Author: spamassassin_role
Date: Mon Feb 19 08:30:13 2024
New Revision: 1915866
URL: http://svn.apache.org/viewvc?rev=1915866&view=rev
Log:
promotions validated
Modified:
spamassassin/trunk/rules/active.list
Modified: spamassassin/trunk/rules/active.list
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/active.list?rev=1915866&r1=1915865&r2=1915866&view=diff
==============================================================================
--- spamassassin/trunk/rules/active.list (original)
+++ spamassassin/trunk/rules/active.list Mon Feb 19 08:30:13 2024
@@ -191,7 +191,7 @@ BITCOIN_EXTORT_02
# tflags publish
BITCOIN_IMGUR
-# tflags net
+# tflags publish
BITCOIN_MALWARE
# tflags publish
@@ -263,7 +263,7 @@ BODY_SINGLE_URI
# good enough
BODY_SINGLE_WORD
-# tflags net
+# tflags publish
BODY_URI_ONLY
# tflags publish
@@ -302,7 +302,7 @@ CN_B2B_SPAMMER
# tflags publish
COMMENT_GIBBERISH
-# good enough
+# tflags net
COMPENSATION
# tflags publish
@@ -456,9 +456,6 @@ FBI_SPOOF
FILL_THIS_FORM
# good enough
-FILL_THIS_FORM_FRAUD_PHISH
-
-# good enough
FILL_THIS_FORM_LONG
# tflags publish
@@ -566,7 +563,7 @@ FROM_MISSP_MSFT
# good enough
FROM_MISSP_PHISH
-# good enough
+# tflags net
FROM_MISSP_REPLYTO
# tflags net
@@ -623,9 +620,6 @@ FSL_HAS_TINYURL
# good enough
FSL_HELO_BARE_IP_1
-# good enough
-FSL_HELO_FAKE
-
# tflags publish
FSL_NEW_HELO_USER
@@ -785,9 +779,6 @@ HAS_X_NO_RELAY
# tflags publish
HAS_X_OUTGOING_SPAM_STAT
-# tflags net
-HDRS_LCASE
-
# good enough
HDRS_LCASE_IMGONLY
@@ -806,6 +797,9 @@ HEADER_FROM_DIFFERENT_DOMAINS
# tflags userconf
HEAD_LONG
+# good enough
+HELO_MISC_IP
+
# tflags publish
HELO_NO_DOMAIN
@@ -896,9 +890,6 @@ HTML_TEXT_INVISIBLE_FONT
# tflags publish
HTML_TEXT_INVISIBLE_STYLE
-# good enough
-IMG_DIRECT_TO_MX
-
# tflags publish
IMG_ONLY_FM_DOM_INFO
@@ -944,9 +935,6 @@ LONG_INVISIBLE_TEXT
# tflags publish
LOTS_OF_MONEY
-# good enough
-LOTTO_DEPT
-
# tflags publish
LUCRATIVE
@@ -965,15 +953,15 @@ MALWARE_PASSWORD
# tflags publish
MALW_ATTACH
+# tflags net
+MANY_HDRS_LCASE
+
# tflags publish
MANY_SPAN_IN_TEXT
# good enough
MANY_SUBDOM
-# tflags net
-MAY_BE_FORGED
-
# tflags publish
MILLION_HUNDRED
@@ -1158,9 +1146,6 @@ PDS_HELO_SPF_FAIL
PDS_HP_HELO_NORDNS
# good enough
-PDS_NAKED_TO_NUMERO
-
-# good enough
PDS_OTHER_BAD_TLD
# good enough
@@ -1238,6 +1223,9 @@ RAND_HEADER_MANY
# tflags publish
RAND_MKTG_HEADER
+# good enough
+RATWARE_NO_RDNS
+
# tflags net
RAZOR2_CF_RANGE_51_100
@@ -1659,9 +1647,6 @@ SUBJ_ATTENTION
SUBJ_BRKN_WORDNUMS
# tflags net
-SUBJ_UNNEEDED_HTML
-
-# tflags net
SURBL_BLOCKED
# good enough
@@ -1679,7 +1664,7 @@ TARINGANET_IMG_NOT_RCVD_TN
# tflags publish
TEQF_USR_IMAGE
-# tflags publish
+# tflags net
TEQF_USR_MSGID_HEX
# tflags publish
@@ -1697,13 +1682,10 @@ TONLINE_FAKE_DKIM
# tflags publish
TO_EQ_FM_DIRECT_MX
-# tflags net
+# good enough
TO_EQ_FM_DOM_HTML_IMG
# tflags net
-TO_EQ_FM_DOM_HTML_ONLY
-
-# tflags net
TO_EQ_FM_DOM_SPF_FAIL
# tflags net
@@ -1724,7 +1706,7 @@ TO_NO_BRKTS_HTML_IMG
# tflags publish
TO_NO_BRKTS_HTML_ONLY
-# good enough
+# tflags net
TO_NO_BRKTS_MSFT
# tflags publish
@@ -1740,17 +1722,17 @@ TO_TOO_MANY_WFH_01
TRANSFORM_LIFE
# good enough
-TT_MSGID_TRUNC
-
-# good enough
TVD_RCVD_SPACE_BRACKET
-# tflags net
+# good enough
TVD_SPACE_ENCODED
# good enough
TVD_SPACE_RATIO_MINFP
+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
# tflags publish
TW_GIBBERISH_MANY
@@ -1916,7 +1898,7 @@ URI_MALWARE_SCMS
# tflags userconf
URI_NOVOWEL
-# tflags publish
+# tflags net
URI_ONLY_MSGID_MALF
# tflags publish
@@ -1943,10 +1925,10 @@ URI_WPADMIN
# tflags publish
URI_WP_DIRINDEX
-# tflags publish
+# tflags net
URI_WP_HACKED
-# tflags publish
+# tflags net
URI_WP_HACKED_2
# tflags publish
Date: Mon Feb 19 08:30:13 2024
New Revision: 1915866
URL: http://svn.apache.org/viewvc?rev=1915866&view=rev
Log:
promotions validated
Modified:
spamassassin/trunk/rules/active.list
Modified: spamassassin/trunk/rules/active.list
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/active.list?rev=1915866&r1=1915865&r2=1915866&view=diff
==============================================================================
--- spamassassin/trunk/rules/active.list (original)
+++ spamassassin/trunk/rules/active.list Mon Feb 19 08:30:13 2024
@@ -191,7 +191,7 @@ BITCOIN_EXTORT_02
# tflags publish
BITCOIN_IMGUR
-# tflags net
+# tflags publish
BITCOIN_MALWARE
# tflags publish
@@ -263,7 +263,7 @@ BODY_SINGLE_URI
# good enough
BODY_SINGLE_WORD
-# tflags net
+# tflags publish
BODY_URI_ONLY
# tflags publish
@@ -302,7 +302,7 @@ CN_B2B_SPAMMER
# tflags publish
COMMENT_GIBBERISH
-# good enough
+# tflags net
COMPENSATION
# tflags publish
@@ -456,9 +456,6 @@ FBI_SPOOF
FILL_THIS_FORM
# good enough
-FILL_THIS_FORM_FRAUD_PHISH
-
-# good enough
FILL_THIS_FORM_LONG
# tflags publish
@@ -566,7 +563,7 @@ FROM_MISSP_MSFT
# good enough
FROM_MISSP_PHISH
-# good enough
+# tflags net
FROM_MISSP_REPLYTO
# tflags net
@@ -623,9 +620,6 @@ FSL_HAS_TINYURL
# good enough
FSL_HELO_BARE_IP_1
-# good enough
-FSL_HELO_FAKE
-
# tflags publish
FSL_NEW_HELO_USER
@@ -785,9 +779,6 @@ HAS_X_NO_RELAY
# tflags publish
HAS_X_OUTGOING_SPAM_STAT
-# tflags net
-HDRS_LCASE
-
# good enough
HDRS_LCASE_IMGONLY
@@ -806,6 +797,9 @@ HEADER_FROM_DIFFERENT_DOMAINS
# tflags userconf
HEAD_LONG
+# good enough
+HELO_MISC_IP
+
# tflags publish
HELO_NO_DOMAIN
@@ -896,9 +890,6 @@ HTML_TEXT_INVISIBLE_FONT
# tflags publish
HTML_TEXT_INVISIBLE_STYLE
-# good enough
-IMG_DIRECT_TO_MX
-
# tflags publish
IMG_ONLY_FM_DOM_INFO
@@ -944,9 +935,6 @@ LONG_INVISIBLE_TEXT
# tflags publish
LOTS_OF_MONEY
-# good enough
-LOTTO_DEPT
-
# tflags publish
LUCRATIVE
@@ -965,15 +953,15 @@ MALWARE_PASSWORD
# tflags publish
MALW_ATTACH
+# tflags net
+MANY_HDRS_LCASE
+
# tflags publish
MANY_SPAN_IN_TEXT
# good enough
MANY_SUBDOM
-# tflags net
-MAY_BE_FORGED
-
# tflags publish
MILLION_HUNDRED
@@ -1158,9 +1146,6 @@ PDS_HELO_SPF_FAIL
PDS_HP_HELO_NORDNS
# good enough
-PDS_NAKED_TO_NUMERO
-
-# good enough
PDS_OTHER_BAD_TLD
# good enough
@@ -1238,6 +1223,9 @@ RAND_HEADER_MANY
# tflags publish
RAND_MKTG_HEADER
+# good enough
+RATWARE_NO_RDNS
+
# tflags net
RAZOR2_CF_RANGE_51_100
@@ -1659,9 +1647,6 @@ SUBJ_ATTENTION
SUBJ_BRKN_WORDNUMS
# tflags net
-SUBJ_UNNEEDED_HTML
-
-# tflags net
SURBL_BLOCKED
# good enough
@@ -1679,7 +1664,7 @@ TARINGANET_IMG_NOT_RCVD_TN
# tflags publish
TEQF_USR_IMAGE
-# tflags publish
+# tflags net
TEQF_USR_MSGID_HEX
# tflags publish
@@ -1697,13 +1682,10 @@ TONLINE_FAKE_DKIM
# tflags publish
TO_EQ_FM_DIRECT_MX
-# tflags net
+# good enough
TO_EQ_FM_DOM_HTML_IMG
# tflags net
-TO_EQ_FM_DOM_HTML_ONLY
-
-# tflags net
TO_EQ_FM_DOM_SPF_FAIL
# tflags net
@@ -1724,7 +1706,7 @@ TO_NO_BRKTS_HTML_IMG
# tflags publish
TO_NO_BRKTS_HTML_ONLY
-# good enough
+# tflags net
TO_NO_BRKTS_MSFT
# tflags publish
@@ -1740,17 +1722,17 @@ TO_TOO_MANY_WFH_01
TRANSFORM_LIFE
# good enough
-TT_MSGID_TRUNC
-
-# good enough
TVD_RCVD_SPACE_BRACKET
-# tflags net
+# good enough
TVD_SPACE_ENCODED
# good enough
TVD_SPACE_RATIO_MINFP
+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
# tflags publish
TW_GIBBERISH_MANY
@@ -1916,7 +1898,7 @@ URI_MALWARE_SCMS
# tflags userconf
URI_NOVOWEL
-# tflags publish
+# tflags net
URI_ONLY_MSGID_MALF
# tflags publish
@@ -1943,10 +1925,10 @@ URI_WPADMIN
# tflags publish
URI_WP_DIRINDEX
-# tflags publish
+# tflags net
URI_WP_HACKED
-# tflags publish
+# tflags net
URI_WP_HACKED_2
# tflags publish