You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/07/30 23:57:15 UTC
svn commit: r426950 [5/6] - /spamassassin/site/
Added: spamassassin/site/tests_3_1_x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_3_1_x.html?rev=426950&view=auto
==============================================================================
--- spamassassin/site/tests_3_1_x.html (added)
+++ spamassassin/site/tests_3_1_x.html Sun Jul 30 14:57:14 2006
@@ -0,0 +1,18362 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html>
+ <head>
+ <title>
+ SpamAssassin: Tests Performed: v3.1.x
+ </title>
+ <link rel="icon" href="images/favicon.png" type="image/png" />
+ <meta name="generator" content="WebMake/2.3" />
+ <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
+ <style type="text/css" media="all">
+ body {
+ background-color: #fff;
+ color: #000;
+ font-family: verdana,arial,helvetica,sans-serif;
+ margin-left: 2px;
+ margin-right: 2px;
+ }
+ code, samp, pre
+ {
+ font-family: monospace;
+ }
+ H1 { font-size: x-large; }
+ H2 { font-size: large; }
+ H3 { font-size: medium; }
+ H4 { font-size: small; }
+ H5 { font-size: x-small; }
+ H6 { font-size: xx-small; }
+ A:link {
+ font-weight: bold;
+ color: #004000;
+ text-decoration: underline;
+ }
+ A:visited {
+ font-weight: normal;
+ color: #008000;
+ text-decoration: underline;
+ }
+ A:active {
+ font-weight: bold;
+ color: #800000;
+ text-decoration: underline;
+ }
+ table.navibar {
+ background-color: #C8C8C8;
+ border-spacing: 3px;
+ }
+ td.navibar {
+ background-color: #E8E8E8;
+ vertical-align: middle;
+ padding: 0px;
+ }
+ a.navibar {
+ text-decoration: none;
+ }
+ font.navibar {
+ text-decoration: none;
+ font-size: 80%;
+ }
+ </style>
+ <link rel="meta" title="DOAP" type="application/rdf+xml" href="doap.rdf" />
+ <!--
+ Link to WPoison to thwart spambots:
+ <a href="http://SpamAssassin.taint.org/moreinfo.whtml">More Info</a>
+ -->
+
+ </head>
+ <body>
+ <p>
+ <table width="100%">
+ <tr>
+ <td valign="center">
+ <img align="center" src="images/arrowlogo.png" alt="SpamAssassin(tm)" width="334" height="148" />
+ </td>
+ <td valign="center">
+ <h1>The Apache SpamAssassin Project</h1><p>
+ <strong>The Powerful #1 Open-Source Spam Filter</strong>
+ </p>
+ </td>
+ </tr>
+ <tr>
+ <td colspan="2">
+ <font size="-1">
+ <table class="navibar" cellpadding="0" cellspacing="3" border="0">
+ <tr>
+ <td class="navibar" valign="top" align="center">
+ <b>SpamAssassin Home</b>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="index.html">Home</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://wiki.apache.org/spamassassin/">Wiki</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://spamassassin.apache.org/downloads.cgi?update=200607261000">Download</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://wiki.apache.org/spamassassin/FrequentlyAskedQuestions">FAQ</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="doc.html">Docs</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://wiki.apache.org/spamassassin/MailingLists">Lists</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="tests.html">Tests</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://issues.apache.org/SpamAssassin/">Bugs</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="http://cvs.apache.org/viewcvs.cgi/spamassassin/trunk/CREDITS?root=Apache-SVN&view=markup">Credits</a>
+ </td>
+ <td class="navibar" valign="top" align="center">
+ <a href="gtube">GTUBE</a>
+ </td>
+ </tr>
+ </table>
+ </font>
+ </td>
+ </tr>
+ </table>
+ </p>
+<!-- yes, it's that Mozilla black-border code again ;) -->
+ <!-- stolen from www.mozilla.org via rc3.org -->
+ <table border="0" cellpadding="0" cellspacing="0" width="100%">
+ <tr>
+ <td bgcolor="#808080">
+ <table border="0" cellspacing="4" cellpadding="4" width="100%">
+ <tr>
+ <td bgcolor="#ffffff">
+ <table border="0" cellspacing="4" cellpadding="4" width="100%">
+ <tr>
+ <td>
+ <p>
+ <a name="title" id="title"><h1>Tests Performed: v3.1.x</h1></a><p>
+ This is the current list of tests SpamAssassin(tm) performs on mail messages to
+ determine if they're spam or not. If you wish to <b>change the score</b> from the
+ default, add a line like this to your <code>~/.spamassassin/user_prefs</code>:
+
+ </p>
+ <blockquote>
+ <code>score NAME_OF_TEST 3.0</code>
+ </blockquote>
+ <p>
+ Where <code>3.0</code> is the hits you wish that test to incur, and <code>NAME_OF_TEST</code> is
+ the test name from the <strong>TEST NAME</strong> column below.
+
+ </p>
+ <p>
+ If you wish to <b>disable a test</b>, set the score to 0 by adding a line like
+ this to your <code>~/.spamassassin/user_prefs</code>:
+
+ </p>
+ <blockquote>
+ <code>score NAME_OF_TEST 0</code>
+ </blockquote>
+ <p>
+ Note that these are the scores for the current stable release of SpamAssassin;
+ they may be different from the ones you're running on your servers, if SpamAssassin
+ is installed there.
+
+ </p>
+ <table>
+ <tr bgcolor="#99ff99">
+ <th>
+ AREA TESTED
+ </th>
+ <th>
+ LOCALE
+ </th>
+ <th>
+ DESCRIPTION OF TEST
+ </th>
+ <th>
+ TEST NAME
+ </th>
+ <th>
+ DEFAULT SCORES (local, net, with bayes, with bayes+net)
+ </th>
+ </tr>
+ </p>
+ <br />
+ <!--etsafe-->
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Generic Test for Unsolicited Bulk Email
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ GTUBE
+ </font>
+ </td>
+ <td>
+ 1000.000
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Incorporates a tracking ID number
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ TRACKER_ID
+ </font>
+ </td>
+ <td>
+ 2.000 1.295 2.292 1.032
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Weird repeated double-quotation marks
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ WEIRD_QUOTING
+ </font>
+ </td>
+ <td>
+ 1.120 1.200 1.295 1.341
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Extra blank lines in base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_BLANKS
+ </font>
+ </td>
+ <td>
+ 0 0 0.184 0.224
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ base64 attachment does not have a file name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_NO_NAME
+ </font>
+ </td>
+ <td>
+ 0 0 0 0.224
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message text disguised using base64 encoding
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BASE64_TEXT
+ </font>
+ </td>
+ <td>
+ 2.048 1.522 2.749 1.885
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME section missing boundary
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_MISSING_BOUNDARY
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Missing blank line between MIME header and body
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MISSING_MIME_HB_SEP
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Multipart message mostly text/html MIME
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_MOSTLY
+ </font>
+ </td>
+ <td>
+ 1.703 0.699 2.309 1.102
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message only has text/html MIME parts
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_HTML_ONLY
+ </font>
+ </td>
+ <td>
+ 0.414 0.001 0.389 0.001
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Quoted-printable line longer than 76 chars
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_QP_LONG_LINE
+ </font>
+ </td>
+ <td>
+ 0.159 0 0.234 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTML and text parts are different
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MPART_ALT_DIFF
+ </font>
+ </td>
+ <td>
+ 0.425 0.137 1.142 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTML and text parts are different
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MPART_ALT_DIFF_COUNT
+ </font>
+ </td>
+ <td>
+ 1.649 0 1.607 0.708
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME character set is an unknown ISO charset
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ MIME_BAD_ISO_CHARSET
+ </font>
+ </td>
+ <td>
+ 3.360 3.360 3.885 4.185
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Character set indicates a foreign language
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CHARSET_FARAWAY
+ </font>
+ </td>
+ <td>
+ 3.200
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Body contains a ROT13-encoded email address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ EMAIL_ROT13
+ </font>
+ </td>
+ <td>
+ 1.600 1.680 1.850 2.000
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 70-80% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_70_80
+ </font>
+ </td>
+ <td>
+ 1.499 1.236 1.757 1.805
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 80-90% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_80_90
+ </font>
+ </td>
+ <td>
+ 0.272 0.107 0.810 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has 90-100% blank lines
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ BLANK_LINES_90_100
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body has many words used only once
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ UNIQUE_WORDS
+ </font>
+ </td>
+ <td>
+ 2.066 1.336 2.543 2.347
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message body mentions many internet domains
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DOMAIN_RATIO
+ </font>
+ </td>
+ <td>
+ 0 0 0.184 0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ IP to HTTPS link found in HTML
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HTTPS_IP_MISMATCH
+ </font>
+ </td>
+ <td>
+ 1.920 1.920 2.220 2.400
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>rawbody</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Message looks to contain HTML-interrupted text
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ INTERRUPTUS
+ </font>
+ </td>
+ <td>
+ 1.154 0.533 1.106 0.182
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Passed through trusted hosts only via SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ALL_TRUSTED
+ </font>
+ </td>
+ <td>
+ -1.360 -1.440 -1.665 -1.800
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Informational: message was not relayed via SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NO_RELAYS
+ </font>
+ </td>
+ <td>
+ -0.001
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_RELAY
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: dialup sender did non-local SMTP
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_DUL
+ </font>
+ </td>
+ <td>
+ 0 1.713 0 1.946
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is confirmed spam source
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_SPAM
+ </font>
+ </td>
+ <td>
+ 0 1.905 0 2.775
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sent through multi-stage open relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_MULTI
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open formmail
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_CGI
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NJABL: sender is an open proxy
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_NJABL_PROXY
+ </font>
+ </td>
+ <td>
+ 0 0.327 0 0.721
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open HTTP proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_HTTP
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SOCKS proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SOCKS
+ </font>
+ </td>
+ <td>
+ 0 1.823 0 2.159
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open proxy server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_MISC
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is open SMTP relay
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_SMTP
+ </font>
+ </td>
+ <td>
+ 0 0 0 0.201
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is a abuseable web server
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_WEB
+ </font>
+ </td>
+ <td>
+ 0 1.236 0 1.456
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender demands to never be tested
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_BLOCK
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sender is on a hijacked network
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_ZOMBIE
+ </font>
+ </td>
+ <td>
+ 0 0.240 0 0.258
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SORBS: sent directly from dynamic IP address
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SORBS_DUL
+ </font>
+ </td>
+ <td>
+ 0 1.988 0 2.046
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus SBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_SBL
+ </font>
+ </td>
+ <td>
+ 0 2.712 0 3.160
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in Spamhaus XBL
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_XBL
+ </font>
+ </td>
+ <td>
+ 0 3.114 0 3.897
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in dsn.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_DSN
+ </font>
+ </td>
+ <td>
+ 0 2.872 0 2.597
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in postmaster.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_POST
+ </font>
+ </td>
+ <td>
+ 0 1.440 0 1.708
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in abuse.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_ABUSE
+ </font>
+ </td>
+ <td>
+ 0 0.479 0 0.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in whois.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_WHOIS
+ </font>
+ </td>
+ <td>
+ 0 0.879 0 1.447
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in bogusmx.rfc-ignorant.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_RFC_BOGUSMX
+ </font>
+ </td>
+ <td>
+ 0 2.034 0 1.945
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on bogons IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_BOGONS
+ </font>
+ </td>
+ <td>
+ 0 1.811 0 2.430
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on hijacked IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_HIJACKED
+ </font>
+ </td>
+ <td>
+ 0 1.0 0 1.0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ CompleteWhois: sender on invalid IP block
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_WHOIS_INVALID
+ </font>
+ </td>
+ <td>
+ 0 2.151 0 2.234
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in list.dsbl.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_DSBL
+ </font>
+ </td>
+ <td>
+ 0 1.801 0 2.600
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ From: sender listed in dnsbl.ahbl.org
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_AHBL_RHSBL
+ </font>
+ </td>
+ <td>
+ 0 0.306 0 0.231
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Envelope sender in blackholes.securitysage.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DNS_FROM_SECURITYSAGE
+ </font>
+ </td>
+ <td>
+ 0 2.001 0 1.513
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Received via a relay in bl.spamcop.net
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BL_SPAMCOP_NET
+ </font>
+ </td>
+ <td>
+ 0 1.332 0 1.558
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RBL, http://www.mail-abuse.org/rbl/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RBL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in DUL, http://www.mail-abuse.org/dul/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_DUL
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in RSS, http://www.mail-abuse.org/rss/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_RSS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay in NML, http://www.mail-abuse.org/nml/
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_MAPS_NML
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (trusted relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_TRUSTED
+ </font>
+ </td>
+ <td>
+ 0 -4.3 0 -4.3
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Sender is in Bonded Sender Program (other relay)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_BSP_OTHER
+ </font>
+ </td>
+ <td>
+ 0 -0.1 0 -0.1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ISIPP IADB lists as vouched-for sender
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ RCVD_IN_IADB_VOUCHED
+ </font>
+ </td>
+ <td>
+ 0 -1.825 0 -2.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Accredited Confirmed Opt-In or Better
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_ACCREDITED_COI
+ </font>
+ </td>
+ <td>
+ 0 -8.0 0 -8.0
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Accredited Opt-In or Better
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_ACCREDITED_SOI
+ </font>
+ </td>
+ <td>
+ 0 -4.3 0 -4.3
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Habeas Checked
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HABEAS_CHECKED
+ </font>
+ </td>
+ <td>
+ 0 -0.2 0 -0.2
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'cialis'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_C
+ </font>
+ </td>
+ <td>
+ 2.880 1.035 3.140 0.614
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'levitra'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_L
+ </font>
+ </td>
+ <td>
+ 1.840 1.840 2.118 2.300
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'phentermine'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_P
+ </font>
+ </td>
+ <td>
+ 0.542 0.563 0.834 0.699
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'soma'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_S
+ </font>
+ </td>
+ <td>
+ 1.729 0.378 2.498 1.581
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'valium'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_VA
+ </font>
+ </td>
+ <td>
+ 2.437 2.442 2.743 2.619
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'vicodin'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_VIC
+ </font>
+ </td>
+ <td>
+ 2.720 2.720 3.145 2.656
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Subject contains a gappy version of 'xanax'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ SUBJECT_DRUG_GAP_X
+ </font>
+ </td>
+ <td>
+ 2.262 2.334 2.447 2.401
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Talks about price per dose
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_DOSAGE
+ </font>
+ </td>
+ <td>
+ 2.337 1.592 2.745 2.242
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Mentions an E.D. drug
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_CAPS
+ </font>
+ </td>
+ <td>
+ 0.547 0.352 1.011 0.501
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Viagra and other drugs
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_COMBO
+ </font>
+ </td>
+ <td>
+ 1.280 1.280 1.353 1.375
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Talks about an E.D. drug using its chemical name
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_SILD
+ </font>
+ </td>
+ <td>
+ 1.440 0 1.594 0
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Mentions Generic Viagra
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_GENERIC
+ </font>
+ </td>
+ <td>
+ 2.140 1.814 2.461 1.807
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Fast Viagra Delivery
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUG_ED_ONLINE
+ </font>
+ </td>
+ <td>
+ 2.160 2.160 2.498 2.700
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Deep discount medications
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DEEP_DISC_MEDS
+ </font>
+ </td>
+ <td>
+ 1.440 1.132 1.665 1.177
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Online Pharmacy
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ ONLINE_PHARMACY
+ </font>
+ </td>
+ <td>
+ 2.720 2.102 3.145 2.043
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ No prescription needed
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ NO_PRESCRIPTION
+ </font>
+ </td>
+ <td>
+ 3.200 2.888 3.700 3.887
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Attempts to disguise the word 'viagra'
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ VIA_GAP_GRA
+ </font>
+ </td>
+ <td>
+ 2.480 2.419 2.867 2.529
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>body</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Two or more drugs crammed together into one word
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ DRUGS_SMEAR1
+ </font>
+ </td>
+ <td>
+ 1.310 1.372 1.576 1.337
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: msn.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MSN
+ </font>
+ </td>
+ <td>
+ 2.080 2.060 2.358 2.509
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: mail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_COM
+ </font>
+ </td>
+ <td>
+ 1.920 1.920 2.220 2.369
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: email.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EMAIL_COM
+ </font>
+ </td>
+ <td>
+ 1.440 1.440 1.665 1.335
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: eudoramail.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EUDORAMAIL
+ </font>
+ </td>
+ <td>
+ 1.360 1.440 1.665 1.705
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: excite.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_EXCITE
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: lycos.com
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_LYCOS
+ </font>
+ </td>
+ <td>
+ 1
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Host HELO did not match rDNS: yahoo.ca
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_YAHOO_CA
+ </font>
+ </td>
+ <td>
+ 1.186 1.353 1.466 1.599
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd with suspicious hostname (mail.com)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ FAKE_HELO_MAIL_COM_DOM
+ </font>
+ </td>
+ <td>
+ 2.160 2.160 2.498 2.700
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (IP addr 1)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_IPADDR
+ </font>
+ </td>
+ <td>
+ 3.360 3.360 3.885 4.200
+ </td>
+ </tr>
+ <tr>
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (DHCP)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_DHCP
+ </font>
+ </td>
+ <td>
+ 3.280 2.664 3.792 3.066
+ </td>
+ </tr>
+ <tr bgcolor="#ccffcc">
+ <td>
+ <strong>header</strong>
+ </td>
+ <td>
+ <font size="-1">
+
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ Relay HELO'd using suspicious hostname (HCC)
+ </font>
+ </td>
+ <td>
+ <font size="-1">
+ HELO_DYNAMIC_HCC
[... 16068 lines stripped ...]