Modified: spamassassin/site/tests_3_1_x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_3_1_x.html?view=diff&rev=464517&r1=464516&r2=464517
==============================================================================
--- spamassassin/site/tests_3_1_x.html (original)
+++ spamassassin/site/tests_3_1_x.html Mon Oct 16 08:25:46 2006
@@ -5,7 +5,7 @@
SpamAssassin: Tests Performed: v3.1.x
</title>
<link rel="icon" href="images/favicon.png" type="image/png" />
- <meta name="generator" content="WebMake/2.3" />
+ <meta name="generator" content="WebMake/2.4" />
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<style type="text/css" media="all">
body {
@@ -181,18110 +181,8 @@
</th>
</tr>
</p>
- <br />
- <!--etsafe-->
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Generic Test for Unsolicited Bulk Email
- </font>
- </td>
- <td>
- <font size="-1">
- GTUBE
- </font>
- </td>
- <td>
- 1000.000
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Incorporates a tracking ID number
- </font>
- </td>
- <td>
- <font size="-1">
- TRACKER_ID
- </font>
- </td>
- <td>
- 2.000 1.295 2.292 1.032
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Weird repeated double-quotation marks
- </font>
- </td>
- <td>
- <font size="-1">
- WEIRD_QUOTING
- </font>
- </td>
- <td>
- 1.120 1.200 1.295 1.341
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Extra blank lines in base64 encoding
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_BLANKS
- </font>
- </td>
- <td>
- 0 0 0.184 0.224
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- base64 attachment does not have a file name
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_NO_NAME
- </font>
- </td>
- <td>
- 0 0 0 0.224
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message text disguised using base64 encoding
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BASE64_TEXT
- </font>
- </td>
- <td>
- 2.048 1.522 2.749 1.885
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- MIME section missing boundary
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_MISSING_BOUNDARY
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Missing blank line between MIME header and body
- </font>
- </td>
- <td>
- <font size="-1">
- MISSING_MIME_HB_SEP
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Multipart message mostly text/html MIME
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_HTML_MOSTLY
- </font>
- </td>
- <td>
- 1.703 0.699 2.309 1.102
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message only has text/html MIME parts
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_HTML_ONLY
- </font>
- </td>
- <td>
- 0.414 0.001 0.389 0.001
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Quoted-printable line longer than 76 chars
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_QP_LONG_LINE
- </font>
- </td>
- <td>
- 0.159 0 0.234 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- HTML and text parts are different
- </font>
- </td>
- <td>
- <font size="-1">
- MPART_ALT_DIFF
- </font>
- </td>
- <td>
- 0.425 0.137 1.142 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- HTML and text parts are different
- </font>
- </td>
- <td>
- <font size="-1">
- MPART_ALT_DIFF_COUNT
- </font>
- </td>
- <td>
- 1.649 0 1.607 0.708
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- MIME character set is an unknown ISO charset
- </font>
- </td>
- <td>
- <font size="-1">
- MIME_BAD_ISO_CHARSET
- </font>
- </td>
- <td>
- 3.360 3.360 3.885 4.185
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Character set indicates a foreign language
- </font>
- </td>
- <td>
- <font size="-1">
- CHARSET_FARAWAY
- </font>
- </td>
- <td>
- 3.200
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Body contains a ROT13-encoded email address
- </font>
- </td>
- <td>
- <font size="-1">
- EMAIL_ROT13
- </font>
- </td>
- <td>
- 1.600 1.680 1.850 2.000
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 70-80% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_70_80
- </font>
- </td>
- <td>
- 1.499 1.236 1.757 1.805
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 80-90% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_80_90
- </font>
- </td>
- <td>
- 0.272 0.107 0.810 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has 90-100% blank lines
- </font>
- </td>
- <td>
- <font size="-1">
- BLANK_LINES_90_100
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body has many words used only once
- </font>
- </td>
- <td>
- <font size="-1">
- UNIQUE_WORDS
- </font>
- </td>
- <td>
- 2.066 1.336 2.543 2.347
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message body mentions many internet domains
- </font>
- </td>
- <td>
- <font size="-1">
- DOMAIN_RATIO
- </font>
- </td>
- <td>
- 0 0 0.184 0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- IP to HTTPS link found in HTML
- </font>
- </td>
- <td>
- <font size="-1">
- HTTPS_IP_MISMATCH
- </font>
- </td>
- <td>
- 1.920 1.920 2.220 2.400
- </td>
- </tr>
- <tr>
- <td>
- <strong>rawbody</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Message looks to contain HTML-interrupted text
- </font>
- </td>
- <td>
- <font size="-1">
- INTERRUPTUS
- </font>
- </td>
- <td>
- 1.154 0.533 1.106 0.182
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Passed through trusted hosts only via SMTP
- </font>
- </td>
- <td>
- <font size="-1">
- ALL_TRUSTED
- </font>
- </td>
- <td>
- -1.360 -1.440 -1.665 -1.800
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Informational: message was not relayed via SMTP
- </font>
- </td>
- <td>
- <font size="-1">
- NO_RELAYS
- </font>
- </td>
- <td>
- -0.001
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is confirmed open relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_RELAY
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: dialup sender did non-local SMTP
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_DUL
- </font>
- </td>
- <td>
- 0 1.713 0 1.946
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is confirmed spam source
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_SPAM
- </font>
- </td>
- <td>
- 0 1.905 0 2.775
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sent through multi-stage open relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_MULTI
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is an open formmail
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_CGI
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- NJABL: sender is an open proxy
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_NJABL_PROXY
- </font>
- </td>
- <td>
- 0 0.327 0 0.721
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open HTTP proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_HTTP
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open SOCKS proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_SOCKS
- </font>
- </td>
- <td>
- 0 1.823 0 2.159
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open proxy server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_MISC
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is open SMTP relay
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_SMTP
- </font>
- </td>
- <td>
- 0 0 0 0.201
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is a abuseable web server
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_WEB
- </font>
- </td>
- <td>
- 0 1.236 0 1.456
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender demands to never be tested
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_BLOCK
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sender is on a hijacked network
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_ZOMBIE
- </font>
- </td>
- <td>
- 0 0.240 0 0.258
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- SORBS: sent directly from dynamic IP address
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SORBS_DUL
- </font>
- </td>
- <td>
- 0 1.988 0 2.046
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in Spamhaus SBL
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_SBL
- </font>
- </td>
- <td>
- 0 2.712 0 3.160
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in Spamhaus XBL
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_XBL
- </font>
- </td>
- <td>
- 0 3.114 0 3.897
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in dsn.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFC_DSN
- </font>
- </td>
- <td>
- 0 2.872 0 2.597
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in postmaster.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFC_POST
- </font>
- </td>
- <td>
- 0 1.440 0 1.708
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in abuse.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFC_ABUSE
- </font>
- </td>
- <td>
- 0 0.479 0 0.200
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in whois.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFC_WHOIS
- </font>
- </td>
- <td>
- 0 0.879 0 1.447
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in bogusmx.rfc-ignorant.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_RFC_BOGUSMX
- </font>
- </td>
- <td>
- 0 2.034 0 1.945
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- CompleteWhois: sender on bogons IP block
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_WHOIS_BOGONS
- </font>
- </td>
- <td>
- 0 1.811 0 2.430
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- CompleteWhois: sender on hijacked IP block
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_WHOIS_HIJACKED
- </font>
- </td>
- <td>
- 0 1.0 0 1.0
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- CompleteWhois: sender on invalid IP block
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_WHOIS_INVALID
- </font>
- </td>
- <td>
- 0 2.151 0 2.234
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in list.dsbl.org
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_DSBL
- </font>
- </td>
- <td>
- 0 1.801 0 2.600
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- From: sender listed in dnsbl.ahbl.org
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_AHBL_RHSBL
- </font>
- </td>
- <td>
- 0 0.306 0 0.231
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Envelope sender in blackholes.securitysage.com
- </font>
- </td>
- <td>
- <font size="-1">
- DNS_FROM_SECURITYSAGE
- </font>
- </td>
- <td>
- 0 2.001 0 1.513
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Received via a relay in bl.spamcop.net
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BL_SPAMCOP_NET
- </font>
- </td>
- <td>
- 0 1.332 0 1.558
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in RBL, http://www.mail-abuse.org/rbl/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_RBL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in DUL, http://www.mail-abuse.org/dul/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_DUL
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in RSS, http://www.mail-abuse.org/rss/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_RSS
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay in NML, http://www.mail-abuse.org/nml/
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_MAPS_NML
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Sender is in Bonded Sender Program (trusted relay)
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BSP_TRUSTED
- </font>
- </td>
- <td>
- 0 -4.3 0 -4.3
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Sender is in Bonded Sender Program (other relay)
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_BSP_OTHER
- </font>
- </td>
- <td>
- 0 -0.1 0 -0.1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- ISIPP IADB lists as vouched-for sender
- </font>
- </td>
- <td>
- <font size="-1">
- RCVD_IN_IADB_VOUCHED
- </font>
- </td>
- <td>
- 0 -1.825 0 -2.200
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Habeas Accredited Confirmed Opt-In or Better
- </font>
- </td>
- <td>
- <font size="-1">
- HABEAS_ACCREDITED_COI
- </font>
- </td>
- <td>
- 0 -8.0 0 -8.0
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Habeas Accredited Opt-In or Better
- </font>
- </td>
- <td>
- <font size="-1">
- HABEAS_ACCREDITED_SOI
- </font>
- </td>
- <td>
- 0 -4.3 0 -4.3
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Habeas Checked
- </font>
- </td>
- <td>
- <font size="-1">
- HABEAS_CHECKED
- </font>
- </td>
- <td>
- 0 -0.2 0 -0.2
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'cialis'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_C
- </font>
- </td>
- <td>
- 2.880 1.035 3.140 0.614
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'levitra'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_L
- </font>
- </td>
- <td>
- 1.840 1.840 2.118 2.300
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'phentermine'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_P
- </font>
- </td>
- <td>
- 0.542 0.563 0.834 0.699
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'soma'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_S
- </font>
- </td>
- <td>
- 1.729 0.378 2.498 1.581
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'valium'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_VA
- </font>
- </td>
- <td>
- 2.437 2.442 2.743 2.619
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'vicodin'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_VIC
- </font>
- </td>
- <td>
- 2.720 2.720 3.145 2.656
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Subject contains a gappy version of 'xanax'
- </font>
- </td>
- <td>
- <font size="-1">
- SUBJECT_DRUG_GAP_X
- </font>
- </td>
- <td>
- 2.262 2.334 2.447 2.401
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Talks about price per dose
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_DOSAGE
- </font>
- </td>
- <td>
- 2.337 1.592 2.745 2.242
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Mentions an E.D. drug
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_ED_CAPS
- </font>
- </td>
- <td>
- 0.547 0.352 1.011 0.501
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Viagra and other drugs
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_ED_COMBO
- </font>
- </td>
- <td>
- 1.280 1.280 1.353 1.375
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Talks about an E.D. drug using its chemical name
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_ED_SILD
- </font>
- </td>
- <td>
- 1.440 0 1.594 0
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Mentions Generic Viagra
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_ED_GENERIC
- </font>
- </td>
- <td>
- 2.140 1.814 2.461 1.807
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Fast Viagra Delivery
- </font>
- </td>
- <td>
- <font size="-1">
- DRUG_ED_ONLINE
- </font>
- </td>
- <td>
- 2.160 2.160 2.498 2.700
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Deep discount medications
- </font>
- </td>
- <td>
- <font size="-1">
- DEEP_DISC_MEDS
- </font>
- </td>
- <td>
- 1.440 1.132 1.665 1.177
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Online Pharmacy
- </font>
- </td>
- <td>
- <font size="-1">
- ONLINE_PHARMACY
- </font>
- </td>
- <td>
- 2.720 2.102 3.145 2.043
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- No prescription needed
- </font>
- </td>
- <td>
- <font size="-1">
- NO_PRESCRIPTION
- </font>
- </td>
- <td>
- 3.200 2.888 3.700 3.887
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Attempts to disguise the word 'viagra'
- </font>
- </td>
- <td>
- <font size="-1">
- VIA_GAP_GRA
- </font>
- </td>
- <td>
- 2.480 2.419 2.867 2.529
- </td>
- </tr>
- <tr>
- <td>
- <strong>body</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Two or more drugs crammed together into one word
- </font>
- </td>
- <td>
- <font size="-1">
- DRUGS_SMEAR1
- </font>
- </td>
- <td>
- 1.310 1.372 1.576 1.337
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: msn.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MSN
- </font>
- </td>
- <td>
- 2.080 2.060 2.358 2.509
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: mail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MAIL_COM
- </font>
- </td>
- <td>
- 1.920 1.920 2.220 2.369
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: email.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EMAIL_COM
- </font>
- </td>
- <td>
- 1.440 1.440 1.665 1.335
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: eudoramail.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EUDORAMAIL
- </font>
- </td>
- <td>
- 1.360 1.440 1.665 1.705
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: excite.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_EXCITE
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: lycos.com
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_LYCOS
- </font>
- </td>
- <td>
- 1
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Host HELO did not match rDNS: yahoo.ca
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_YAHOO_CA
- </font>
- </td>
- <td>
- 1.186 1.353 1.466 1.599
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd with suspicious hostname (mail.com)
- </font>
- </td>
- <td>
- <font size="-1">
- FAKE_HELO_MAIL_COM_DOM
- </font>
- </td>
- <td>
- 2.160 2.160 2.498 2.700
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (IP addr 1)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_IPADDR
- </font>
- </td>
- <td>
- 3.360 3.360 3.885 4.200
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (DHCP)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_DHCP
- </font>
- </td>
- <td>
- 3.280 2.664 3.792 3.066
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (HCC)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_HCC
- </font>
- </td>
- <td>
- 3.280 3.280 3.792 4.100
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (ATTBI.com)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_ATTBI
- </font>
- </td>
- <td>
- 2.400 2.400 2.775 2.692
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (Rogers)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_ROGERS
- </font>
- </td>
- <td>
- 1.840 1.203 2.127 1.580
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (Adelphia)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_ADELPHIA
- </font>
- </td>
- <td>
- 1.680 1.680 1.942 1.787
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (T-Dialin)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_DIALIN
- </font>
- </td>
- <td>
- 2.080 2.080 2.405 2.600
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (Hex IP)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_HEXIP
- </font>
- </td>
- <td>
- 1.280 1.280 1.480 1.600
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (Split IP)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_SPLIT_IP
- </font>
- </td>
- <td>
- 2.880 2.880 3.330 2.191
- </td>
- </tr>
- <tr>
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
- <font size="-1">
- Relay HELO'd using suspicious hostname (YahooBB)
- </font>
- </td>
- <td>
- <font size="-1">
- HELO_DYNAMIC_YAHOOBB
- </font>
- </td>
- <td>
- 2.240 2.240 2.590 2.800
- </td>
- </tr>
- <tr bgcolor="#ccffcc">
- <td>
- <strong>header</strong>
- </td>
- <td>
- <font size="-1">
-
- </font>
- </td>
- <td>
[... 15821 lines stripped ...]