You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2006/07/30 23:57:15 UTC

svn commit: r426950 [5/6] - /spamassassin/site/

Added: spamassassin/site/tests_3_1_x.html
URL: http://svn.apache.org/viewvc/spamassassin/site/tests_3_1_x.html?rev=426950&view=auto
==============================================================================
--- spamassassin/site/tests_3_1_x.html (added)
+++ spamassassin/site/tests_3_1_x.html Sun Jul 30 14:57:14 2006
@@ -0,0 +1,18362 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html>
+  <head>
+    <title>
+      SpamAssassin: Tests Performed: v3.1.x
+    </title>
+    <link rel="icon" href="images/favicon.png" type="image/png" />
+    <meta name="generator" content="WebMake/2.3" />
+    <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
+    <style type="text/css" media="all">
+      body {
+       background-color: #fff;
+       color: #000;
+       font-family: verdana,arial,helvetica,sans-serif;
+       margin-left: 2px;
+       margin-right: 2px;
+       }
+       code, samp, pre
+       {
+       font-family: monospace;
+       }
+       H1 { font-size: x-large; }
+       H2 { font-size: large; }
+       H3 { font-size: medium; }
+       H4 { font-size: small; }
+       H5 { font-size: x-small; }
+       H6 { font-size: xx-small; }
+       A:link {
+       font-weight: bold;
+       color: #004000;
+       text-decoration: underline; 
+       }
+       A:visited {
+       font-weight: normal;
+       color: #008000;
+       text-decoration: underline; 
+       }
+       A:active {
+       font-weight: bold;
+       color: #800000;
+       text-decoration: underline; 
+       }
+       table.navibar {
+       background-color: #C8C8C8;
+       border-spacing: 3px;
+       }
+       td.navibar {
+       background-color: #E8E8E8;
+       vertical-align: middle;
+       padding: 0px;
+       }
+       a.navibar {
+       text-decoration: none;
+       }
+       font.navibar {
+       text-decoration: none;
+       font-size: 80%;
+       }
+    </style>
+    <link rel="meta" title="DOAP" type="application/rdf+xml" href="doap.rdf" />
+    <!--
+     Link to WPoison to thwart spambots:
+     <a href="http://SpamAssassin.taint.org/moreinfo.whtml">More Info</a>
+     -->
+    
+  </head>
+  <body>
+    <p>
+      <table width="100%">
+        <tr>
+          <td valign="center">
+             <img align="center" src="images/arrowlogo.png" alt="SpamAssassin(tm)" width="334" height="148" />
+          </td>
+          <td valign="center">
+             <h1>The Apache SpamAssassin Project</h1><p>
+              <strong>The Powerful #1 Open-Source Spam Filter</strong>
+            </p>
+          </td>
+        </tr>
+        <tr>
+          <td colspan="2">
+            <font size="-1">
+              <table class="navibar" cellpadding="0" cellspacing="3" border="0">
+                <tr>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<b>SpamAssassin Home</b>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="index.html">Home</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://wiki.apache.org/spamassassin/">Wiki</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://spamassassin.apache.org/downloads.cgi?update=200607261000">Download</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://wiki.apache.org/spamassassin/FrequentlyAskedQuestions">FAQ</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="doc.html">Docs</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://wiki.apache.org/spamassassin/MailingLists">Lists</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="tests.html">Tests</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://issues.apache.org/SpamAssassin/">Bugs</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="http://cvs.apache.org/viewcvs.cgi/spamassassin/trunk/CREDITS?root=Apache-SVN&view=markup">Credits</a>&nbsp;
+                  </td>
+                  <td class="navibar" valign="top" align="center">
+                    &nbsp;<a href="gtube">GTUBE</a>&nbsp;
+                  </td>
+                </tr>
+              </table>
+            </font>
+          </td>
+        </tr>
+      </table>
+    </p>
+<!-- yes, it's that Mozilla black-border code again ;) -->
+    <!-- stolen from www.mozilla.org via rc3.org -->
+        <table border="0" cellpadding="0" cellspacing="0" width="100%">
+      <tr>
+        <td bgcolor="#808080">
+          <table border="0" cellspacing="4" cellpadding="4" width="100%">
+            <tr>
+              <td bgcolor="#ffffff">
+                <table border="0" cellspacing="4" cellpadding="4" width="100%">
+                  <tr>
+                    <td>
+                      <p>
+                         <a name="title" id="title"><h1>Tests Performed: v3.1.x</h1></a><p>
+                          This is the current list of tests SpamAssassin(tm) performs on mail messages to
+                          determine if they're spam or not. If you wish to <b>change the score</b> from the
+                          default, add a line like this to your <code>~/.spamassassin/user_prefs</code>:
+                          
+                        </p>
+                        <blockquote>
+                          <code>score NAME_OF_TEST 3.0</code>
+                        </blockquote>
+                        <p>
+                          Where <code>3.0</code> is the hits you wish that test to incur, and <code>NAME_OF_TEST</code> is
+                          the test name from the <strong>TEST NAME</strong> column below. 
+                          
+                        </p>
+                        <p>
+                          If you wish to <b>disable a test</b>, set the score to 0 by adding a line like
+                          this to your <code>~/.spamassassin/user_prefs</code>:
+                          
+                        </p>
+                        <blockquote>
+                          <code>score NAME_OF_TEST 0</code>
+                        </blockquote>
+                        <p>
+                          Note that these are the scores for the current stable release of SpamAssassin;
+                          they may be different from the ones you're running on your servers, if SpamAssassin
+                          is installed there.
+                          
+                        </p>
+                        <table>
+                          <tr bgcolor="#99ff99">
+                            <th>
+                              AREA&nbsp;TESTED
+                            </th>
+                            <th>
+                              LOCALE
+                            </th>
+                            <th>
+                              DESCRIPTION OF TEST
+                            </th>
+                            <th>
+                              TEST NAME
+                            </th>
+                            <th>
+                              DEFAULT SCORES (local, net, with bayes, with bayes+net)
+                            </th>
+                          </tr>
+                        </p>
+                        <br />
+                        <!--etsafe-->
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Generic Test for Unsolicited Bulk Email
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              GTUBE
+                            </font>
+                          </td>
+                          <td>
+                            1000.000
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Incorporates a tracking ID number
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              TRACKER_ID
+                            </font>
+                          </td>
+                          <td>
+                            2.000 1.295 2.292 1.032
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Weird repeated double-quotation marks
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              WEIRD_QUOTING
+                            </font>
+                          </td>
+                          <td>
+                            1.120 1.200 1.295 1.341
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Extra blank lines in base64 encoding
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_BASE64_BLANKS
+                            </font>
+                          </td>
+                          <td>
+                            0 0 0.184 0.224
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              base64 attachment does not have a file name
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_BASE64_NO_NAME
+                            </font>
+                          </td>
+                          <td>
+                            0 0 0 0.224
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message text disguised using base64 encoding
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_BASE64_TEXT
+                            </font>
+                          </td>
+                          <td>
+                            2.048 1.522 2.749 1.885
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME section missing boundary
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_MISSING_BOUNDARY
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Missing blank line between MIME header and body
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MISSING_MIME_HB_SEP
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Multipart message mostly text/html MIME
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_HTML_MOSTLY
+                            </font>
+                          </td>
+                          <td>
+                            1.703 0.699 2.309 1.102
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message only has text/html MIME parts
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_HTML_ONLY
+                            </font>
+                          </td>
+                          <td>
+                            0.414 0.001 0.389 0.001
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Quoted-printable line longer than 76 chars
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_QP_LONG_LINE
+                            </font>
+                          </td>
+                          <td>
+                            0.159 0 0.234 0
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HTML and text parts are different
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MPART_ALT_DIFF
+                            </font>
+                          </td>
+                          <td>
+                            0.425 0.137 1.142 0
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HTML and text parts are different
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MPART_ALT_DIFF_COUNT
+                            </font>
+                          </td>
+                          <td>
+                            1.649 0 1.607 0.708
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME character set is an unknown ISO charset
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              MIME_BAD_ISO_CHARSET
+                            </font>
+                          </td>
+                          <td>
+                            3.360 3.360 3.885 4.185
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Character set indicates a foreign language
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              CHARSET_FARAWAY
+                            </font>
+                          </td>
+                          <td>
+                            3.200
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Body contains a ROT13-encoded email address
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              EMAIL_ROT13
+                            </font>
+                          </td>
+                          <td>
+                            1.600 1.680 1.850 2.000
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message body has 70-80% blank lines
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              BLANK_LINES_70_80
+                            </font>
+                          </td>
+                          <td>
+                            1.499 1.236 1.757 1.805
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message body has 80-90% blank lines
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              BLANK_LINES_80_90
+                            </font>
+                          </td>
+                          <td>
+                            0.272 0.107 0.810 0
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message body has 90-100% blank lines
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              BLANK_LINES_90_100
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message body has many words used only once
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              UNIQUE_WORDS
+                            </font>
+                          </td>
+                          <td>
+                            2.066 1.336 2.543 2.347
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message body mentions many internet domains
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DOMAIN_RATIO
+                            </font>
+                          </td>
+                          <td>
+                            0 0 0.184 0
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              IP to HTTPS link found in HTML
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HTTPS_IP_MISMATCH
+                            </font>
+                          </td>
+                          <td>
+                            1.920 1.920 2.220 2.400
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>rawbody</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Message looks to contain HTML-interrupted text
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              INTERRUPTUS
+                            </font>
+                          </td>
+                          <td>
+                            1.154 0.533 1.106 0.182
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Passed through trusted hosts only via SMTP
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              ALL_TRUSTED
+                            </font>
+                          </td>
+                          <td>
+                            -1.360 -1.440 -1.665 -1.800
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Informational: message was not relayed via SMTP
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NO_RELAYS
+                            </font>
+                          </td>
+                          <td>
+                            -0.001
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: sender is confirmed open relay
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_RELAY
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: dialup sender did non-local SMTP
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_DUL
+                            </font>
+                          </td>
+                          <td>
+                            0 1.713 0 1.946
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: sender is confirmed spam source
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_SPAM
+                            </font>
+                          </td>
+                          <td>
+                            0 1.905 0 2.775
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: sent through multi-stage open relay
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_MULTI
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: sender is an open formmail
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_CGI
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NJABL: sender is an open proxy
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_NJABL_PROXY
+                            </font>
+                          </td>
+                          <td>
+                            0 0.327 0 0.721
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is open HTTP proxy server
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_HTTP
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is open SOCKS proxy server
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_SOCKS
+                            </font>
+                          </td>
+                          <td>
+                            0 1.823 0 2.159
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is open proxy server
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_MISC
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is open SMTP relay
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_SMTP
+                            </font>
+                          </td>
+                          <td>
+                            0 0 0 0.201
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is a abuseable web server
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_WEB
+                            </font>
+                          </td>
+                          <td>
+                            0 1.236 0 1.456
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender demands to never be tested
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_BLOCK
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sender is on a hijacked network
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_ZOMBIE
+                            </font>
+                          </td>
+                          <td>
+                            0 0.240 0 0.258
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SORBS: sent directly from dynamic IP address
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SORBS_DUL
+                            </font>
+                          </td>
+                          <td>
+                            0 1.988 0 2.046
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Received via a relay in Spamhaus SBL
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_SBL
+                            </font>
+                          </td>
+                          <td>
+                            0 2.712 0 3.160
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Received via a relay in Spamhaus XBL
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_XBL
+                            </font>
+                          </td>
+                          <td>
+                            0 3.114 0 3.897
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in dsn.rfc-ignorant.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_RFC_DSN
+                            </font>
+                          </td>
+                          <td>
+                            0 2.872 0 2.597
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in postmaster.rfc-ignorant.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_RFC_POST
+                            </font>
+                          </td>
+                          <td>
+                            0 1.440 0 1.708
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in abuse.rfc-ignorant.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_RFC_ABUSE
+                            </font>
+                          </td>
+                          <td>
+                            0 0.479 0 0.200
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in whois.rfc-ignorant.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_RFC_WHOIS
+                            </font>
+                          </td>
+                          <td>
+                            0 0.879 0 1.447
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in bogusmx.rfc-ignorant.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_RFC_BOGUSMX
+                            </font>
+                          </td>
+                          <td>
+                            0 2.034 0 1.945
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              CompleteWhois: sender on bogons IP block
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_WHOIS_BOGONS
+                            </font>
+                          </td>
+                          <td>
+                            0 1.811 0 2.430
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              CompleteWhois: sender on hijacked IP block
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_WHOIS_HIJACKED
+                            </font>
+                          </td>
+                          <td>
+                            0 1.0 0 1.0
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              CompleteWhois: sender on invalid IP block
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_WHOIS_INVALID
+                            </font>
+                          </td>
+                          <td>
+                            0 2.151 0 2.234
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Received via a relay in list.dsbl.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_DSBL
+                            </font>
+                          </td>
+                          <td>
+                            0 1.801 0 2.600
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              From: sender listed in dnsbl.ahbl.org
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_AHBL_RHSBL
+                            </font>
+                          </td>
+                          <td>
+                            0 0.306 0 0.231
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Envelope sender in blackholes.securitysage.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DNS_FROM_SECURITYSAGE
+                            </font>
+                          </td>
+                          <td>
+                            0 2.001 0 1.513
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Received via a relay in bl.spamcop.net
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_BL_SPAMCOP_NET
+                            </font>
+                          </td>
+                          <td>
+                            0 1.332 0 1.558
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay in RBL, http://www.mail-abuse.org/rbl/
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_MAPS_RBL
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay in DUL, http://www.mail-abuse.org/dul/
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_MAPS_DUL
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay in RSS, http://www.mail-abuse.org/rss/
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_MAPS_RSS
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay in NML, http://www.mail-abuse.org/nml/
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_MAPS_NML
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Sender is in Bonded Sender Program (trusted relay)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_BSP_TRUSTED
+                            </font>
+                          </td>
+                          <td>
+                            0 -4.3 0 -4.3
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Sender is in Bonded Sender Program (other relay)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_BSP_OTHER
+                            </font>
+                          </td>
+                          <td>
+                            0 -0.1 0 -0.1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              ISIPP IADB lists as vouched-for sender
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              RCVD_IN_IADB_VOUCHED
+                            </font>
+                          </td>
+                          <td>
+                            0 -1.825 0 -2.200
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Habeas Accredited Confirmed Opt-In or Better
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HABEAS_ACCREDITED_COI
+                            </font>
+                          </td>
+                          <td>
+                            0 -8.0 0 -8.0
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Habeas Accredited Opt-In or Better
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HABEAS_ACCREDITED_SOI
+                            </font>
+                          </td>
+                          <td>
+                            0 -4.3 0 -4.3
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Habeas Checked
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HABEAS_CHECKED
+                            </font>
+                          </td>
+                          <td>
+                            0 -0.2 0 -0.2
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;cialis&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_C
+                            </font>
+                          </td>
+                          <td>
+                            2.880 1.035 3.140 0.614
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;levitra&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_L
+                            </font>
+                          </td>
+                          <td>
+                            1.840 1.840 2.118 2.300
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;phentermine&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_P
+                            </font>
+                          </td>
+                          <td>
+                            0.542 0.563 0.834 0.699
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;soma&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_S
+                            </font>
+                          </td>
+                          <td>
+                            1.729 0.378 2.498 1.581
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;valium&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_VA
+                            </font>
+                          </td>
+                          <td>
+                            2.437 2.442 2.743 2.619
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;vicodin&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_VIC
+                            </font>
+                          </td>
+                          <td>
+                            2.720 2.720 3.145 2.656
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Subject contains a gappy version of &#39;xanax&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              SUBJECT_DRUG_GAP_X
+                            </font>
+                          </td>
+                          <td>
+                            2.262 2.334 2.447 2.401
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Talks about price per dose
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_DOSAGE
+                            </font>
+                          </td>
+                          <td>
+                            2.337 1.592 2.745 2.242
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Mentions an E.D. drug
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_ED_CAPS
+                            </font>
+                          </td>
+                          <td>
+                            0.547 0.352 1.011 0.501
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Viagra and other drugs
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_ED_COMBO
+                            </font>
+                          </td>
+                          <td>
+                            1.280 1.280 1.353 1.375
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Talks about an E.D. drug using its chemical name
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_ED_SILD
+                            </font>
+                          </td>
+                          <td>
+                            1.440 0 1.594 0
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Mentions Generic Viagra
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_ED_GENERIC
+                            </font>
+                          </td>
+                          <td>
+                            2.140 1.814 2.461 1.807
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Fast Viagra Delivery
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUG_ED_ONLINE
+                            </font>
+                          </td>
+                          <td>
+                            2.160 2.160 2.498 2.700
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Deep discount medications
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DEEP_DISC_MEDS
+                            </font>
+                          </td>
+                          <td>
+                            1.440 1.132 1.665 1.177
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Online Pharmacy
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              ONLINE_PHARMACY
+                            </font>
+                          </td>
+                          <td>
+                            2.720 2.102 3.145 2.043
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              No prescription needed
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              NO_PRESCRIPTION
+                            </font>
+                          </td>
+                          <td>
+                            3.200 2.888 3.700 3.887
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Attempts to disguise the word &#39;viagra&#39;
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              VIA_GAP_GRA
+                            </font>
+                          </td>
+                          <td>
+                            2.480 2.419 2.867 2.529
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>body</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Two or more drugs crammed together into one word
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              DRUGS_SMEAR1
+                            </font>
+                          </td>
+                          <td>
+                            1.310 1.372 1.576 1.337
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: msn.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_MSN
+                            </font>
+                          </td>
+                          <td>
+                            2.080 2.060 2.358 2.509
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: mail.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_MAIL_COM
+                            </font>
+                          </td>
+                          <td>
+                            1.920 1.920 2.220 2.369
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: email.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_EMAIL_COM
+                            </font>
+                          </td>
+                          <td>
+                            1.440 1.440 1.665 1.335
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: eudoramail.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_EUDORAMAIL
+                            </font>
+                          </td>
+                          <td>
+                            1.360 1.440 1.665 1.705
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: excite.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_EXCITE
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: lycos.com
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_LYCOS
+                            </font>
+                          </td>
+                          <td>
+                            1
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Host HELO did not match rDNS: yahoo.ca
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_YAHOO_CA
+                            </font>
+                          </td>
+                          <td>
+                            1.186 1.353 1.466 1.599
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay HELO&#39;d with suspicious hostname (mail.com)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              FAKE_HELO_MAIL_COM_DOM
+                            </font>
+                          </td>
+                          <td>
+                            2.160 2.160 2.498 2.700
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay HELO&#39;d using suspicious hostname (IP addr 1)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HELO_DYNAMIC_IPADDR
+                            </font>
+                          </td>
+                          <td>
+                            3.360 3.360 3.885 4.200
+                          </td>
+                        </tr>
+                        <tr>
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay HELO&#39;d using suspicious hostname (DHCP)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HELO_DYNAMIC_DHCP
+                            </font>
+                          </td>
+                          <td>
+                            3.280 2.664 3.792 3.066
+                          </td>
+                        </tr>
+                        <tr bgcolor="#ccffcc">
+                          <td>
+                            <strong>header</strong>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              Relay HELO&#39;d using suspicious hostname (HCC)
+                            </font>
+                          </td>
+                          <td>
+                            <font size="-1">
+                              HELO_DYNAMIC_HCC

[... 16068 lines stripped ...]