Mailing List Archive

Author: jm
Date: Wed Jan 10 08:17:44 2007
New Revision: 494873

URL: http://svn.apache.org/viewvc?view=rev&rev=494873
Log:
bug 5290: remove 81 more obsolete rules

Modified:
spamassassin/trunk/rules/20_drugs.cf
spamassassin/trunk/rules/20_fake_helo_tests.cf
spamassassin/trunk/rules/20_head_tests.cf
spamassassin/trunk/rules/20_phrases.cf
spamassassin/trunk/rules/20_ratware.cf
spamassassin/trunk/rules/20_uri_tests.cf
spamassassin/trunk/rules/30_text_de.cf
spamassassin/trunk/rules/30_text_fr.cf
spamassassin/trunk/rules/30_text_nl.cf
spamassassin/trunk/rules/30_text_pl.cf
spamassassin/trunk/rules/50_scores.cf

Modified: spamassassin/trunk/rules/20_drugs.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_drugs.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_drugs.cf (original)
+++ spamassassin/trunk/rules/20_drugs.cf Wed Jan 10 08:17:44 2007
@@ -73,8 +73,6 @@

body DRUG_ED_ONLINE /\bviagra .{0,25}(?:express|online|overnight)/i
describe DRUG_ED_ONLINE Fast Viagra Delivery
-body DEEP_DISC_MEDS /\bdeep discount med(?:s|ications)\b/i
-describe DEEP_DISC_MEDS Deep discount medications

body ONLINE_PHARMACY /\bonline pharmacy|\b(?:drugs|medications) online/i
describe ONLINE_PHARMACY Online Pharmacy

Modified: spamassassin/trunk/rules/20_fake_helo_tests.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_fake_helo_tests.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_fake_helo_tests.cf (original)
+++ spamassassin/trunk/rules/20_fake_helo_tests.cf Wed Jan 10 08:17:44 2007
@@ -84,8 +84,6 @@
describe HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)

# h0002a5d76857.ne.client2.attbi.com [65.96.12.59]
-header HELO_DYNAMIC_ATTBI X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S+\d+\S+\.client2\.attbi\.com[^\]]+ auth= /i
-describe HELO_DYNAMIC_ATTBI Relay HELO'd using suspicious hostname (ATTBI.com)

# CPE0004e2372711-CM000a73666706.cpe.net.cable.rogers.com
# CPE00e0184f0eba-CM014490118324.cpe.net.cable.rogers.com [24.43.109.140]
@@ -106,8 +104,6 @@
describe HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP)

# YahooBB219173000034.bbtec.net [219.173.0.34]
-header HELO_DYNAMIC_YAHOOBB X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=YahooBB[^\]]+ auth= /i
-describe HELO_DYNAMIC_YAHOOBB Relay HELO'd using suspicious hostname (YahooBB)

header HELO_DYNAMIC_IPADDR2 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\d+[^\d\s]\d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+[^\]]+ auth= /i
describe HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
@@ -116,17 +112,11 @@
# h53n2fls32o828.telia.com
# h116n2fls32o1111.telia.com
# h29n1fls306o1003.telia.com
-header HELO_DYNAMIC_TELIA X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=h\d+n\d+fls\S+\.telia\.com[^\]]+ auth= /i
-describe HELO_DYNAMIC_TELIA Relay HELO'd using suspicious hostname (Telia)

# CM-vina5-168-207.cm.vtr.net [200.104.168.207]
# CM-anto1-98-153.cm.vtr.net [200.104.98.153]
-header HELO_DYNAMIC_VTR X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=cm-[a-z]+\d+-\d+-\d+\.cm\.vtr[^\]]+ auth= /i
-describe HELO_DYNAMIC_VTR Relay HELO'd using suspicious hostname (VTR)

# ec9z5l.cm.chello.no
-header HELO_DYNAMIC_CHELLO_NO X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S+\.cm\.chello\.no[^\]]+ auth= /i
-describe HELO_DYNAMIC_CHELLO_NO Relay HELO'd using suspicious hostname (Chello.no)

# g225174.upc-g.chello.nl
# a151145.upc-a.chello.nl

Modified: spamassassin/trunk/rules/20_head_tests.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_head_tests.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_head_tests.cf (original)
+++ spamassassin/trunk/rules/20_head_tests.cf Wed Jan 10 08:17:44 2007
@@ -58,18 +58,12 @@
describe FROM_NO_USER From: has no local-part before @ sign

# also 100% valid
-header FAKED_UNDISC_RECIPS To =~ /undisclosed[_ ]*recipient(?:s[^:]|[^s])/i
-describe FAKED_UNDISC_RECIPS Faked To "Undisclosed-Recipients"

header PLING_QUERY Subject =~ /\?.*!|!.*\?/
describe PLING_QUERY Subject has exclamation mark and question mark


-header MSGID_SPAM_99X9XX99 MESSAGEID =~ /^<\d\d\d\d\d\d[a-z]\d[a-z][a-z]\d\d\$[a-z][a-z][a-z]\d\d\d\d\d\$\d\d\d\d\d\d\d\d\@/
-describe MSGID_SPAM_99X9XX99 Spam tool Message-Id: (99x9xx99 variant)

-header MSGID_SPAM_ALPHA_NUM MESSAGEID =~ /<[A-Z]{7}-000[0-9]{10}\@[a-z]*>/
-describe MSGID_SPAM_ALPHA_NUM Spam tool Message-Id: (alpha-numeric variant)

header MSGID_SPAM_CAPS Message-ID =~ /^\s*<?[A-Z]+\@(?!(?:mailcity|whowhere)\.com)/
describe MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
@@ -78,8 +72,6 @@
describe MSGID_SPAM_LETTERS Spam tool Message-Id: (letters variant)


-header MSGID_NO_HOST MESSAGEID =~ /\@>(?:$|\s)/m
-describe MSGID_NO_HOST Message-Id has no hostname

# negative lookahead exempts this MUA from circa 1997-2000
# X-Mailer: Microsoft Outlook Express 4.71.1712.3
@@ -139,11 +131,7 @@
meta MSGID_FROM_MTA_HEADER (__MSGID_BEFORE_RECEIVED && !__MSGID_BEFORE_OKAY && !__FROM_HOTMAIL_COM)
describe MSGID_FROM_MTA_HEADER Message-Id was added by a relay

-header MSGID_FROM_MTA_HOTMAIL Message-Id =~ /<MC\d{1,2}-F{1,2}\w{21,22}\@\S*hotmail\.com>/
-describe MSGID_FROM_MTA_HOTMAIL Message-Id was added by a hotmail.com relay

-header MSGID_LONG MESSAGEID =~ /<.{160,}>|<.{140,}\@|\@.{55,}>/m
-describe MSGID_LONG Message-ID is unusually long

header MSGID_SHORT MESSAGEID =~ /^.{1,15}$|<.{0,4}\@/m
describe MSGID_SHORT Message-ID is unusually short
@@ -257,10 +245,10 @@
describe FORGED_TELESP_RCVD Contains forged hostname for a DSL IP in Brazil

# forgery meta-rules: more reliable than their inputs
-meta CONFIRMED_FORGED (__FORGED_RCVD_TRAIL && (__FORGED_AOL_RCVD || __FORGED_HOTMAIL_RCVD || __FORGED_EUDORAMAIL_RCVD || FORGED_YAHOO_RCVD || __FORGED_JUNO_RCVD || FORGED_GW05_RCVD))
+meta CONFIRMED_FORGED (__FORGED_RCVD_TRAIL && (__FORGED_AOL_RCVD || __FORGED_HOTMAIL_RCVD || __FORGED_EUDORAMAIL_RCVD || FORGED_YAHOO_RCVD || __FORGED_JUNO_RCVD))
describe CONFIRMED_FORGED Received headers are forged

-meta MULTI_FORGED ((__FORGED_AOL_RCVD + __FORGED_HOTMAIL_RCVD + __FORGED_EUDORAMAIL_RCVD + FORGED_YAHOO_RCVD + __FORGED_JUNO_RCVD + FORGED_GW05_RCVD) > 1)
+meta MULTI_FORGED ((__FORGED_AOL_RCVD + __FORGED_HOTMAIL_RCVD + __FORGED_EUDORAMAIL_RCVD + FORGED_YAHOO_RCVD + __FORGED_JUNO_RCVD) > 1)
describe MULTI_FORGED Received headers indicate multiple forgeries

header NONEXISTENT_CHARSET Content-Type =~ /charset=.?DEFAULT/
@@ -340,14 +328,10 @@
header EXTRA_MPART_TYPE Content-Type =~ /(?:\s*multipart\/)?.* type=/i
describe EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry

-header TO_RECIP_MARKER To =~ /\#recipient\#/
-describe TO_RECIP_MARKER To header contains 'recipient' marker

# MIME boundary tests; spam tools use distinctive patterns.
header MIME_BOUND_DD_DIGITS Content-Type =~ /boundary=\"--\d+\"/
describe MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
-header MIME_BOUND_DIGITS_7 Content-Type =~ /boundary=\d{9}\.\d{13}/
-describe MIME_BOUND_DIGITS_7 Spam tool pattern in MIME boundary
header MIME_BOUND_DIGITS_15 Content-Type =~ /boundary=\"\d{15,}\"/
describe MIME_BOUND_DIGITS_15 Spam tool pattern in MIME boundary
header MIME_BOUND_MANY_HEX Content-Type =~ /boundary="[\da-f]{8}(?:-[\da-f]{4}){3}-[\da-f]{12}"/
@@ -382,8 +366,6 @@
header FAKE_OUTBLAZE_RCVD Received =~ /\.mr\.outblaze\.com/
describe FAKE_OUTBLAZE_RCVD Received header contains faked 'mr.outblaze.com'

-header SUBJ_2_NUM_PARENS Subject =~ /^\(\d+\).*\(\d+\)\s*$/
-describe SUBJ_2_NUM_PARENS Subject contains common spam sign (2 numbers)

# thanks to David Ritz for passing this on; ready for post-3.0.0
header UNCLOSED_BRACKET ALL =~ /\[.\d+\r?\n/s
@@ -453,8 +435,6 @@

header __FORGED_JUNO_RCVD eval:check_for_forged_juno_received_headers()

-header FORGED_GW05_RCVD eval:check_for_forged_gw05_received_headers()
-describe FORGED_GW05_RCVD Forged 'by gw05' 'Received:' header found


header SORTED_RECIPS eval:sorted_recipients()

Modified: spamassassin/trunk/rules/20_phrases.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_phrases.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_phrases.cf (original)
+++ spamassassin/trunk/rules/20_phrases.cf Wed Jan 10 08:17:44 2007
@@ -39,8 +39,6 @@
# CLICK rules
# note HTML_LINK_CLICK* rules in HTML parser section

-body CLICK_BELOW_CAPS /CLICK\s.{0,30}(?:HERE|BELOW)/s
-describe CLICK_BELOW_CAPS Asks you to click below (in capital letters)

body GUARANTEED_100_PERCENT /100% GUARANTEED/i
describe GUARANTEED_100_PERCENT One hundred percent guaranteed
@@ -56,8 +54,6 @@

# strange pattern because otherwise it matches the std. majordomo line
# pls note the comment above. DO NOT just put "to" in the first group!
-body EXCUSE_6 /\b(?:wish to|click to) remove yourself/i
-describe EXCUSE_6 Claims you can be removed from the list

body EXCUSE_24 /you(?:'ve|'re| have| are)? receiv(?:e|ed|ing) this (?:advertisement|offer|special|recurring|paid).{0,16}\b(?:by either|because)/i
describe EXCUSE_24 Claims you wanted this ad
@@ -68,13 +64,9 @@
body STRONG_BUY /strong buy/i
describe STRONG_BUY Tells you about a strong buy

-body WE_HONOR_ALL /\b(?:honou?r|respect)(?: all)? remov(?:e|al) requests?\b/i
-describe WE_HONOR_ALL Claims to honor removal requests

body STOCK_ALERT /\bstock alert/i
describe STOCK_ALERT Offers a alert about a stock
-body MICRO_CAP_WARNING /Investing in micro-cap securities is highly speculative/i
-describe MICRO_CAP_WARNING SEC-mandated penny-stock warning
body NOT_ADVISOR /not a registered investment advisor/i
describe NOT_ADVISOR Not registered investment advisor

@@ -91,14 +83,8 @@
body IMPOTENCE /\b(?:impotence (?:problem|cure|solution)|Premature Ejaculation|erectile dysfunction)/i
describe IMPOTENCE Impotence cure

-body MORTGAGE_BEST /\b(?:low(?:est|er)?|free|second|rate|best|refinanc(?:e|ing)|online|instant) mortgage/i
-describe MORTGAGE_BEST Information on mortgages

-body MORTGAGE_PITCH /mortgage (?:rates?|quotes?|approv(?:al|ed)|payment|interest|loans?|app(?:\b|lication))/i
-describe MORTGAGE_PITCH Looks like mortgage pitch

-body MORTGAGE_RATES /Mortgage rates/i
-describe MORTGAGE_RATES Information on mortgage rates

body NA_DOLLARS /\b(?:\d{1,3})?Million\b.{0,40}\b(?:Canadian Dollar?s?|US\$|U\.? ?S\.? Dollar)/i
describe NA_DOLLARS Talks about a million North American dollars
@@ -110,8 +96,6 @@
describe MILLION_USD Talks about millions of dollars


-body RESISTANCE_IS_FUTILE /Replying to this email will not unsubscribe you./i
-describe RESISTANCE_IS_FUTILE Resistance to this spam is futile

body URG_BIZ /urgent.{0,16}(?:assistance|business|buy|confidential|notice|proposal|reply|request|response)/i
describe URG_BIZ Contains urgent matter
@@ -121,11 +105,7 @@
body MONEY_BACK /money back guarantee/i
describe MONEY_BACK Money back guarantee

-body NO_OBLIGATION /no obligation/i
-describe NO_OBLIGATION There is no obligation

-body RISK_FREE /\b(?:risk[ -]free|no[ -]risk)/i
-describe RISK_FREE Risk free. Suuurreeee....

body FREE_QUOTE_INSTANT /free.{0,12}(?:(?:instant|express|online|no.?obligation).{0,4})+.{0,32}\bquote/i
describe FREE_QUOTE_INSTANT Free express or no-obligation quote
@@ -143,15 +123,11 @@
body NO_MEDICAL /\bno medical exam/i
describe NO_MEDICAL No Medical Exams

-body YOU_CAN_SEARCH /you can search for anyone/i
-describe YOU_CAN_SEARCH You can search for anyone

# seems like we vastly reduce FPs on this one with a small change or two
body DIET_1 /\b(?:(?:without|no) (?:exercis(?:e(?! price)|ing)|dieting)|weight.?loss|(?:extra|lose|lost|losing).{0,10}(?:pounds|weight|inches|lbs)|burn.{1,10}fat)\b/i
describe DIET_1 Lose Weight Spam

-body DIET_2 /\blo+se.{1,10}\d+.{1,3}(?:lb|pound|kg|kilo)/i
-describe DIET_2 Describes weight loss

body FIN_FREE /\bfinancial(?:ly)? free/i
describe FIN_FREE Freedom of a financial nature

Modified: spamassassin/trunk/rules/20_ratware.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_ratware.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_ratware.cf (original)
+++ spamassassin/trunk/rules/20_ratware.cf Wed Jan 10 08:17:44 2007
@@ -32,12 +32,8 @@
# Note that the tests which look at the "ALL" pseudoheader are slower than
# the specific header.
# 100% overlap with X-Stormpost-To: header, but seems wise to leave it in
-uri RATWARE_STORM_URI m{^http://\S{1,100}/sp/t\.pl\?id=\d+:\d+}i
-describe RATWARE_STORM_URI Bulk email fingerprint (StormPost) found
header RATWARE_OE_MALFORMED X-Mailer =~ /^Microsoft Outlook Express \d(?:\.\d+){3} \w+$/
describe RATWARE_OE_MALFORMED X-Mailer has malformed Outlook Express version
-header RATWARE_RCVD_LC_ESMTP Received =~ /^from (?:(?:unknown|\d+\.\d+\.\d+\.\d+) \(\S+\)|\[\d+\.\d+\.\d+\.\d+\]) by \S+ with (?:esmtp|local|smtp); /m
-describe RATWARE_RCVD_LC_ESMTP Bulk email fingerprint ('esmtp' Received) found
header RATWARE_MOZ_MALFORMED User-Agent =~ /Mozilla\/5\.0\d\d/
describe RATWARE_MOZ_MALFORMED Bulk email fingerprint (Mozilla malformed) found

@@ -203,8 +199,6 @@
describe RATWARE_HASH_DASH Contains a hashbuster in Send-Safe format

# spammer tool, sometimes has "netIP with HTTP;" in Received: header
-header RATWARE_NETIP Content-Type =~ /boundary="--ALT--[A-Z]{4}\d/
-describe RATWARE_NETIP Bulk email fingerprint (netIP) found

# this is really badly faked. Also the spammer who uses "25250101"
# for the build is a total hippie.
@@ -214,10 +208,6 @@
########################################################################
# Most ratware uses message templates I would guess.
# Here's two popular ones...
-header HDR_ORDER_MTSRIX ALL =~ /\nMessage-ID: <\S+@\S+>\nTo: [^\n]+ <\S+>\nSubject: [^\n]+\nReferences: <\S+@\S+>\nIn-Reply-To: <\S+@\S+>\nX-Mailer: /
-describe HDR_ORDER_MTSRIX Headers are in order found in spam (MTSRIX)
-header HDR_ORDER_TRIMRS ALL =~ /\nTo: [^\n]+\nReferences: <\S+@\S+>\nIn-Reply-To: <\S+@\S+>\nMessage-ID: <\S+@\S+>\nReply-To: [^\n]+\nSender: /
-describe HDR_ORDER_TRIMRS Headers are in order found in spam (TRIMRS)

########################################################################
# This ratware always uses a +0000 TZ in the Date header, and has a multiplicity
@@ -256,8 +246,6 @@
meta RATWARE_ZERO_TZ (__RATWARE_0_TZ_DATE && __CTYPE_HTML && (__0_TZ_1 || __0_TZ_2 || __0_TZ_3 || __0_TZ_4 || __0_TZ_5 || __0_TZ_6 || __0_TZ_7))
describe RATWARE_ZERO_TZ Bulk email fingerprint (+0000) found

-header RCVD_BONUS_SPC_DATE Received =~ /with SMTP; \d\d \S\S\S /
-describe RCVD_BONUS_SPC_DATE Bulk email fingerprint (bonus space) found

header X_MESSAGE_INFO exists:X-Message-Info
describe X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found

Modified: spamassassin/trunk/rules/20_uri_tests.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_uri_tests.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/20_uri_tests.cf (original)
+++ spamassassin/trunk/rules/20_uri_tests.cf Wed Jan 10 08:17:44 2007
@@ -105,8 +105,6 @@
uri URI_UNSUBSCRIBE /\b(?:gone|opened|out)\.php/i
describe URI_UNSUBSCRIBE URI contains suspicious unsubscribe link

-uri URI_UPPER_LOWER m{(?i:https?)://([A-Z][a-z]+\.){2,}[A-Za-z\d-]+\.[a-z]{2,4}(?:[?/]|$)}
-describe URI_UPPER_LOWER URI contains capitalized hostname parts ("Abcde")

# bug 3896: URIs in various TLDs, other than 3rd level www
uri URI_NO_WWW_INFO_CGI /^(?:https?:\/\/)?[^\/]+(?<!\/www)\.[^.]{7,}\.info\/(?=\S{15,})\S*\?/i

Modified: spamassassin/trunk/rules/30_text_de.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/30_text_de.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/30_text_de.cf (original)
+++ spamassassin/trunk/rules/30_text_de.cf Wed Jan 10 08:17:44 2007
@@ -116,7 +116,6 @@
lang de describe DRUG_ED_SILD Chemische Bezeichnung eines Medikaments gegen Erektionsstörungen
lang de describe DRUG_ED_GENERIC Viagra als billiges Nachahmerpräparat
lang de describe DRUG_ED_ONLINE Schnelle Lieferung von Viagra
-lang de describe DEEP_DISC_MEDS Medikament zu Rabattpreisen
lang de describe ONLINE_PHARMACY Internetapotheke
lang de describe VIA_GAP_GRA Versucht das Wort 'viagra' zu tarnen
lang de describe DRUGS_ERECTILE Erwähnt ein Medikament gegen Erektionsstörungen
@@ -140,34 +139,24 @@
lang de describe HELO_DYNAMIC_IPADDR HELO-Rechnername verdächtig (IP-Adresse 1)
lang de describe HELO_DYNAMIC_DHCP HELO-Rechnername verdächtig (DHCP)
lang de describe HELO_DYNAMIC_HCC HELO-Rechnername verdächtig (HCC)
-lang de describe HELO_DYNAMIC_ATTBI HELO-Rechnername verdächtig (ATTBI.com)
lang de describe HELO_DYNAMIC_ROGERS HELO-Rechnername verdächtig (Rogers)
lang de describe HELO_DYNAMIC_DIALIN HELO-Rechnername verdächtig (T-Dialin)
lang de describe HELO_DYNAMIC_HEXIP HELO-Rechnername verdächtig (Hexadezimale IP-Adresse)
lang de describe HELO_DYNAMIC_SPLIT_IP HELO-Rechnername verdächtig (getrennte IP-Adresse)
-lang de describe HELO_DYNAMIC_YAHOOBB HELO-Rechnername verdächtig (YahooBB)
lang de describe HELO_DYNAMIC_IPADDR2 HELO-Rechnername verdächtig (IP-Adresse 2)
-lang de describe HELO_DYNAMIC_TELIA HELO-Rechnername verdächtig (Telia)
-lang de describe HELO_DYNAMIC_VTR HELO-Rechnername verdächtig (VTR)
-lang de describe HELO_DYNAMIC_CHELLO_NO HELO-Rechnername verdächtig (Chello.no)
lang de describe HELO_DYNAMIC_CHELLO_NL HELO-Rechnername verdächtig (Chello.nl)
lang de describe HELO_DYNAMIC_HOME_NL HELO-Rechnername verdächtig (Home.nl)
lang de describe FROM_STARTS_WITH_NUMS Absenderadresse beginnt mit Ziffern im Benutzernamen
lang de describe FROM_OFFERS Absenderadresse enthält "@...offers"
lang de describe FROM_NO_USER Adressteil vor dem @-Zeichen fehlt im Absender
-lang de describe FAKED_UNDISC_RECIPS "To: Undisclosed-Recipients" ist gefälscht
lang de describe PLING_QUERY Betreff enthält Ausrufe- und Fragezeichen
lang de describe SUBJ_ALL_CAPS Betreff enthält nur Großbuchstaben
-lang de describe MSGID_SPAM_99X9XX99 Kopfzeile "Message-ID" von Spam-Software erzeugt (99x9xx99)
-lang de describe MSGID_SPAM_ALPHA_NUM Kopfzeile "Message-ID" von Spam-Software erzeugt (alphanumerisch)
lang de describe MSGID_SPAM_CAPS Kopfzeile "Message-ID" von Spam-Software erzeugt (Großbuchstaben)
lang de describe MSGID_SPAM_LETTERS Kopfzeile "Message-ID" von Spam-Software erzeugt (Buchstaben)
-lang de describe MSGID_NO_HOST Rechnername fehlt in Kopfzeile "Message-ID"
lang de describe MSGID_OUTLOOK_INVALID Gefälschte Kopfzeile "Message-ID" im Format von Outlook Express
lang de describe MSGID_RANDY Muster in Kopfzeile "Message-ID" typisch für Spam
lang de describe MSGID_YAHOO_CAPS Kopfzeile "Message-ID" enthält GROSSBUCHSTABEN@yahoo.com
lang de describe MSGID_FROM_MTA_HEADER Kopfzeile "Message-ID" von fremdem Senderechner hinzugefügt
-lang de describe MSGID_FROM_MTA_HOTMAIL Kopfzeile "Message-ID" von hotmail.com Senderechner hinzugefügt
lang de describe DATE_SPAMWARE_Y2K Datumskopfzeile hat ungewöhnliches Format
lang de describe INVALID_DATE Datumskopfzeile nicht standardkonform zu RFC 2822
lang de describe INVALID_DATE_TZ_ABSURD Ungültiges Datum, diese Zeitzone existiert nicht
@@ -200,7 +189,6 @@
lang de describe FORGED_TELESP_RCVD Gefälschte Rechnernamen eines brasilianischen DSL-Providers
lang de describe FORGED_HOTMAIL_RCVD2 Absendeadresse von hotmail.com, aber keine passende "Received"-Zeile
lang de describe FORGED_YAHOO_RCVD Gefälschte "Received"-Kopfzeile von yahoo.com gefunden
-lang de describe FORGED_GW05_RCVD Gefälschte "Received"-Kopfzeile gefunden ("by gw05")
lang de describe CONFIRMED_FORGED Gefälschte "Received"-Kopfzeilen
lang de describe MULTI_FORGED Mehrfach gefälschte "Received"-Kopfzeilen
lang de describe NONEXISTENT_CHARSET Den angegebenen Zeichensatz gibt es nicht
@@ -221,9 +209,7 @@
lang de describe RCVD_FAKE_HELO_DOTCOM "Received"-Kopfzeilen enthalten gefälschten HELO-Rechnernamen
lang de describe SUBJECT_DIET Betreff dreht sich um Gewichtsabnahme
lang de describe EXTRA_MPART_TYPE Unnötige Parameter in "Content-Type"-Kopfzeile ("...type=")
-lang de describe TO_RECIP_MARKER Empfängerzeile enthält "recipient"-Markierung
lang de describe MIME_BOUND_DD_DIGITS Bestimmtes Muster von Spam-Software in MIME-Begrenzung
-lang de describe MIME_BOUND_DIGITS_7 Bestimmtes Muster von Spam-Software in MIME-Begrenzung
lang de describe MIME_BOUND_DIGITS_15 Bestimmtes Muster von Spam-Software in MIME-Begrenzung
lang de describe MIME_BOUND_MANY_HEX Bestimmtes Muster von Spam-Software in MIME-Begrenzung
lang de describe TO_MALFORMED Format der Zieladresse inkorrekt
@@ -234,7 +220,6 @@
lang de describe HEADER_COUNT_CTYPE Kopfzeile "Content-Type" mehrfach vorhanden
lang de describe NO_RDNS_DOTCOM_HELO HELO-Identifikation als großer Provider, aber rDNS-Name inkorrekt
lang de describe FAKE_OUTBLAZE_RCVD "mr.outblaze.com" in "Received"-Kopfzeile ist gefälscht
-lang de describe SUBJ_2_NUM_PARENS Betreff mit typischen Kennzeichen von Spam (2 Zahlen)
lang de describe HTML_MESSAGE Nachricht enthält HTML
lang de describe HTML_COMMENT_SHORT HTML-Kommentar ist sehr kurz
lang de describe HTML_COMMENT_SAVED_URL Nachricht ist eine gespeicherte Webseite
@@ -282,43 +267,31 @@
lang de describe UPPERCASE_75_100 Nachrichtentext besteht zu 75-100% aus Großbuchstaben
lang de describe INVALID_MSGID "Message-ID"-Zeile ist ungültig gemäß RFC-2822
lang de describe FORGED_MUA_MOZILLA Gefälschte E-Mail gibt vor vom Mailprogramm Mozilla zu kommen
-lang de describe CLICK_BELOW_CAPS Aufforderung zum Mausklick in Großbuchstaben
lang de describe GUARANTEED_100_PERCENT Zu 100% garantiert...
lang de describe DEAR_FRIEND Anonyme Anrede ("dear friend")
lang de describe DEAR_SOMETHING Anonyme Anrede ("dear ...")
lang de describe BILLION_DOLLARS Erwähnt sehr große Geldbeträge
lang de describe EXCUSE_4 Behauptet, man könne sich von der Adressliste entfernen lassen
-lang de describe EXCUSE_6 Behauptet, man könne sich von der Adressliste entfernen lassen
lang de describe EXCUSE_24 Angeblich haben möchten Sie diese Werbung bekommen
lang de describe EXCUSE_REMOVE Beschreibt, wie Sie diese Nachrichten wieder loswerden
lang de describe STRONG_BUY Erwähnt eine starke Kaufempfehlung (von Aktien?)
-lang de describe WE_HONOR_ALL Behauptet, Aufforderungen zur Entfernung von der Liste zu folgen
lang de describe STOCK_ALERT Bietet eine Benachrichtigung über Aktienwerte an
-lang de describe MICRO_CAP_WARNING Warnung vor Billigaktien gemäß US-Börsenaufsichtsbestimmungen
lang de describe NOT_ADVISOR Dreht sich um einen nicht registrierten Investmentberater
lang de describe PREST_NON_ACCREDITED Kaufen Sie Studienabschlüsse obskurer Universitäten
lang de describe BODY_ENHANCEMENT Informationen zur Penis-/Brustvergrößerung
lang de describe BODY_ENHANCEMENT2 Informationen zur Penis-/Brustvergrößerung
lang de describe IMPOTENCE Beseitigt Impotenz
-lang de describe MORTGAGE_BEST Informationen über Hypothekendarlehen
-lang de describe MORTGAGE_PITCH Preist Hypothekendarlehen an
-lang de describe MORTGAGE_RATES Informationen über Hypothekendarlehen
lang de describe NA_DOLLARS Handelt von einer Million Dollar aus den US oder Kanada
lang de describe US_DOLLARS_3 Erwähnt Millonen von Dollar
lang de describe MILLION_USD Erwähnt Millonen von Dollar
-lang de describe RESISTANCE_IS_FUTILE Widerstand gegen diesen Spam ist zwecklos...
lang de describe URG_BIZ Dringende Geschäfte
lang de describe MONEY_BACK Mit Geld-zurück Garantie
-lang de describe NO_OBLIGATION Völlig ohne Verpflichtung
-lang de describe RISK_FREE Ganz ohne Risiko
lang de describe FREE_QUOTE_INSTANT Kostenlos ein schnelles Preisangebot, ohne Verpflichtung
lang de describe BAD_CREDIT Erwähnt geplatzte Kredite oder Kreditwürdigkeit
lang de describe REFINANCE_YOUR_HOME Dreht sich um Baufinanzierung
lang de describe REFINANCE_NOW Dreht sich um Baufinanzierung
lang de describe NO_MEDICAL Keine medizinischen Examen nötig
-lang de describe YOU_CAN_SEARCH Sie können sich nach jedermann erkundigen
lang de describe DIET_1 Reduzieren Sie Ihr Gewicht
-lang de describe DIET_2 Verlieren Sie Gewicht
lang de describe FIN_FREE Finanzielle Unabhängigkeit
lang de describe FORWARD_LOOKING Enthält Formulierungen aus Aktienprospekten
lang de describe HG_HORMONE Erwähnt menschliche Wachstumshormone
@@ -337,8 +310,6 @@
lang de describe LIVE_PORN Eventuell Pornowerbung: Seien Sie live dabei
lang de describe SUBJECT_SEXUAL Betreff weist auf sexuellen Nachrichtentext hin
lang de describe RATWARE_EGROUPS Nachrichtenstruktur weist auf Spam-Software hin (eGroups)
-lang de describe RATWARE_STORM_URI Nachrichtenstruktur weist auf Spam-Software hin ("StormPost")
-lang de describe RATWARE_RCVD_LC_ESMTP Nachrichtenstruktur weist auf Spam-Software hin ("esmtp" in Kleinbuchstaben)
lang de describe RATWARE_OE_MALFORMED Kopfzeilen enthalten gefälschte Hinweise auf Outlook Express
lang de describe RATWARE_MOZ_MALFORMED Kopfzeilen enthalten gefälschte Hinweise auf Mozilla
lang de describe FORGED_MUA_IMS E-Mail täuscht E-Mail-Software Exchange vor
@@ -356,12 +327,8 @@
lang de describe FORGED_IMS_TAGS Exchange verwendet diese Art HTML nicht
lang de describe FORGED_OUTLOOK_TAGS Outlook verwendet diese HTML-Markierung nicht
lang de describe RATWARE_HASH_DASH Enthält Abwehrmaßnahme gegen Anti-Spam-Software ("hashbuster")
-lang de describe RATWARE_NETIP Spamhinweise gefunden (netIP)
lang de describe RATWARE_GECKO_BUILD Kopfzeilen enthalten gefälschte Hinweise auf Mozilla/Gecko
-lang de describe HDR_ORDER_MTSRIX Reihenfolge von Kopfzeilen deutet auf Spam (MTSRIX)
-lang de describe HDR_ORDER_TRIMRS Reihenfolge von Kopfzeilen deutet auf Spam (TRIMRS)
lang de describe RATWARE_ZERO_TZ Seltsame Zeitzone (+0000)
-lang de describe RCVD_BONUS_SPC_DATE Zusätzliche Leerzeichen im Datum
lang de describe X_MESSAGE_INFO Kopfzeile "X-Message-Info"
lang de describe RATWARE_RCVD_PF Gefälschte "Received"-Kopfzeile von Postfix
lang de describe RATWARE_RCVD_AT "Received"-Kopfzeile mit @-Zeichen

Modified: spamassassin/trunk/rules/30_text_fr.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/30_text_fr.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/30_text_fr.cf (original)
+++ spamassassin/trunk/rules/30_text_fr.cf Wed Jan 10 08:17:44 2007
@@ -88,7 +88,6 @@
lang fr describe BLANK_LINES_80_90 Le corps du message a 80 à 90% de lignes vides
lang fr describe CHARSET_FARAWAY Message utilisant un jeu de caractères exotique
lang fr describe CHARSET_FARAWAY_HEADER En-tête utilisant un jeu de caractères exotique
-lang fr describe CLICK_BELOW_CAPS Demande de cliquer ci-dessous (majuscules)
lang fr describe CONFIRMED_FORGED Les en-têtes "Received:" ont été falsifiés
lang fr describe CUM_SHOT Pornographie probable, "gros plans d'éjaculations"
lang fr describe DATE_IN_PAST_03_06 Date: est 3 à 6 heures avant la date de l'en-tête Received:
@@ -110,7 +109,6 @@
lang fr describe EMAIL_ROT13 Corps contient une adresse mail encodée en ROT13
lang fr describe EXCUSE_REMOVE Explique comment être retiré des listes de mailing (soi-disant...)
lang fr describe EXCUSE_4 Prétend que vous pouvez vous faire supprimer de leur liste
-lang fr describe EXCUSE_6 Prétend que vous pouvez vous faire supprimer de leur liste
lang fr describe EXCUSE_24 Prétend que vous avez demandé à recevoir cette publicité
lang fr describe EXTRA_MPART_TYPE En-tête "Content-type:...type=" surnuméraire
lang fr describe FAKE_HELO_EMAIL_COM Le HELO ne correspond pas au rDNS: email.com
@@ -121,11 +119,9 @@
lang fr describe FAKE_HELO_YAHOO_CA Le HELO ne correspond pas au rDNS: yahoo.ca
lang fr describe FAKE_HELO_YAHOO_CA Le HELO ne correspond pas au rDNS: yahoo.ca
lang fr describe FAKE_HELO_YAHOO_CA Le HELO ne correspond pas au rDNS: yahoo.ca
-lang fr describe FAKED_UNDISC_RECIPS Mention 'Undisclosed-Recipients:' falsifiée dans le "To:"
lang fr describe FIN_FREE Parle de "liberté financière" (Financial Freedom)
lang fr describe FORGED_HOTMAIL_RCVD2 From hotmail.com, mais sans "Received:"
lang fr describe FORGED_AOL_TAGS AOL n'envoie pas de HTML dans ce format
-lang fr describe FORGED_GW05_RCVD Contient l'en-tête falsifié Received: by gw05
lang fr describe FORGED_IMS_HTML IMS n'envoie pas de messages en HTML seul
lang fr describe FORGED_IMS_TAGS IMS n'envoie pas de HTML dans ce format
lang fr describe FORGED_MUA_AOL_FROM Mail falsifié prétendant venir d'AOL (selon From)
@@ -188,12 +184,10 @@
lang fr describe SUBJECT_DIET Le sujet parle de perte de poids
lang fr describe LOW_PRICE Contient "Lowest Price" (le prix le plus bas)
lang fr describe MARKETING_PARTNERS Prétend que vous vous êtes enregistré auprès d'un "partenaire" quelconque
-lang fr describe MICRO_CAP_WARNING Formule d'avertissement de la SEC à propos des investissements dans le micro-capital
lang fr describe MILLION_USD Phrase clé d'escroquerie nigérienne (millions of dollars)
lang fr describe __MIME_BASE64 Inclut un attachement en BASE64
lang fr describe MIME_BASE64_BLANKS Ligne blanches surnuméraires dans l'encodage BASE64
lang fr describe MIME_BASE64_TEXT Texte du message camouflé par encodage en BASE64
-lang fr describe MIME_BOUND_DIGITS_7 Motif caractéristique d'outil de spam dans les délimiteurs MIME
lang fr describe MIME_BOUND_MANY_HEX Motif caractéristique d'outil de spam dans les délimiteurs MIME
lang fr describe MIME_CHARSET_FARAWAY Jeu de caractères MIME exotique
lang fr describe MIME_HEADER_CTYPE_ONLY En-tête "Content-Type" présent sans les en-têtes MIME requis
@@ -205,21 +199,14 @@
lang fr describe MISSING_HEADERS Le message ne comporte pas l'en-tête To:
lang fr describe MISSING_MIMEOLE Possède un en-tête X-MSMail-Priority, mais pas de X-MimeOLE
lang fr describe MONEY_BACK Vous garantit un "remboursement si insatisfait" (en anglais)
-lang fr describe MORTGAGE_BEST Informations sur des prêts (mortgage)
-lang fr describe MORTGAGE_PITCH Ressemble à une offre de prêt (mortgage)
-lang fr describe MORTGAGE_RATES Parle de taux d'emprunts (mortage rates)
lang fr describe MSGID_FROM_MTA_HEADER Message-ID ajouté par un relais
-lang fr describe MSGID_FROM_MTA_HOTMAIL Message-ID ajouté par un relais hotmail.com
-lang fr describe MSGID_NO_HOST le Message-ID ne comporte pas le nom de l'hôte
lang fr describe MSGID_OUTLOOK_INVALID Message-ID falsifié (fortmat Outlook Express)
-lang fr describe MSGID_SPAM_99X9XX99 Message-ID d'outil de spam: (variante 99x9xx99)
lang fr describe MULTI_FORGED les en-têtes "Received" montrent de nombreuses falsifications
lang fr describe NA_DOLLARS Parle d'un million de dollars "nord-américains"
lang fr describe NONEXISTENT_CHARSET Message rédigé dans un jeu de caractères inexistant
lang fr describe NOT_ADVISOR Contient "Not registered investment advisor"
lang fr describe NO_DNS_FOR_FROM Adresse From: inconnue en DNS (pas d'enregistrement MX)
lang fr describe NO_MEDICAL Contient "No Medical Exams" (sans examen médical)
-lang fr describe NO_OBLIGATION Affirme qu'il s'agit d'une offre sans obligation de votre part
lang fr describe NO_RDNS_DOTCOM_HELO HELO de F.A.I. important, mais pas de rDNS
lang fr describe NUMERIC_HTTP_ADDR Utilise une adresse IP, sans points, dans une URL
lang fr describe OBFUSCATING_COMMENT Commentaires HTML inutiles destinés à camoufler le texte
@@ -232,8 +219,6 @@
lang fr describe RATWARE_EGROUPS Trace de logiciel de mailing en masse (eGroups) dans les en-têtes
lang fr describe RATWARE_HASH_DASH Contient un "hashbuster" au format Send-Safe
lang fr describe RATWARE_OE_MALFORMED En-tête X-Mailer indique No de version Outlook Express malformé
-lang fr describe RATWARE_RCVD_LC_ESMTP Trace de logiciel de spam ('esmtp' Received)
-lang fr describe RATWARE_STORM_URI Trace de logiciel de spam (StormPost)
lang fr describe RCVD_AM_PM En-tête Received: falsifié (AM/PM)
lang fr describe RCVD_FAKE_HELO_DOTCOM En-tête Received contient nom d'hôte falsifié dans le HELO
lang fr describe RCVD_IN_BL_SPAMCOP_NET Relais listé dans http://spamcop.net/bl.shtml
@@ -262,8 +247,6 @@
lang fr describe RCVD_NUMERIC_HELO Received: contient un HELO numérique
lang fr describe REFINANCE_NOW Offre de refinancement immobilier
lang fr describe REFINANCE_YOUR_HOME Offre de refinancement immobilier
-lang fr describe RESISTANCE_IS_FUTILE Affirme que vous ne pouvez pas être retiré de la liste d'envoi
-lang fr describe RISK_FREE Propose une offre "sans aucun risque" (en anglais)
lang fr describe ROUND_THE_WORLD Les en-têtes Received: montrent que ce message a fait le tour du monde
lang fr describe ROUND_THE_WORLD_LOCAL En-têtes Received: donnent l'impression que le message a fait le tour du monde
lang fr describe SORTED_RECIPS La liste des destinataires est triée par ordre alphabétique
@@ -278,7 +261,6 @@
lang fr describe SUBJ_YOUR_FAMILY Le sujet contient "Your Family" (votre famille)
lang fr describe SUSPICIOUS_RECIPS L'en-tête To: contient plus de dix fois le même nom de domaine
lang fr describe TO_MALFORMED L'en-tête To: contient une adresse mal formée
-lang fr describe TO_RECIP_MARKER Le champ To: contient un marqueur "recipient"
lang fr describe TRACKER_ID Contient un numéro permettant de vous identifier
lang fr describe UNCLAIMED_MONEY Argent non réclamé: Chacun sait que c'est courant ;-)
lang fr describe UPPERCASE_50_75 Message composé de 50 à 75% de majuscules
@@ -295,9 +277,7 @@
lang fr describe DRUG_ED_ONLINE Vente de Viagra par correspondance
lang fr describe WEIRD_PORT Lien HTTP vers un numéro de port non standard
lang fr describe WEIRD_QUOTING Utilisation étrange de symboles de citations
-lang fr describe WE_HONOR_ALL Prétend honorer toutes les demandes de retrait de la liste
lang fr describe WITH_LC_SMTP Une ligne Received: contient un signe de spam ("smtp" en minuscules)
-lang fr describe YOU_CAN_SEARCH Vous propose des renseignements sur n'importe qui

ifplugin Mail::SpamAssassin::Plugin::AntiVirus
lang fr describe MIME_SUSPECT_NAME Le nom du fichier joint MIME semble suspect (virus ?)

Modified: spamassassin/trunk/rules/30_text_nl.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/30_text_nl.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/30_text_nl.cf (original)
+++ spamassassin/trunk/rules/30_text_nl.cf Wed Jan 10 08:17:44 2007
@@ -75,17 +75,12 @@
lang nl describe FROM_STARTS_WITH_NUMS Van: begint met nummers
lang nl describe FROM_OFFERS Van: adres is van "at iets-aangeboden"
lang nl describe FROM_NO_USER Van: heeft geen lokaal deel voor het @-tje
-lang nl describe FAKED_UNDISC_RECIPS Namaak Aan "Undisclosed-Recipients"
lang nl describe PLING_QUERY Onderwerp heeft een uitroepteken en een vraagteken
lang nl describe SUBJ_ALL_CAPS Onderwerp bevat alleen hoofdletters
-lang nl describe MSGID_SPAM_99X9XX99 Spam tool Message-Id: (99x9xx99 variant)
-lang nl describe MSGID_SPAM_ALPHA_NUM Spam tool Message-Id: (alpha-numeric variant)
lang nl describe MSGID_SPAM_LETTERS Spam tool Message-Id: (letters variant)
-lang nl describe MSGID_NO_HOST Message-Id bevat geen hostnaam
lang nl describe MSGID_OUTLOOK_INVALID Message-Id is nep (in Outlook Express formaat)
lang nl describe MSGID_RANDY Message-Id bevat een patroon dat wordt gebruikt in SPAM
lang nl describe MSGID_FROM_MTA_HEADER Message-Id was door een relay toegevoegd
-lang nl describe MSGID_FROM_MTA_HOTMAIL Message-Id was door een hotmail.com relay toegevoegd
lang nl describe DATE_SPAMWARE_Y2K Datum heeft een vreemde Y2K opmaak
lang nl describe INVALID_DATE Ongeldige Date: header (niet RFC 2822)
lang nl describe INVALID_DATE_TZ_ABSURD Ongeldige Date: header (tijdzone bestaat niet)
@@ -112,7 +107,6 @@
lang nl describe FORGED_TELESP_RCVD Bevat een vervalde hostnaam voor een DSL IP in Brazilie
lang nl describe FORGED_HOTMAIL_RCVD2 hotmail.com 'Van' adres, maar geen 'Received:'
lang nl describe FORGED_YAHOO_RCVD 'Van' yahoo.com Komt niet overeen met 'Received' headers
-lang nl describe FORGED_GW05_RCVD vervalste 'by gw05' 'Received:' header found
lang nl describe CONFIRMED_FORGED Received headers zijn vervalst
lang nl describe MULTI_FORGED Received headers wijzen op meerdere vervalsingen
lang nl describe NONEXISTENT_CHARSET Karakterset bestaat niet
@@ -130,8 +124,6 @@
lang nl describe SUBJ_YOUR_FAMILY Onderwerp bevat "Your Family"
lang nl describe RCVD_FAKE_HELO_DOTCOM Received bevat een vervalde HELO hostnaam
lang nl describe EXTRA_MPART_TYPE Header heeft een overbodige Content-type:...type=
-lang nl describe TO_RECIP_MARKER To header bevat 'ontvanger' marker
-lang nl describe MIME_BOUND_DIGITS_7 Spam tool patroon in MIME grens
lang nl describe MIME_BOUND_DIGITS_15 Spam tool patroon in MIME grens
lang nl describe MIME_BOUND_MANY_HEX Spam tool patroon in MIME grens
lang nl describe TO_MALFORMED Aan: foutief opgesteld adres
@@ -178,40 +170,29 @@
lang nl describe UPPERCASE_75_100 Bericht tekst bestaat voor 75-100% uit hoofdletters
lang nl describe INVALID_MSGID Message-Id is ongeldig, volgens RFC 2822
lang nl describe FORGED_MUA_MOZILLA Vervalste mail die afkomstig zou zijn van Mozilla
-lang nl describe CLICK_BELOW_CAPS Vraagt om op de onderstaande link te klikken (in hoofdletters)
lang nl describe GUARANTEED_100_PERCENT 100% gegarandeerd
lang nl describe DEAR_FRIEND Beste vriend, klinkt niet erg bekend...
lang nl describe DEAR_SOMETHING Bevat 'Dear (iets)'
lang nl describe BILLION_DOLLARS Spreekt van heeel veel geld
lang nl describe EXCUSE_4 Claimt dat je van de lijst verwijderd kan worden
-lang nl describe EXCUSE_6 Claimt dat je van de lijst verwijderd kan worden
lang nl describe EXCUSE_24 Claimt dat je om deze advertentie hebt gevraagd
lang nl describe EXCUSE_REMOVE Heeft het over hoe je verwijderd kan worden van de lijst
lang nl describe STRONG_BUY Vertelt je over een goede aankoop
-lang nl describe WE_HONOR_ALL Claimt verwijder-verzoeken in te willigen
lang nl describe STOCK_ALERT Biedt aan je aandelen in de gaten te houden
-lang nl describe MICRO_CAP_WARNING SEC-aanbevolen waarschuwing over dubbeltjes-aandelen
lang nl describe NOT_ADVISOR Geen geregistreerde beleggings adviseur
lang nl describe PREST_NON_ACCREDITED 'Prestigieuze "Non-Accredited" Universiteiten'
lang nl describe BODY_ENHANCEMENT Informatie over het vergroten van lichaamsdelen
lang nl describe BODY_ENHANCEMENT2 Informatie over het vergroten van lichaamsdelen
lang nl describe IMPOTENCE Medicijn voor impotentie
-lang nl describe MORTGAGE_BEST Informatie over hypotheken
-lang nl describe MORTGAGE_PITCH Ziet eruit als een hypotheek verkooppraatje
-lang nl describe MORTGAGE_RATES Informatie over hypotheek rente/tarieven
lang nl describe NA_DOLLARS Praat over een miljoen Noord-Amerikaanse dollars
lang nl describe US_DOLLARS_3 Vermeldt miljoenen $ ($NN,NNN,NNN.NN)
lang nl describe MILLION_USD Heeft het over miljoenen dollars
-lang nl describe RESISTANCE_IS_FUTILE Verzet tegen deze spam is zinloos
lang nl describe MONEY_BACK Niet-goed-geld-terug garantie
-lang nl describe NO_OBLIGATION Geen verplichtingen
-lang nl describe RISK_FREE Risico vrij.... ja, ja!
lang nl describe FREE_QUOTE_INSTANT Gratis offerte
lang nl describe BAD_CREDIT Los al uw leningen op
lang nl describe REFINANCE_YOUR_HOME Hyphoteek oversluiten
lang nl describe REFINANCE_NOW Hyphoteek oversluiten
lang nl describe NO_MEDICAL Geen medische keuring
-lang nl describe YOU_CAN_SEARCH Je kan nu iedereen opzoeken
lang nl describe FORWARD_LOOKING Aandelen waarschuwing
lang nl describe HG_HORMONE Heeft het over groeihormomen
lang nl describe ONE_TIME Eenmalige afzettingspraktijk
@@ -224,14 +205,11 @@
lang nl describe BANG_OPRAH Iets met Oprah!
lang nl describe ACT_NOW_CAPS Heeft het in hoofdletters over "nu in actie komen"
lang nl describe BANG_GUAR ...gegaranderd!
-lang nl describe DEEP_DISC_MEDS Medicijnen met fikse korting
lang nl describe FREE_PORN Dikke kans op porno - Gratis Porno
lang nl describe CUM_SHOT Dikke kans op porno - Kwakjes
lang nl describe LIVE_PORN Dikke kans op porno - Rechtstreekse Porno uitzending
lang nl describe RATWARE_EGROUPS Bulk email kenmerk (eGroups) gevonden
-lang nl describe RATWARE_STORM_URI Bulk email kenmerk (StormPost) gevonden
lang nl describe RATWARE_OE_MALFORMED X-Mailer bevat misvormde Outlook Express versie
-lang nl describe RATWARE_RCVD_LC_ESMTP Bulk email kenmerk ('esmtp' Received) gevonden
lang nl describe FORGED_MUA_IMS Vals mailtje, pretendeert afkomstig te zijn van IMS
lang nl describe FORGED_MUA_OUTLOOK Vals mailtje, pretendeert afkomstig te zijn van MS Outlook
lang nl describe FORGED_MUA_OIMO Vals mailtje, pretendeert afkomstig te zijn van MS Outlook IMO
@@ -247,7 +225,6 @@
lang nl describe FORGED_IMS_TAGS IMS email programma's versturen geen HTML zoals deze
lang nl describe FORGED_OUTLOOK_TAGS Outlook verstuurt geen HTML zoals deze
lang nl describe RATWARE_HASH_DASH Bevat een hashbuster in Send-Safe opmaak
-lang nl describe RATWARE_NETIP Bulk email signatuur (netIP) gevonden
lang nl describe RATWARE_GECKO_BUILD Bulk email signatuur (vervalste Gecko) gevonden
lang nl describe NUMERIC_HTTP_ADDR Gebruikt een numeriek IP adres in een URL
lang nl describe HTTP_ESCAPED_HOST Gebruikt %-escapes in de hostname van een URL

Modified: spamassassin/trunk/rules/30_text_pl.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/30_text_pl.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/30_text_pl.cf (original)
+++ spamassassin/trunk/rules/30_text_pl.cf Wed Jan 10 08:17:44 2007
@@ -75,7 +75,6 @@
lang pl describe BLANK_LINES_80_90 Tre¶æ zawiera 80-90% pustych linii
lang pl describe CHARSET_FARAWAY_HEADER Obcojêzyczny zestaw znaków w nag³ówkach
lang pl describe CHARSET_FARAWAY List zawiera typ znaków oznaczaj±cy jêzyk obcy
-lang pl describe CLICK_BELOW_CAPS Pro¶ba o klikniêcie poni¿ej (WIELKIMI LITERAMI)
lang pl describe CONFIRMED_FORGED Nag³ówki Received: s± sfa³szowane
lang pl describe CUM_SHOT Prawdopodobnie porno - 'Wytrysk nasienia'
lang pl describe DATE_IN_FUTURE_03_06 Data: jest od 3 do 6 godzin po dacie z Received:
@@ -96,10 +95,8 @@
lang pl describe EMAIL_ROT13 Tre¶æ zawiera adres email zakodowany ROT13
lang pl describe EXCUSE_24 Twierdzi, ¿e chcia³e¶ tê reklamê
lang pl describe EXCUSE_4 Twierdzi, ¿e mo¿esz byæ usuniêty z listy
-lang pl describe EXCUSE_6 Twierdzi, ¿e mo¿esz byæ usuniêty z listy
lang pl describe EXCUSE_REMOVE Pisze, jak mo¿na zostaæ usuniêtym z listy
lang pl describe EXTRA_MPART_TYPE Nag³ówek zawiera nadmiarowy wpis Content-type:...type=
-lang pl describe FAKED_UNDISC_RECIPS Do zawiera sfa³szowane "Undisclosed-Recipients"
lang pl describe FAKE_HELO_EMAIL_COM odpowied¼ HELO hosta nie zgadza siê z rDNS: email.com
lang pl describe FAKE_HELO_EXCITE odpowied¼ HELO hosta nie zgadza siê z rDNS: excite.com
lang pl describe FAKE_HELO_LYCOS odpowied¼ HELO hosta nie zgadza siê z rDNS: lycos.com
@@ -108,7 +105,6 @@
lang pl describe FAKE_HELO_YAHOO_CA odpowied¼ HELO hosta nie zgadza siê z rDNS: yahoo.ca
lang pl describe FIN_FREE Wolno¶æ finansowa
lang pl describe FORGED_AOL_TAGS Programy pocztowe AOL nie potrafi± wysy³aæ HTMLa w tym formacie
-lang pl describe FORGED_GW05_RCVD Znaleziono sfa³szowany nag³ówek Received: ('by gw05')
lang pl describe FORGED_HOTMAIL_RCVD2 Od: hotmail.com, lecz bez 'Received:'
lang pl describe FORGED_IMS_HTML IMS nie potrafi wysy³aæ wiadomo¶ci ca³kowicie w HTML
lang pl describe FORGED_IMS_TAGS Programy pocztowe IMS nie potrafi± wysy³aæ HTMLa w tym formacie
@@ -170,12 +166,10 @@
lang pl describe LIVE_PORN Prawdopodobnie porno - Porno na ¿ywo
lang pl describe LOW_PRICE Najni¿sza cena
lang pl describe MARKETING_PARTNERS Twierdzi, ¿e jeste¶ zarejestrowany jako partner
-lang pl describe MICRO_CAP_WARNING ostrze¿enie SEC
lang pl describe MILLION_USD O milionach dolarów
lang pl describe MIME_BASE64_BLANKS Dodatkowe puste linie kodowane w Base64
lang pl describe MIME_BASE64_TEXT Tekst wiadomo¶ci zakamuflowany przy u¿yciu kodowania Base64
lang pl describe __MIME_BASE64 Zawiera za³±cznik kodowany w Base64
-lang pl describe MIME_BOUND_DIGITS_7 Na granicy MIME widaæ ¶lad narzêdzia spamerskiego
lang pl describe MIME_BOUND_MANY_HEX Na granicy MIME widaæ ¶lad narzêdzia spamerskiego
lang pl describe MIME_CHARSET_FARAWAY zestaw znaków MIME wskazuje na jêzyk obcy
lang pl describe MIME_HEADER_CTYPE_ONLY Znaleziono nag³ówek 'Content-Type' lecz bez nag³ówków MIME
@@ -187,20 +181,13 @@
lang pl describe MISSING_HEADERS Brakuje jednego z nag³ówków: Od, Dd lub Data
lang pl describe MISSING_MIMEOLE Wiadomo¶æ zawiera X-MSMail-Priority, lecz bez X-MimeOLE
lang pl describe MONEY_BACK Gwarancja zwrotu pieniêdzy
-lang pl describe MORTGAGE_BEST Informacje o hipotekach
-lang pl describe MORTGAGE_PITCH Wygl±da na okazjê hipoteczn±
-lang pl describe MORTGAGE_RATES Stawki hipoteczne
lang pl describe MSGID_FROM_MTA_HEADER Message-Id zosta³ dodany przez relay
-lang pl describe MSGID_FROM_MTA_HOTMAIL Message-Id zosta³ dodany przez relay hotmail.com
-lang pl describe MSGID_NO_HOST Message-Id nie zawiera nazwy hosta
lang pl describe MSGID_OUTLOOK_INVALID Sfa³szowany Message-Id (w formacie Outlook Express)
-lang pl describe MSGID_SPAM_99X9XX99 Message-Id generowany programem do SPAMu (wariant 99x9xx99)
lang pl describe MULTI_FORGED Nag³ówki Received: wykazuj± wielokrotne fa³szowanie
lang pl describe NA_DOLLARS O milionie Pó³nocno Amerykañskich dolarów
lang pl describe NO_DNS_FOR_FROM Domena w nag³ówku Do: nie posiada wpisu w DNS (MX lub A)
lang pl describe NO_MEDICAL Bez badañ medycznych
lang pl describe NONEXISTENT_CHARSET Nieznany zestaw znaków (jêzyk).
-lang pl describe NO_OBLIGATION Bez zobowi±zañ
lang pl describe NO_RDNS_DOTCOM_HELO Odpowied¼ HELO hosta pokazuje wielkiego ISP, lecz brakuje rDNS
lang pl describe NOT_ADVISOR Niezarejestrowany doradca inwestycyjny
lang pl describe NUMERIC_HTTP_ADDR U¿ywa kropkowo-dziesiêtnego adresu IP w URL
@@ -213,8 +200,6 @@
lang pl describe RATWARE_EGROUPS Znaleziono oznaczenie przesy³ki masowej (eGroups)
lang pl describe RATWARE_HASH_DASH Zawiera zabezpieczenia przeciwko detekcji spamu w formacie Send-Safe
lang pl describe RATWARE_OE_MALFORMED Nag³ówek X-Mailer podaje z³± wersjê Outlook Express
-lang pl describe RATWARE_RCVD_LC_ESMTP Znaleziono oznaczenie przesy³ki masowej ('esmtp' Received)
-lang pl describe RATWARE_STORM_URI Znaleziono oznaczenie przesy³ki masowej (StormPost)
lang pl describe RCVD_AM_PM Sfa³szowane nag³ówki Received (AM/PM)
lang pl describe RCVD_FAKE_HELO_DOTCOM Nag³ówek Received zawiera sfa³szowan± nazwê hosta HELO
lang pl describe RCVD_IN_BL_SPAMCOP_NET Odebrane od systemu klasy RELAY w/g: bl.spamcop.net
@@ -242,8 +227,6 @@
lang pl describe RCVD_NUMERIC_HELO Received: zawiera numeryczne HELO
lang pl describe REFINANCE_NOW Refinansowanie domów
lang pl describe REFINANCE_YOUR_HOME Refinansowanie domów
-lang pl describe RESISTANCE_IS_FUTILE Opór przeciwko temu spamowi jest daremny
-lang pl describe RISK_FREE "Bez ryzyka". Jaaasneee....
lang pl describe ROUND_THE_WORLD Received: mówi, ¿e list obieg³ ¶wiat dooko³a (DNS)
lang pl describe ROUND_THE_WORLD_LOCAL Received: mówi, ¿e list obieg³ ¶wiat dooko³a (HELO)
lang pl describe SORTED_RECIPS Lista odbiorców posortowana wed³ug adresu
@@ -258,7 +241,6 @@
lang pl describe SUBJ_YOUR_FAMILY Temat: zawiera "Twoja rodzina"
lang pl describe SUSPICIOUS_RECIPS Do: zawiera tê sam± domenê przynajmniej 10 razy.
lang pl describe TO_MALFORMED Do: zawiera uszkodzony adres
-lang pl describe TO_RECIP_MARKER Nag³ówek Do: zawiera znacznik 'recipient'
lang pl describe TRACKER_ID Zawiera numer identyfikacyjny
lang pl describe UNCLAIMED_MONEY (ludzie po prostu rozrzucaj± pieni±dze dooko³a)
lang pl describe UPPERCASE_50_75 Tre¶æ jest w 50-75% wielkimi literami
@@ -272,11 +254,9 @@
lang pl describe USER_IN_MORE_SPAM_TO U¿ytkownik jest wymieniony w 'more_spam_to'
lang pl describe USER_IN_WHITELIST Od: zawiera adres z white-list (bia³ej listy)
lang pl describe USER_IN_WHITELIST_TO U¿ytkownik jest wymieniony w 'whitelist_to'
-lang pl describe WE_HONOR_ALL Twierdzi, ¿e bêdzie honorowa³ ¿±dania usuniêcia
lang pl describe WEIRD_PORT U¿ywa niestandardowego numeru portu dla HTTP
lang pl describe WEIRD_QUOTING Dziwne, powtarzaj±ce siê znaki podwójnego cytowania
lang pl describe WITH_LC_SMTP Linia 'Received' zawiera spamerski podpis (smtp)
-lang pl describe YOU_CAN_SEARCH Mo¿esz szukaæ kogokolwiek

ifplugin Mail::SpamAssassin::Plugin::AntiVirus
lang pl describe MIME_SUSPECT_NAME Nazwa pliku MIME nie zgadza siê z zawarto¶ci±

Modified: spamassassin/trunk/rules/50_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/50_scores.cf?view=diff&rev=494873&r1=494872&r2=494873
==============================================================================
--- spamassassin/trunk/rules/50_scores.cf (original)
+++ spamassassin/trunk/rules/50_scores.cf Wed Jan 10 08:17:44 2007
@@ -44,15 +44,12 @@
score BILLION_DOLLARS 0.001
score BODY_ENHANCEMENT 1.090 0.001 1.163 0.001
score BODY_ENHANCEMENT2 1.821 0.618 2.045 0.736
-score CLICK_BELOW_CAPS 0.001
score CONFIRMED_FORGED 0.690 0.001 1.059 0.001
score CUM_SHOT 2.320 2.095 2.683 2.708
score DATE_SPAMWARE_Y2K 1.859 1.822 1.944 0.745
score DEAR_FRIEND 0.811 0.858 0.976 1.632
score DEAR_SOMETHING 1.605 1.612 1.901 2.100
-score DEEP_DISC_MEDS 1.440 1.132 1.665 1.177
score DIET_1 0.633 0.001 0.485 0.001
-score DIET_2 0.001
score DIGEST_MULTIPLE 0.001 0.233 0.001 0.765
score DRUGS_ANXIETY 1.841 0.001 2.422 0.404
score DRUGS_ANXIETY_EREC 0.657 0.104 1.067 0.234
@@ -76,10 +73,8 @@
score ENGLISH_UCE_SUBJECT 1.415 0.250 1.850 0.740
score EXCUSE_24 1.440 1.520 1.757 1.900
score EXCUSE_4 0.001 0.985 0.001 0.697
-score EXCUSE_6 1.680 1.746 1.930 2.187
score EXCUSE_REMOVE 1.345 0.001 1.573 0.110
score EXTRA_MPART_TYPE 0.847 0.815 0.733 1.091
-score FAKED_UNDISC_RECIPS 0.001 # n=0 n=1 n=2 n=3
score FAKE_HELO_MAIL_COM_DOM 2.160 2.160 2.498 2.700
score FAKE_OUTBLAZE_RCVD 2.480 2.480 2.867 3.100
score FIN_FREE 1.019 0.611 1.313 0.469
@@ -118,12 +113,8 @@
score FROM_STARTS_WITH_NUMS 1.337 0.283 1.829 0.724
score GAPPY_SUBJECT 1.600 1.625 1.785 1.995
score GUARANTEED_100_PERCENT 0.810 0.001 1.392 0.001
-score HDR_ORDER_MTSRIX 0.001 # n=0 n=1 n=2 n=3
-score HDR_ORDER_TRIMRS 1.440 1.440 1.665 1.800
score HEADER_SPAM 3.200 3.115 3.700 3.789
-score HELO_DYNAMIC_ATTBI 2.400 2.400 2.775 2.692
score HELO_DYNAMIC_CHELLO_NL 1.624 0.001 2.035 0.170
-score HELO_DYNAMIC_CHELLO_NO 0.001 # n=0 n=1 n=2 n=3
score HELO_DYNAMIC_DHCP 3.280 2.664 3.792 3.066
score HELO_DYNAMIC_DIALIN 2.080 2.080 2.405 2.600
score HELO_DYNAMIC_HCC 3.280 3.280 3.792 4.100
@@ -133,9 +124,6 @@
score HELO_DYNAMIC_IPADDR2 3.280 3.213 3.792 3.818
score HELO_DYNAMIC_ROGERS 1.840 1.203 2.127 1.580
score HELO_DYNAMIC_SPLIT_IP 2.880 2.880 3.330 2.191
-score HELO_DYNAMIC_TELIA 0.001 # n=0 n=1 n=2 n=3
-score HELO_DYNAMIC_VTR 1.440 1.492 1.757 1.287
-score HELO_DYNAMIC_YAHOOBB 2.240 2.240 2.590 2.800
score HG_HORMONE 1.784 1.472 2.024 2.060
score HIDE_WIN_STATUS 0.001
score HTML_MIME_NO_HTML_TAG 0.001 0.512 0.001 1.082
@@ -165,11 +153,9 @@
score LOW_PRICE 0.001
score MALE_ENHANCE 2.480 2.480 2.867 3.100
score MARKETING_PARTNERS 1.482 1.435 1.757 1.765
-score MICRO_CAP_WARNING 1.200 1.280 1.480 1.462
score MILLION_USD 2.359 1.606 2.824 1.816
score MIME_BOUND_DD_DIGITS 3.600 3.600 4.162 4.500
score MIME_BOUND_DIGITS_15 2.400 2.400 2.775 2.949
-score MIME_BOUND_DIGITS_7 0.001 # n=0 n=1 n=2 n=3
score MIME_BOUND_MANY_HEX 2.160 2.144 2.498 2.700
score MIME_HEADER_CTYPE_ONLY 0.001 0.001 0.182 0.001
score MIME_HTML_ONLY_MULTI 0.001
@@ -178,19 +164,11 @@
score MISSING_SUBJECT 1.729 1.345 2.035 1.816
score MONEY_BACK 0.843 0.001 0.645 0.001
score MORE_SEX 2.240 2.035 2.590 1.950
-score MORTGAGE_BEST 0.001
-score MORTGAGE_PITCH 0.151 0.001 0.001 0.001
-score MORTGAGE_RATES 0.001
score MSGID_DOLLARS_RANDOM 3.200 3.200 3.700 3.780
score MSGID_FROM_MTA_HEADER 0.001 0.001 0.274 0.001
-score MSGID_FROM_MTA_HOTMAIL 0.001 # n=0 n=1 n=2 n=3
-score MSGID_LONG 0.899 0.267 1.188 1.204
score MSGID_MULTIPLE_AT 2.880 1.375 3.187 1.914
-score MSGID_NO_HOST 0.533 0.129 0.787 0.285
score MSGID_RANDY 2.794 2.165 3.412 2.880
score MSGID_SHORT 2.480 2.465 2.821 3.100
-score MSGID_SPAM_99X9XX99 0.001 # n=0 n=1 n=2 n=3
-score MSGID_SPAM_ALPHA_NUM 1.920 1.920 2.220 2.255
score MSGID_SPAM_CAPS 3.520 3.520 4.070 4.400
score MSGID_SPAM_LETTERS 2.400 2.349 2.867 3.021
score MSGID_YAHOO_CAPS 2.466 1.273 2.720 2.399
@@ -200,7 +178,6 @@
score NORMAL_HTTP_TO_IP 0.001
score NOT_ADVISOR 2.160 2.160 2.498 2.700
score NO_MEDICAL 1.200 1.259 1.480 1.363
-score NO_OBLIGATION 0.488 0.303 0.628 0.966
score NO_PRESCRIPTION 3.200 2.888 3.700 3.887
score NUMERIC_HTTP_ADDR 1.253 0.585 1.249 0.472
score OBFUSCATING_COMMENT 0.806 1.117 1.379 1.690
@@ -218,16 +195,12 @@
score RATWARE_MOZ_MALFORMED 1.840 1.820 2.035 1.847
score RATWARE_MPOP_WEBMAIL 0.001 0.118 0.417 0.111
score RATWARE_MS_HASH 2.425 1.379 2.691 1.910
-score RATWARE_NETIP 1.272 0.548 1.497 1.398
score RATWARE_OE_MALFORMED 2.400 2.400 2.775 3.000
score RATWARE_OUTLOOK_NONAME 3.120 1.861 3.471 2.777
score RATWARE_RCVD_AT 2.880 2.590 3.330 2.292
-score RATWARE_RCVD_LC_ESMTP 1.416 0.001 1.500 0.001
score RATWARE_RCVD_PF 2.880 2.880 3.330 3.600
-score RATWARE_STORM_URI 0.001 # n=0 n=1 n=2 n=3
score RATWARE_ZERO_TZ 3.280 3.087 3.792 3.196
score RCVD_AM_PM 1.760 1.726 2.035 1.662
-score RCVD_BONUS_SPC_DATE 0.001 # n=0 n=1 n=2 n=3
score RCVD_DOUBLE_IP_LOOSE 0.163 0.001 0.293 0.001
score RCVD_DOUBLE_IP_SPAM 3.506 3.455 4.070 3.690
score RCVD_FAKE_HELO_DOTCOM 2.160 1.652 2.590 2.281
@@ -241,8 +214,6 @@
score REPTO_QUOTE_MSN 2.800 2.800 3.237 3.249
score REPTO_QUOTE_QUALCOMM 0.343 0.001 0.221 0.001
score REPTO_QUOTE_YAHOO 2.126 2.181 3.428 2.124
-score RESISTANCE_IS_FUTILE 0.001 # n=0 n=1 n=2 n=3
-score RISK_FREE 0.001
score RUDE_HTML 2.344 1.362 2.902 2.041
score SPOOF_COM2COM 2.320 1.938 2.683 2.450
score SPOOF_COM2OTH 0.537 0.001 0.001 0.001
@@ -256,14 +227,12 @@
score SUBJECT_DRUG_GAP_VA 2.437 2.442 2.743 2.619
score SUBJECT_DRUG_GAP_X 2.262 2.334 2.447 2.401
score SUBJECT_SEXUAL 2.160 2.160 2.498 2.684
-score SUBJ_2_NUM_PARENS 0.952 1.074 1.026 1.206
score SUBJ_AS_SEEN 1.511 0.001 1.757 0.001
score SUBJ_BUY 1.311 0.116 0.701 0.255
score SUBJ_DOLLARS 0.650 0.381 0.636 0.301
score SUBJ_YOUR_DEBT 1.405 0.577 1.757 1.106
score SUBJ_YOUR_FAMILY 1.600 0.338 1.850 1.157
score TO_MALFORMED 0.001
-score TO_RECIP_MARKER 1.044 1.033 1.168 1.038
score TRACKER_ID 2.000 1.295 2.292 1.032
score UNCLAIMED_MONEY 1.920 1.920 2.220 2.400
score UNCLOSED_BRACKET 2.480 2.480 2.867 2.900
@@ -275,19 +244,16 @@
score URI_NO_WWW_BIZ_CGI 2.480 2.480 2.867 3.000
score URI_NO_WWW_INFO_CGI 3.280 3.241 3.792 4.100
score URI_UNSUBSCRIBE 2.560 2.069 2.809 3.200
-score URI_UPPER_LOWER 2.080 2.080 2.405 2.600
score US_DOLLARS_3 0.214 0.001 0.152 0.001
score VIA_GAP_GRA 2.480 2.419 2.867 2.529
score WEIRD_PORT 0.001
score WEIRD_QUOTING 1.120 1.200 1.295 1.341
-score WE_HONOR_ALL 1.190 1.196 1.169 1.221
score WITH_LC_SMTP 1.440 1.440 1.665 1.621
score X_IP 2.803 1.848 3.286 2.305
score X_MESSAGE_INFO 3.520 3.520 4.070 4.400
score X_PRIORITY_CC 2.320 2.320 2.683 2.900
score YAHOO_DRS_REDIR 1.007 0.313 1.189 1.103
score YAHOO_RD_REDIR 0.001 # n=0 n=1 n=2 n=3
-score YOU_CAN_SEARCH 0.001 # n=0 n=1 n=2 n=3

# End of generated scores. </gen:mutable>

@@ -422,7 +388,6 @@
score DATE_IN_PAST_12_24 0.960 0.881 1.036 1.247
score DATE_IN_PAST_24_48 0.801 0.805 0.976 0.880
score DATE_IN_PAST_96_XX 1.752 1.572 2.101 2.020
-score FORGED_GW05_RCVD 0.001 # n=0 n=1 n=2 n=3
score FORGED_HOTMAIL_RCVD2 1.653 0.549 2.127 1.162
score FORGED_YAHOO_RCVD 1.506 0.928 1.794 1.849
score FROM_ILLEGAL_CHARS 3.280 3.280 3.792 4.100