1 # This configuration file alters scores of different tests
3 # use newer score and rules, but don't override our own scores
4 # which is why the scores are divided with a hundred, duh --joy, 2004-05-27
5 score CHARSET_FARAWAY 0.03
6 # score CHARSET_FARAWAY_HEADERS 0.02
7 score CHARSET_FARAWAY_HEADER 0.02
8 score HTML_CHARSET_FARAWAY 0.005
9 score MIME_CHARSET_FARAWAY 0.02
10 # score UNDESIRED_LANGUAGE_BODY 0.03
11 score UNWANTED_LANGUAGE_BODY 0.03
12 #score BODY_8BITS 1.500
13 # give it another shot with a low score.
14 score USER_IN_WHITELIST -1
15 score LDOSUBSCRIBER -6
16 score FROM_AND_TO_SAME 4.097 3.826 4.197 3.464
17 # score MASS_EMAIL 2.0 2.0 2.0 2.482
18 # score BASE64_ENC_TEXT 4.354 3.643 3.544 3.768
19 score HTML_WEB_BUGS 2.542 2.100 2.100 2.100
20 score EXCUSE_10 2.069 2.0 2.0 2.0
21 score MIME_HTML_ONLY 4
22 # score CLICK_BELOW 2.489 2.101 2.100 2
23 score CLICK_BELOW_CAPS 2.639 2.500 2.100 2.500
24 score NORMAL_HTTP_TO_IP 2.3
25 # score HTML_LINK_CLICK_HERE 2.100
26 # score HTML_JAVASCRIPT 2 2 2 2.230
27 score MAILTO_TO_REMOVE 1.274 1.299 1.092 1.273
28 score MISSING_MIMEOLE 1.501 1.501 1.241 1.100
29 score HTTP_EXCESSIVE_ESCAPES 2.101 2.566 2.208 2.918
30 # score MICROSOFT_EXECUTABLE 1.1
31 score MIME_SUSPECT_NAME 1.1
32 score HTML_MESSAGE 1.112 1.101 1.100 1.0
33 # score HTML_WIN_OPEN 1.500 1.501 1.501 1.578
34 # score JAVASCRIPT_URI 1.0 1.017 1.0 1.0
35 score MAILTO_TO_SPAM_ADDR 1.606 1.377 1.795 1.676
36 # score HTML_FONT_COLOR_UNSAFE 1
37 # score HTML_FONT_COLOR_RED 1
38 # score HTML_FONT_COLOR_BLUE 1
39 # score HTML_FONT_COLOR_GREEN 1
40 # score HTML_FONT_COLOR_GRAY 1
42 # score MAILTO_WITH_SUBJ_REMOVE 2.101 1.500 2.100 1.500
43 # score REMOVE_FROM_LIST 1
44 # score REMOVE_IN_QUOTES 1.001 1.197 1.001 1.301
45 score REMOVE_PAGE 1.313 1.265 1.675 1.401
46 # score EARN_MONEY 1.950 2.018 1.379 1.949
48 score DNS_FROM_RFC_DSN 4
49 score DNS_FROM_RFC_BOGUSMX 2.5
50 score DNS_FROM_RFC_POST 2.44
51 # score RCVD_IN_DYNABLOCK 0
52 score RCVD_IN_NJABL_DUL 0
53 score FORGED_MUA_OUTLOOK 3.717 3.476 3.850 2.173
55 # score RAZOR2_CF_RANGE_11_50 4
56 score RAZOR2_CF_RANGE_51_100 4
58 score BAYES_00 0 0 -2 -2
59 # score BAYES_01 0 0 -2 -2
60 # score BAYES_10 0 0 -1 -1
61 score BAYES_20 0 0 -1 -1
62 # score BAYES_30 0 0 -1 -1
67 score BAYES_60 0 0 1 1
68 # score BAYES_70 0 0 1 1
69 score BAYES_80 0 0 1 1
70 # score BAYES_90 0 0 2 2
71 score BAYES_95 0 0 2 2
72 # score BAYES_99 0 0 3 3
75 # don't trust RBLs so much, esp. not dialup lists, moved them towards 0
77 score RCVD_IN_RFCI 0.0 0.1 0.0 0.092
78 score RCVD_IN_ORBS 0.0 0.0 0.0 0.114
79 score RCVD_IN_UNCONFIRMED_DSBL 0.0 0.012 0.0 0.0
80 score RCVD_IN_NJABL 0.0 0.053 0.0 0.344
81 # relays.osirusoft.com is gone --joy, 2003-08-27
82 # score RCVD_IN_OSIRUSOFT_COM 0
83 score RCVD_IN_SORBS 0.2
84 # sometimes kills off valid excite etc users, and doesn't detect much spam
85 # so -1 point from 2.55 default --joy, 2003-07-19
86 score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434
87 # score RCVD_FAKE_HELO_DOTCOM_2 1.335 1.404 0.221 1.799
89 # Upped some rules which only seem to happen in spam. Suggestion from Santiago
92 score HTML_FONT_BIG 3.0
93 # score HTML_IMAGE_ONLY 3.0
94 score MIME_MISSING_BOUNDARY 3.0
95 score MIME_HTML_MOSTLY 3.0
96 # score DATE_IN_FUTURE 3.0
97 score INVALID_DATE_TZ_ABSURD 3.0
98 score MSGID_FROM_MTA_HEADER 3.0
100 # This only seems to happen in spam as well
101 score HTML_FONT_FACE_BAD 3.0
103 # score RCVD_IN_OSIRUSOFT_COM 0
104 score RCVD_IN_SORBS 0.2
105 score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434
106 # score RCVD_FAKE_HELO_DOTCOM_2 1.335 1.404 0.221 1.799
107 score HTML_FONT_BIG 3.0
108 # score HTML_IMAGE_ONLY 3.0
109 score MIME_MISSING_BOUNDARY 3.0
110 score MIME_HTML_MOSTLY 3.0
111 # score DATE_IN_FUTURE 3.0