Mailing List Archive

svn commit: r1915866 - /spamassassin/trunk/rules/active.list
Author: spamassassin_role
Date: Mon Feb 19 08:30:13 2024
New Revision: 1915866

URL: http://svn.apache.org/viewvc?rev=1915866&view=rev
Log:
promotions validated

Modified:
spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/active.list?rev=1915866&r1=1915865&r2=1915866&view=diff
==============================================================================
--- spamassassin/trunk/rules/active.list (original)
+++ spamassassin/trunk/rules/active.list Mon Feb 19 08:30:13 2024
@@ -191,7 +191,7 @@ BITCOIN_EXTORT_02
# tflags publish
BITCOIN_IMGUR

-# tflags net
+# tflags publish
BITCOIN_MALWARE

# tflags publish
@@ -263,7 +263,7 @@ BODY_SINGLE_URI
# good enough
BODY_SINGLE_WORD

-# tflags net
+# tflags publish
BODY_URI_ONLY

# tflags publish
@@ -302,7 +302,7 @@ CN_B2B_SPAMMER
# tflags publish
COMMENT_GIBBERISH

-# good enough
+# tflags net
COMPENSATION

# tflags publish
@@ -456,9 +456,6 @@ FBI_SPOOF
FILL_THIS_FORM

# good enough
-FILL_THIS_FORM_FRAUD_PHISH
-
-# good enough
FILL_THIS_FORM_LONG

# tflags publish
@@ -566,7 +563,7 @@ FROM_MISSP_MSFT
# good enough
FROM_MISSP_PHISH

-# good enough
+# tflags net
FROM_MISSP_REPLYTO

# tflags net
@@ -623,9 +620,6 @@ FSL_HAS_TINYURL
# good enough
FSL_HELO_BARE_IP_1

-# good enough
-FSL_HELO_FAKE
-
# tflags publish
FSL_NEW_HELO_USER

@@ -785,9 +779,6 @@ HAS_X_NO_RELAY
# tflags publish
HAS_X_OUTGOING_SPAM_STAT

-# tflags net
-HDRS_LCASE
-
# good enough
HDRS_LCASE_IMGONLY

@@ -806,6 +797,9 @@ HEADER_FROM_DIFFERENT_DOMAINS
# tflags userconf
HEAD_LONG

+# good enough
+HELO_MISC_IP
+
# tflags publish
HELO_NO_DOMAIN

@@ -896,9 +890,6 @@ HTML_TEXT_INVISIBLE_FONT
# tflags publish
HTML_TEXT_INVISIBLE_STYLE

-# good enough
-IMG_DIRECT_TO_MX
-
# tflags publish
IMG_ONLY_FM_DOM_INFO

@@ -944,9 +935,6 @@ LONG_INVISIBLE_TEXT
# tflags publish
LOTS_OF_MONEY

-# good enough
-LOTTO_DEPT
-
# tflags publish
LUCRATIVE

@@ -965,15 +953,15 @@ MALWARE_PASSWORD
# tflags publish
MALW_ATTACH

+# tflags net
+MANY_HDRS_LCASE
+
# tflags publish
MANY_SPAN_IN_TEXT

# good enough
MANY_SUBDOM

-# tflags net
-MAY_BE_FORGED
-
# tflags publish
MILLION_HUNDRED

@@ -1158,9 +1146,6 @@ PDS_HELO_SPF_FAIL
PDS_HP_HELO_NORDNS

# good enough
-PDS_NAKED_TO_NUMERO
-
-# good enough
PDS_OTHER_BAD_TLD

# good enough
@@ -1238,6 +1223,9 @@ RAND_HEADER_MANY
# tflags publish
RAND_MKTG_HEADER

+# good enough
+RATWARE_NO_RDNS
+
# tflags net
RAZOR2_CF_RANGE_51_100

@@ -1659,9 +1647,6 @@ SUBJ_ATTENTION
SUBJ_BRKN_WORDNUMS

# tflags net
-SUBJ_UNNEEDED_HTML
-
-# tflags net
SURBL_BLOCKED

# good enough
@@ -1679,7 +1664,7 @@ TARINGANET_IMG_NOT_RCVD_TN
# tflags publish
TEQF_USR_IMAGE

-# tflags publish
+# tflags net
TEQF_USR_MSGID_HEX

# tflags publish
@@ -1697,13 +1682,10 @@ TONLINE_FAKE_DKIM
# tflags publish
TO_EQ_FM_DIRECT_MX

-# tflags net
+# good enough
TO_EQ_FM_DOM_HTML_IMG

# tflags net
-TO_EQ_FM_DOM_HTML_ONLY
-
-# tflags net
TO_EQ_FM_DOM_SPF_FAIL

# tflags net
@@ -1724,7 +1706,7 @@ TO_NO_BRKTS_HTML_IMG
# tflags publish
TO_NO_BRKTS_HTML_ONLY

-# good enough
+# tflags net
TO_NO_BRKTS_MSFT

# tflags publish
@@ -1740,17 +1722,17 @@ TO_TOO_MANY_WFH_01
TRANSFORM_LIFE

# good enough
-TT_MSGID_TRUNC
-
-# good enough
TVD_RCVD_SPACE_BRACKET

-# tflags net
+# good enough
TVD_SPACE_ENCODED

# good enough
TVD_SPACE_RATIO_MINFP

+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
# tflags publish
TW_GIBBERISH_MANY

@@ -1916,7 +1898,7 @@ URI_MALWARE_SCMS
# tflags userconf
URI_NOVOWEL

-# tflags publish
+# tflags net
URI_ONLY_MSGID_MALF

# tflags publish
@@ -1943,10 +1925,10 @@ URI_WPADMIN
# tflags publish
URI_WP_DIRINDEX

-# tflags publish
+# tflags net
URI_WP_HACKED

-# tflags publish
+# tflags net
URI_WP_HACKED_2

# tflags publish