# give it another shot with a low score.
score USER_IN_WHITELIST -1
score LDOSUBSCRIBER -6
-score FROM_AND_TO_SAME 4.097 3.826 4.197 3.464
+#score FROM_AND_TO_SAME 4.097 3.826 4.197 3.464
# score MASS_EMAIL 2.0 2.0 2.0 2.482
# score BASE64_ENC_TEXT 4.354 3.643 3.544 3.768
-score HTML_WEB_BUGS 2.542 2.100 2.100 2.100
-score EXCUSE_10 2.069 2.0 2.0 2.0
+# score EXCUSE_10 2.069 2.0 2.0 2.0
score MIME_HTML_ONLY 4
# score CLICK_BELOW 2.489 2.101 2.100 2
-score CLICK_BELOW_CAPS 2.639 2.500 2.100 2.500
+# score CLICK_BELOW_CAPS 2.639 2.500 2.100 2.500
score NORMAL_HTTP_TO_IP 2.3
# score HTML_LINK_CLICK_HERE 2.100
# score HTML_JAVASCRIPT 2 2 2 2.230
score MISSING_MIMEOLE 1.501 1.501 1.241 1.100
score HTTP_EXCESSIVE_ESCAPES 2.101 2.566 2.208 2.918
# score MICROSOFT_EXECUTABLE 1.1
-score MIME_SUSPECT_NAME 1.1
+#score MIME_SUSPECT_NAME 1.1
score HTML_MESSAGE 1.112 1.101 1.100 1.0
# score HTML_WIN_OPEN 1.500 1.501 1.501 1.578
# score JAVASCRIPT_URI 1.0 1.017 1.0 1.0
# score REMOVE_IN_QUOTES 1.001 1.197 1.001 1.301
score REMOVE_PAGE 1.313 1.265 1.675 1.401
# score EARN_MONEY 1.950 2.018 1.379 1.949
-score EARN_PER_WEEK 1
+# score EARN_PER_WEEK 1
score DNS_FROM_RFC_DSN 4
score DNS_FROM_RFC_BOGUSMX 2.5
score DNS_FROM_RFC_POST 2.44
score RAZOR2_CF_RANGE_51_100 4
score PYZOR_CHECK 2
score BAYES_00 0 0 -2 -2
+score BAYES_05 0 0 -1.5 -1.5
# score BAYES_01 0 0 -2 -2
# score BAYES_10 0 0 -1 -1
score BAYES_20 0 0 -1 -1
# score BAYES_30 0 0 -1 -1
-score BAYES_40 0
+score BAYES_40 -0.01
# score BAYES_44 0
score BAYES_50 0
# score BAYES_56 0
# score BAYES_99 0 0 3 3
score BAYES_99 4
-# don't trust RBLs so much, esp. not dialup lists, moved them towards 0
-# --joy, 2003-07-19
-score RCVD_IN_RFCI 0.0 0.1 0.0 0.092
-score RCVD_IN_ORBS 0.0 0.0 0.0 0.114
-score RCVD_IN_UNCONFIRMED_DSBL 0.0 0.012 0.0 0.0
-score RCVD_IN_NJABL 0.0 0.053 0.0 0.344
-# relays.osirusoft.com is gone --joy, 2003-08-27
-# score RCVD_IN_OSIRUSOFT_COM 0
-score RCVD_IN_SORBS 0.2
# sometimes kills off valid excite etc users, and doesn't detect much spam
# so -1 point from 2.55 default --joy, 2003-07-19
score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434
# Upped some rules which only seem to happen in spam. Suggestion from Santiago
# --pasc 2004-05-23
-score HTML_FONT_BIG 3.0
+# score HTML_FONT_BIG 3.0
# score HTML_IMAGE_ONLY 3.0
-score MIME_MISSING_BOUNDARY 3.0
+# score MIME_MISSING_BOUNDARY 3.0
score MIME_HTML_MOSTLY 3.0
# score DATE_IN_FUTURE 3.0
score INVALID_DATE_TZ_ABSURD 3.0
# This only seems to happen in spam as well
score HTML_FONT_FACE_BAD 3.0
-# score RCVD_IN_OSIRUSOFT_COM 0
-score RCVD_IN_SORBS 0.2
score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434
# score RCVD_FAKE_HELO_DOTCOM_2 1.335 1.404 0.221 1.799
-score HTML_FONT_BIG 3.0
+# score HTML_FONT_BIG 3.0
# score HTML_IMAGE_ONLY 3.0
-score MIME_MISSING_BOUNDARY 3.0
+# score MIME_MISSING_BOUNDARY 3.0
score MIME_HTML_MOSTLY 3.0
# score DATE_IN_FUTURE 3.0
+
+# This rule is wrong; it matches messages which have multi-line
+# encoded subjects
+# score SUBJECT_ENCODED_TWICE 0
+
+score FH_HOST_ALMOST_IP 2.0
+score SUSPICIOUS_RECIPS 0.5