Modified: spamassassin/site/tests_2_6x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_2_6x.html?view=diff&rev=464517&r1=464516&r2=464517
==============================================================================
--- spamassassin/site/tests_2_6x.html (original)
+++ spamassassin/site/tests_2_6x.html Mon Oct 16 08:25:46 2006
@@ -5,7 +5,7 @@
SpamAssassin: Tests Performed: v2.6x
</title>
<link rel="icon" href="images/favicon.png" type="image/png" />
- <meta name="generator" content="WebMake/2.3" />
+ <meta name="generator" content="WebMake/2.4" />
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<style type="text/css" media="all">
body {
@@ -181,21560 +181,8 @@
</th>
</tr>
</p>
- <br />
- <!--etsafe-->
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Generic Test for Unsolicited Bulk Email
- </font>
- </td>
- <td>
- <font size="-1">
- GTUBE
- </font>
- </td>
- <td>
- 1000
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>full</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Listed in Razor2 (http://razor.sf.net/)
- </font>
- </td>
- <td>
- <font size="-1">
- RAZOR2_CHECK
- </font>
- </td>
- <td>
- 0 0.899 0 1.047
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Razor2 gives confidence between 11 and 50
- </font>
- </td>
- <td>
- <font size="-1">
- RAZOR2_CF_RANGE_11_50
- </font>
- </td>
- <td>
- 0 0.559 0 0.876
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Razor2 gives confidence between 51 and 100
- </font>
- </td>
- <td>
- <font size="-1">
- RAZOR2_CF_RANGE_51_100
- </font>
- </td>
- <td>
- 0 1.552 0 1.101
- </td>
- </tr>
- <tr>
- <td>
- <strong>full</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
- </font>
- </td>
- <td>
- <font size="-1">
- DCC_CHECK
- </font>
- </td>
- <td>
- 0 1.806 0 2.907
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>full</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Listed in Pyzor (http://pyzor.sf.net/)
- </font>
- </td>
- <td>
- <font size="-1">
- PYZOR_CHECK
- </font>
- </td>
- <td>
- 0 0.322 0 3.511
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- List removal information
- </font>
- </td>
- <td>
- <font size="-1">
- REMOVE_IN_QUOTES
- </font>
- </td>
- <td>
- 0.001 0.187 0.001 0.001
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Click-to-remove with mailto: found
- </font>
- </td>
- <td>
- <font size="-1">
- CLICK_TO_REMOVE_2
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Contains an ASCII-formatted form
- </font>
- </td>
- <td>
- <font size="-1">
- ASCII_FORM_ENTRY
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Incorporates a tracking ID number
- </font>
- </td>
- <td>
- <font size="-1">
- TRACKER_ID
- </font>
- </td>
- <td>
- 2.528 3.527 3.261 3.784
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- RAND found, spammer tried to use a random-ID
- </font>
- </td>
- <td>
- <font size="-1">
- MARKUP_RAND
- </font>
- </td>
- <td>
- 2.900 2.800 0 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SSPL found, spammer tried to use a random-ID
- </font>
- </td>
- <td>
- <font size="-1">
- MARKUP_SSPL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Contains a large block of hexadecimal code
- </font>
- </td>
- <td>
- <font size="-1">
- LARGE_HEX
- </font>
- </td>
- <td>
- 0.633 1.595 1.193 1.160
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- A WHOLE LINE OF YELLING DETECTED
- </font>
- </td>
- <td>
- <font size="-1">
- LINES_OF_YELLING
- </font>
- </td>
- <td>
- 0 0.011 0 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- 2 WHOLE LINES OF YELLING DETECTED
- </font>
- </td>
- <td>
- <font size="-1">
- LINES_OF_YELLING_2
- </font>
- </td>
- <td>
- 0 0.105 0 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- 3 WHOLE LINES OF YELLING DETECTED
- </font>
- </td>
- <td>
- <font size="-1">
- LINES_OF_YELLING_3
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Weird repeated double-quotation marks
- </font>
- </td>
- <td>
- <font size="-1">
- WEIRD_QUOTING
- </font>
- </td>
- <td>
- 1.373 0.471 0.061 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Extra blank lines in base64 encoding
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_BLANKS
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- base64 attachment uses illegal characters
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_ILLEGAL
- </font>
- </td>
- <td>
- 0.432 1.715 0 1.581
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Latin alphabet text using base64 encoding
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_LATIN
- </font>
- </td>
- <td>
- 1.101 1.101 0.500 0.500
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- base64 attachment does not have a file name
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_NO_NAME
- </font>
- </td>
- <td>
- 0.189 0 0 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message text disguised using base64 encoding
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_TEXT
- </font>
- </td>
- <td>
- 1.101 1.101 1.001 1.008
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message text in HTML without charset
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_HTML_NO_CHARSET
- </font>
- </td>
- <td>
- 1.064 0.716 1.030 0.561
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- MIME section missing boundary
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_MISSING_BOUNDARY
- </font>
- </td>
- <td>
- 1.179 0.803 0 1.838
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Multipart message mostly text/html MIME
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_HTML_MOSTLY
- </font>
- </td>
- <td>
- 1.587 1.162 1.180 1.238
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message only has text/html MIME parts
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_HTML_ONLY
- </font>
- </td>
- <td>
- 0.666 0.100 0.248 0.320
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Deficient quoted-printable encoding in body
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_QP_DEFICIENT
- </font>
- </td>
- <td>
- 1.048 1.797 2.097 1.912
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Excessive quoted-printable encoding in body
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_QP_EXCESSIVE
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Quoted-printable line longer than 76 chars
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_QP_LONG_LINE
- </font>
- </td>
- <td>
- 0.242 0 0 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Quoted-printable inline text with no charset
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_QP_NO_CHARSET
- </font>
- </td>
- <td>
- 0.931 0.714 0.047 0.197
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message includes Microsoft executable program
- </font>
- </td>
- <td>
- <font size="-1">
- MICROSOFT_EXECUTABLE
- </font>
- </td>
- <td>
- 0.100
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- MIME filename does not match content
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_SUSPECT_NAME
- </font>
- </td>
- <td>
- 0.100
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Character set indicates a foreign language
- </font>
- </td>
- <td>
- <font size="-1">
- CHARSET_FARAWAY
- </font>
- </td>
- <td>
- 3.200
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message written in an undesired language
- </font>
- </td>
- <td>
- <font size="-1">
- UNWANTED_LANGUAGE_BODY
- </font>
- </td>
- <td>
- 2.800
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Body includes 8 consecutive 8-bit characters
- </font>
- </td>
- <td>
- <font size="-1">
- BODY_8BITS
- </font>
- </td>
- <td>
- 1.500
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Contains a hashbuster in Send-Safe format
- </font>
- </td>
- <td>
- <font size="-1">
- RATWARE_HASH_DASH
- </font>
- </td>
- <td>
- 1.101 4.300 1.920 4.100
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Body contains a ROT13-encoded email address
- </font>
- </td>
- <td>
- <font size="-1">
- EMAIL_ROT13
- </font>
- </td>
- <td>
- 4.400 4.300 2.590 4.100
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 70-80% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_70_80
- </font>
- </td>
- <td>
- 1.999 0.867 1.424 2.126
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 80-90% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_80_90
- </font>
- </td>
- <td>
- 1.643 1.489 2.596 2.599
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 90-100% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_90_100
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Has Habeas warrant mark (http://www.habeas.com/)
- </font>
- </td>
- <td>
- <font size="-1">
- HABEAS_SWE
- </font>
- </td>
- <td>
- -8.0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is confirmed open relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_RELAY
- </font>
- </td>
- <td>
- 0 1.133 0 0.824
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: dialup sender did non-local SMTP
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_DUL
- </font>
- </td>
- <td>
- 0 1.580 0 1.708
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is confirmed spam source
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_SPAM
- </font>
- </td>
- <td>
- 0 0.899 0 0.951
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sent through multi-stage open relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_MULTI
- </font>
- </td>
- <td>
- 0 0.101 0 0.101
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is an open formmail
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_CGI
- </font>
- </td>
- <td>
- 0 0.1 0 0.100
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is an open proxy
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_PROXY
- </font>
- </td>
- <td>
- 0 1.186 0 2.342
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open HTTP proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_HTTP
- </font>
- </td>
- <td>
- 0 0.000 0 1.203
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_MISC
- </font>
- </td>
- <td>
- 0 0.118 0 0.004
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open SMTP relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_SMTP
- </font>
- </td>
- <td>
- 0 1.630 0 0.382
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open SOCKS proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_SOCKS
- </font>
- </td>
- <td>
- 0 1.603 0 0.927
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is a abuseable web server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_WEB
- </font>
- </td>
- <td>
- 0 0.000 0 0.353
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender demands to never be tested
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_BLOCK
- </font>
- </td>
- <td>
- 0 0.001 0 0.001
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is on a hijacked network
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_ZOMBIE
- </font>
- </td>
- <td>
- 0 0.948 0 0.918
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sent directly from dynamic IP address
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_DUL
- </font>
- </td>
- <td>
- 0 0.067 0 0.092
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in Spamhaus SBL
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SBL
- </font>
- </td>
- <td>
- 0 0.814 0 0.875
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in Spamhaus XBL
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_XBL
- </font>
- </td>
- <td>
- 0 2.333 0 4.923
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in list.dsbl.org
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_DSBL
- </font>
- </td>
- <td>
- 0 1.101 0 0.706
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Sent via a relay in ipwhois.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_RFCI
- </font>
- </td>
- <td>
- 0 0.100 0 0.100
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: sender listed in dsn.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFCI_DSN
- </font>
- </td>
- <td>
- 0 1.389 0 0.291
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Has Habeas warrant mark and on Infringer List
- </font>
- </td>
- <td>
- <font size="-1">
- HABEAS_VIOLATOR
- </font>
- </td>
- <td>
- 16.0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Sender is in Bonded Sender Program (trusted relay)
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BSP_TRUSTED
- </font>
- </td>
- <td>
- 0 -4.3 0 -4.3
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Sender is in Bonded Sender Program (other relay)
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BSP_OTHER
- </font>
- </td>
- <td>
- 0 -0.1 0 -0.1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in bl.spamcop.net
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BL_SPAMCOP_NET
- </font>
- </td>
- <td>
- 0 2.25 0 1.50
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in RBL, http://www.mail-abuse.org/rbl/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_RBL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in DUL, http://www.mail-abuse.org/dul/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_DUL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in RSS, http://www.mail-abuse.org/rss/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_RSS
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in NML, http://www.mail-abuse.org/nml/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_NML
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: aol.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_AOL
- </font>
- </td>
- <td>
- 1.916 1.875 1.788 2.354
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: hotmail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_HOTMAIL
- </font>
- </td>
- <td>
- 1.172 0 2.335 1.499
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: usa.net
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_USA_NET
- </font>
- </td>
- <td>
- 2.800 2.800 2.696 2.488
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: shaw.ca
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_SHAW_CA
- </font>
- </td>
- <td>
- 0.298 0.904 2.800 0.585
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: netscape.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_NETSCAPE_COM
- </font>
- </td>
- <td>
- 0.583 1.133 2.078 1.817
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: netzero.net
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_NETZERO
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: msn.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MSN
- </font>
- </td>
- <td>
- 0.700 1.883 1.576 0.319
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: mail.ru
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MAIL_RU
- </font>
- </td>
- <td>
- 2.033 1.859 2.462 0.473
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: mail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MAIL_COM
- </font>
- </td>
- <td>
- 4.113 3.526 3.705 3.769
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: flashmail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_FLASHMAIL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: email.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EMAIL_COM
- </font>
- </td>
- <td>
- 2.900 2.800 2.800 2.700
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: caramail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_CARAMAIL
- </font>
- </td>
- <td>
- 2.900 2.800 0 2.700
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: bigfoot.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_BIGFOOT
- </font>
- </td>
- <td>
- 2.900 2.800 2.800 2.700
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: eudoramail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EUDORAMAIL
- </font>
- </td>
- <td>
- 2.900 2.800 2.800 2.700
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: excite.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EXCITE
- </font>
- </td>
- <td>
- 2.804 2.800 2.800 2.700
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: mailcity.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MAILCITY
- </font>
- </td>
- <td>
- 2.287 2.800 1.309 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: lycos.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_LYCOS
- </font>
- </td>
- <td>
- 2.900 2.800 2.800 1.355
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: juno.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_JUNO
- </font>
- </td>
- <td>
- 2.551 2.800 2.800 2.700
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: yahoo.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_YAHOO
- </font>
- </td>
- <td>
- 1.871 0 2.696 2.599
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: yahoo.ca
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_YAHOO_CA
- </font>
- </td>
- <td>
- 1.424 1.852 2.800 2.700
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: does not include a real name
- </font>
- </td>
- <td>
- <font size="-1">
- NO_REAL_NAME
- </font>
- </td>
- <td>
- 0.339 0.285 0.339 0.160
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: ends in numbers
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_ENDS_IN_NUMS
- </font>
- </td>
- <td>
- 0.999 0.869 0.677 0.994
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: starts with nums
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_STARTS_WITH_NUMS
- </font>
- </td>
- <td>
- 0.390 1.574 1.044 0.579
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: contains numbers mixed in with letters
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_HAS_MIXED_NUMS
- </font>
- </td>
- <td>
- 0.100 0.304 0.100 0.259
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From address matches known spammer format
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_HAS_MIXED_NUMS2
- </font>
- </td>
- <td>
- 1.977 2.800 1.960 2.216
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: contains numbers mixed in with letters
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_HAS_MIXED_NUMS3
- </font>
- </td>
- <td>
- 1.811 1.999 4.095 3.248
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Uses an address with lots of numbers, at a big ISP
- </font>
- </td>
- <td>
- <font size="-1">
- ADDR_NUMS_AT_BIGSITE
- </font>
- </td>
- <td>
- 1.044 0.724 1.087 2.699
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From address is "at something-offers"
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_OFFERS
- </font>
- </td>
- <td>
- 4.300 3.932 4.095 4.100
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: has no local-part before @ sign
- </font>
- </td>
- <td>
- <font size="-1">
- FROM_NO_USER
- </font>
- </td>
- <td>
- 2.226 1.286 2.599 2.386
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- To: has no local-part before @ sign
- </font>
- </td>
- <td>
- <font size="-1">
- TO_NO_USER
- </font>
- </td>
- <td>
- 1.662 1.498 1.597 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- To: address contains spaces
- </font>
- </td>
- <td>
- <font size="-1">
- TO_HAS_SPACES
- </font>
- </td>
- <td>
- 0.492 2.397 0 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- To: is empty
- </font>
- </td>
- <td>
- <font size="-1">
[... 19265 lines stripped ...]