.033 1.859 2.462 0.473
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: mail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_COM
+ </font>
+ </td>
+ <td>
+ 4.113 3.526 3.705 3.769
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: flashmail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_FLASHMAIL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: email.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EMAIL_COM
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 2.800 2.700
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: caramail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_CARAMAIL
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 0 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: bigfoot.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_BIGFOOT
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 2.800 2.700
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: eudoramail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EUDORAMAIL
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 2.800 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: excite.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EXCITE
+ </font>
+ </td>
+ <td>
+ 2.804 2.800 2.800 2.700
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: mailcity.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAILCITY
+ </font>
+ </td>
+ <td>
+ 2.287 2.800 1.309 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: lycos.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_LYCOS
+ </font>
+ </td>
+ <td>
+ 2.900 2.800 2.800 1.355
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: juno.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_JUNO
+ </font>
+ </td>
+ <td>
+ 2.551 2.800 2.800 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: yahoo.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_YAHOO
+ </font>
+ </td>
+ <td>
+ 1.871 0 2.696 2.599
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: yahoo.ca
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_YAHOO_CA
+ </font>
+ </td>
+ <td>
+ 1.424 1.852 2.800 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: does not include a real name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NO_REAL_NAME
+ </font>
+ </td>
+ <td>
+ 0.339 0.285 0.339 0.160
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: ends in numbers
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_ENDS_IN_NUMS
+ </font>
+ </td>
+ <td>
+ 0.999 0.869 0.677 0.994
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: starts with nums
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_STARTS_WITH_NUMS
+ </font>
+ </td>
+ <td>
+ 0.390 1.574 1.044 0.579
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: contains numbers mixed in with letters
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_HAS_MIXED_NUMS
+ </font>
+ </td>
+ <td>
+ 0.100 0.304 0.100 0.259
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From address matches known spammer format
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_HAS_MIXED_NUMS2
+ </font>
+ </td>
+ <td>
+ 1.977 2.800 1.960 2.216
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: contains numbers mixed in with letters
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_HAS_MIXED_NUMS3
+ </font>
+ </td>
+ <td>
+ 1.811 1.999 4.095 3.248
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Uses an address with lots of numbers, at a big ISP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ADDR_NUMS_AT_BIGSITE
+ </font>
+ </td>
+ <td>
+ 1.044 0.724 1.087 2.699
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From address is "at something-offers"
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_OFFERS
+ </font>
+ </td>
+ <td>
+ 4.300 3.932 4.095 4.100
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: has no local-part before @ sign
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FROM_NO_USER
+ </font>
+ </td>
+ <td>
+ 2.226 1.286 2.599 2.386
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ To: has no local-part before @ sign
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ TO_NO_USER
+ </font>
+ </td>
+ <td>
+ 1.662 1.498 1.597 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ To: address contains spaces
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ TO_HAS_SPACES
+ </font>
+ </td>
+ <td>
+ 0.492 2.397 0 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
[... 19272 lines stripped ...]