# This configuration file alters scores of different tests # use newer score and rules, but don't override our own scores # which is why the scores are divided with a hundred, duh --joy, 2004-05-27 score CHARSET_FARAWAY 0.03 # score CHARSET_FARAWAY_HEADERS 0.02 score CHARSET_FARAWAY_HEADER 0.02 score HTML_CHARSET_FARAWAY 0.005 score MIME_CHARSET_FARAWAY 0.02 # score UNDESIRED_LANGUAGE_BODY 0.03 score UNWANTED_LANGUAGE_BODY 0.03 #score BODY_8BITS 1.500 # give it another shot with a low score. score USER_IN_WHITELIST -1 score LDOSUBSCRIBER -6 #score FROM_AND_TO_SAME 4.097 3.826 4.197 3.464 # score MASS_EMAIL 2.0 2.0 2.0 2.482 # score BASE64_ENC_TEXT 4.354 3.643 3.544 3.768 # score EXCUSE_10 2.069 2.0 2.0 2.0 score MIME_HTML_ONLY 4 # score CLICK_BELOW 2.489 2.101 2.100 2 # score CLICK_BELOW_CAPS 2.639 2.500 2.100 2.500 score NORMAL_HTTP_TO_IP 2.3 # score HTML_LINK_CLICK_HERE 2.100 # score HTML_JAVASCRIPT 2 2 2 2.230 score MAILTO_TO_REMOVE 1.274 1.299 1.092 1.273 score MISSING_MIMEOLE 1.501 1.501 1.241 1.100 score HTTP_EXCESSIVE_ESCAPES 2.101 2.566 2.208 2.918 # score MICROSOFT_EXECUTABLE 1.1 #score MIME_SUSPECT_NAME 1.1 score HTML_MESSAGE 1.112 1.101 1.100 1.0 # score HTML_WIN_OPEN 1.500 1.501 1.501 1.578 # score JAVASCRIPT_URI 1.0 1.017 1.0 1.0 score MAILTO_TO_SPAM_ADDR 1.606 1.377 1.795 1.676 # score HTML_FONT_COLOR_UNSAFE 1 # score HTML_FONT_COLOR_RED 1 # score HTML_FONT_COLOR_BLUE 1 # score HTML_FONT_COLOR_GREEN 1 # score HTML_FONT_COLOR_GRAY 1 # score UNSUB_PAGE 1 # score MAILTO_WITH_SUBJ_REMOVE 2.101 1.500 2.100 1.500 # score REMOVE_FROM_LIST 1 # score REMOVE_IN_QUOTES 1.001 1.197 1.001 1.301 score REMOVE_PAGE 1.313 1.265 1.675 1.401 # score EARN_MONEY 1.950 2.018 1.379 1.949 # score EARN_PER_WEEK 1 score DNS_FROM_RFC_DSN 4 score DNS_FROM_RFC_BOGUSMX 2.5 score DNS_FROM_RFC_POST 2.44 # score RCVD_IN_DYNABLOCK 0 score RCVD_IN_NJABL_DUL 0 score FORGED_MUA_OUTLOOK 3.717 3.476 3.850 2.173 score RAZOR2_CHECK 1 # score RAZOR2_CF_RANGE_11_50 4 score RAZOR2_CF_RANGE_51_100 4 score PYZOR_CHECK 2 score BAYES_00 0 0 -2 -2 # score BAYES_01 0 0 -2 -2 # score BAYES_10 0 0 -1 -1 score BAYES_20 0 0 -1 -1 # score BAYES_30 0 0 -1 -1 score BAYES_40 0 # score BAYES_44 0 score BAYES_50 0 # score BAYES_56 0 score BAYES_60 0 0 1 1 # score BAYES_70 0 0 1 1 score BAYES_80 0 0 1 1 # score BAYES_90 0 0 2 2 score BAYES_95 0 0 2 2 # score BAYES_99 0 0 3 3 score BAYES_99 4 # sometimes kills off valid excite etc users, and doesn't detect much spam # so -1 point from 2.55 default --joy, 2003-07-19 score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434 # score RCVD_FAKE_HELO_DOTCOM_2 1.335 1.404 0.221 1.799 # Upped some rules which only seem to happen in spam. Suggestion from Santiago # --pasc 2004-05-23 # score HTML_FONT_BIG 3.0 # score HTML_IMAGE_ONLY 3.0 # score MIME_MISSING_BOUNDARY 3.0 score MIME_HTML_MOSTLY 3.0 # score DATE_IN_FUTURE 3.0 score INVALID_DATE_TZ_ABSURD 3.0 score MSGID_FROM_MTA_HEADER 3.0 # This only seems to happen in spam as well score HTML_FONT_FACE_BAD 3.0 score RCVD_FAKE_HELO_DOTCOM 0.791 1.606 1.264 2.434 # score RCVD_FAKE_HELO_DOTCOM_2 1.335 1.404 0.221 1.799 # score HTML_FONT_BIG 3.0 # score HTML_IMAGE_ONLY 3.0 # score MIME_MISSING_BOUNDARY 3.0 score MIME_HTML_MOSTLY 3.0 # score DATE_IN_FUTURE 3.0 # This rule is wrong; it matches messages which have multi-line # encoded subjects # score SUBJECT_ENCODED_TWICE 0