[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-devel
Subject:    [auto] bad sandbox rules report
From:       nobody () spamassassin ! apache ! org (Rules Report Cron)
Date:       2009-02-25 8:30:38
Message-ID: 200902250830.n1P8UcE4024718 () spamassassin ! zones ! apache ! org
[Download RAW message or body]

HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

plugin: failed to create instance of plugin \
Mail::SpamAssassin::Plugin::Sandbox::hstern: Can't locate object method "new" via \
package "Mail::SpamAssassin::Plugin::Sandbox::hstern" (perhaps you forgot to load \
"Mail::SpamAssassin::Plugin::Sandbox::hstern"?) at (eval 275) line 1.


rulesrc/sandbox/mmartinec/25_yg.cf (17 rules, 17 bad):

  NOTVALID_GMAIL:  bad, avg S/O=0.33 avg Spam%=0.20 avg Ham%=0.41
  NOTVALID_PAY:  bad, avg S/O=0.14 avg Spam%=0.05 avg Ham%=0.28
  NOTVALID_YAHOO:  bad, avg S/O=0.58 avg Spam%=0.98 avg Ham%=0.70
  __AUTH_EBAY:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.24
      # used in: NOTVALID_PAY
  __AUTH_GMAIL:  bad, avg S/O=0.02 avg Spam%=0.21 avg Ham%=9.03
      # used in: NOTVALID_GMAIL
  __AUTH_PAYPAL:  bad, avg S/O=0.45 avg Spam%=0.03 avg Ham%=0.04
      # used in: NOTVALID_PAY
  __AUTH_YAHOO:  bad, avg S/O=0.20 avg Spam%=0.98 avg Ham%=3.91
      # used in: NOTVALID_YAHOO
  __AUTH_YAHOO1:  bad, avg S/O=0.20 avg Spam%=0.55 avg Ham%=2.23
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO2:  bad, avg S/O=0.77 avg Spam%=0.12 avg Ham%=0.03
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO3:  bad, avg S/O=0.23 avg Spam%=0.21 avg Ham%=0.72
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO4:  bad, avg S/O=0.10 avg Spam%=0.11 avg Ham%=0.92
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%Q.97
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%d.35
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%W.46
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML4:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%2.44
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%".21
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __VIA_ML:  bad, avg S/O=0.00 avg Spam%=0.09 avg Ham%f.61
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO

rulesrc/sandbox/mmartinec/20_misc.cf (14 rules, 6 bad):

  CR_IN_SUBJ:  no hits at all
  FROM_UNBAL2:  no hits at all
  LONGLINE:  bad, avg S/O=0.06 avg Spam%=0.04 avg Ham%=0.62
  MSGID_NOFQDN2:  bad, avg S/O=0.51 avg Spam%.20 avg Ham%=9.97
  RP_8BIT:  no hits at all
  RP_LASTNAME:  no hits at all

rulesrc/sandbox/mkettler/25_uribl.cf (5 rules, 5 bad):

  T_SURBL_MULTI1:  no hits at all
  T_SURBL_MULTI2:  no hits at all
  T_SURBL_MULTI3:  no hits at all
  T_SURBL_MULTI4:  no hits at all
  T_URIBL_BLACK_OVERLAP:  no hits at all

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_doc_test.cf (5 rules, 5 bad):

  FSL_MAILER_NO_MID:  no hits of target type
  FSL_MID_DM_1:  no hits at all
  FSL_MID_DM_2:  no hits at all
  FSL_MID_DM_3:  no hits at all
  FSL_PRECEDENCE:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%7.07

rulesrc/sandbox/kmcgrail/80_deadrules.cf (2 rules, 2 bad):

  KAM_STOCKOTC:  no hits at all
  KAM_STOCKTIP15:  no hits at all

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.35 avg Spam%=1.78 avg Ham%=3.34
  __KAM_MX3:  bad, avg S/O=0.35 avg Spam%=1.78 avg Ham%=3.34
      # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (43 rules, 21 bad):

  KAM_1LINE:  no hits at all
  KAM_ABOUT:  no hits at all
  KAM_ADVERT:  no hits at all
  KAM_BIZ:  no hits at all
  KAM_FAST:  no hits at all
  KAM_GIFT:  no hits at all
  KAM_REPLACE:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.57
  __KAM_1LINE1:  no hits at all
      # used in: KAM_1LINE
  __KAM_1LINE2:  no hits at all
      # used in: KAM_1LINE
  __KAM_ABOUT1:  no hits at all
      # used in: KAM_ABOUT
  __KAM_ABOUT2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.19
      # used in: KAM_ABOUT
  __KAM_ADVERT2:  no hits at all
      # used in: KAM_ADVERT
  __KAM_ADVERT3:  no hits at all
      # used in: KAM_ADVERT
  __KAM_ADVERT4:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
      # used in: KAM_ADVERT
  __KAM_BIZ1:  no hits at all
      # used in: KAM_BIZ
  __KAM_BIZ2:  no hits at all
      # used in: KAM_BIZ
  __KAM_FAST1:  no hits at all
      # used in: KAM_FAST
  __KAM_GIFT1:  no hits at all
      # used in: KAM_GIFT
  __KAM_GIFT2:  no hits at all
      # used in: KAM_GIFT
  __KAM_REP1:  no hits at all
      # used in: KAM_REPLACE
  __KAM_REP2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.57
      # used in: KAM_REPLACE

rulesrc/sandbox/kb/70_misc.cf (23 rules, 6 bad):

  OPERA_MID_NON_OP:  no hits at all
  OPERA_MID_NO_DIGIT:  no hits at all
  THREAD_INDEX_HEX:  no hits at all
  __OPERA_MID_NON_OP:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.08
      # used in: OPERA_MID_NON_OP
  __OPERA_MID_NO_DIGIT:  bad, avg S/O=0.16 avg Spam%=0.10 avg Ham%=0.53
      # used in: OPERA_MID_NO_DIGIT
  __OPERA_MUA:  no hits of target type
      # used in: OPERA_MID_NON_OP OPERA_MID_NO_DIGIT

rulesrc/sandbox/jm/80_sane.cf (150 rules, 97 bad):

  SANE_059b23f04690d144449b7c99a6c6cd4b:  no hits at all
  SANE_06c7a4732c1f84900776ed70b0c46622:  no hits at all
  SANE_0c3c2453c66df7c8df280ebdad248db4:  no hits at all
  SANE_0c64855d6ff8427a5506a57eaa7f23e4:  no hits at all
  SANE_0ca06ee38f5fa72293cb01412fd1366d:  no hits at all
  SANE_0e2fd237a2457014b4a604fb11e12351:  no hits at all
  SANE_0efc520389d9917a40993e4547f8df6e:  no hits at all
  SANE_13b84073c47e1430d28f6852310f1e24:  no hits at all
  SANE_15127c727eaa11887f10cbec9ac59c24:  no hits at all
  SANE_1bcdb8d4cae5f7cfefe310b3fce37407:  no hits at all
  SANE_1e4a68ee6f864251df2bd2c2820805ea:  no hits at all
  SANE_211b07d6a6bbd0d831c37df3ac112238:  no hits at all
  SANE_22fd419db2276a962b097aec535f2714:  no hits at all
  SANE_241cd925b00cea31560e3a0a88292867:  no hits at all
  SANE_26a68f03f5905d9a620f0c60593598d2:  no hits at all
  SANE_288f8016d836af09d6d57034b52fc5f6:  no hits at all
  SANE_29466e3bbdb72fcad000bf00469b265c:  no hits at all
  SANE_2b173a7fb7518c75ac8a2d294d773fd8:  no hits at all
  SANE_3325b1231e51c0ba56c4034e2d775e02:  no hits at all
  SANE_350e3965f0c4efe66a6c43cfbe754b95:  no hits at all
  SANE_391bf5f63e3ab72e7f461b71f06eee80:  no hits at all
  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.53 avg Spam%=0.02 avg \
Ham%=0.02  SANE_3d1f8fc21841dac2a36473f1107539a3:  no hits at all
  SANE_4172e4d67852fe8e244b3ac23cd050a9:  no hits at all
  SANE_419197d1acf66526fd3096a7a243134b:  no hits at all
  SANE_429d184419724f2bb2dbfbb404c297f4:  no hits at all
  SANE_443ff86490ee315e02f9785f491b7bfd:  no hits at all
  SANE_4739448258e184b1415951775d4139ef:  no hits at all
  SANE_473ec8514c75992d5a9110363228bb33:  no hits at all
  SANE_4b127090f1ed198ef8007d8512cb0891:  no hits at all
  SANE_4f2004959aace5750bf8c6a1f8fdbad6:  no hits at all
  SANE_55a2e1f9afe27d0ecb210aded5350671:  no hits at all
  SANE_5b5adce1bd3865823ba98acc250e9ce6:  no hits at all
  SANE_5d45e71013e1bf6aa9c7f86d6cf21c0d:  no hits at all
  SANE_5df29067745223c48001d8db1ac686ab:  no hits at all
  SANE_625f77feaf525ad9ee0f7590649d4453:  no hits at all
  SANE_653e67146756b80ed03c5c123c8ce4dc:  no hits at all
  SANE_6d9b8dc22bdd1854958861e40ed01743:  no hits at all
  SANE_73d004f5ed3490d977cdcdbe924a5bf6:  no hits at all
  SANE_75491b468ec2e117e50f9842d32abfab:  no hits at all
  SANE_770d974c14c048fb546c992159408021:  no hits at all
  SANE_77540077455aeadd911f2a12a5b5eaf5:  no hits at all
  SANE_77f4546a65a146a12097c4d4222d9f4d:  no hits at all
  SANE_79ad75801cd5de32db3be5722cae69fc:  no hits at all
  SANE_7fc237f66e3978374a82bd42e3282c5d:  no hits at all
  SANE_817ff97bb8d9691f8ca9ccd2fabfbefb:  no hits at all
  SANE_85aedb78d0c7892c53cd35180d6d3972:  no hits at all
  SANE_8ff4365fd7663aaa089f175a6fb9d9c5:  no hits at all
  SANE_961bc5f601b900d14e5c17db6bea8673:  no hits at all
  SANE_970bca3528887c0b4e6a1e0d63d20450:  no hits at all
  SANE_98cad0aed53b13a2e01a9f8b55a91599:  no hits at all
  SANE_99c9d1f4909bb06f6993803835b323a8:  no hits at all
  SANE_9ccf63bd21526610a1e5766b4a5a66df:  no hits at all
  SANE_9ec550620e083178d3bcc9d653324939:  bad, avg S/O=0.68 avg Spam%=0.08 avg \
Ham%=0.04  SANE_9f754392a8c622a3eb2ef735b6b00c3b:  no hits at all
  SANE_a0f55c2936d8123b36954e9ee7de0a28:  no hits at all
  SANE_a348ed32eed4ec927e4e6fc579da7586:  no hits at all
  SANE_a6b4228229a0cbfe4e08052606f0222b:  no hits at all
  SANE_a995172edaf283f69547eab5551dcc00:  no hits at all
  SANE_af2f58d5e4002bcd31ef44b83569de4b:  no hits at all
  SANE_b09e89045a67f8aaed77e9ef430ed68d:  no hits at all
  SANE_b10b847773f344411d84aee4433f9930:  no hits at all
  SANE_b12099b9ad9b0db25d01e61276fefab5:  no hits at all
  SANE_b1666f872e931b52d09c9f2b601712c3:  no hits at all
  SANE_b55928166b7dd86d82e1a0675ca2b1d0:  no hits at all
  SANE_b74c14c03c2502118c8807a607a5744a:  no hits at all
  SANE_b792624f953fe7bac1bcaf051bea903f:  no hits at all
  SANE_be5d4555e028d1b8bc3c17415b5fce95:  no hits at all
  SANE_c256beae85d9b81958cd20ce9d24fe7b:  no hits at all
  SANE_c2e7be51eecf941517f318ee39150b12:  no hits at all
  SANE_c5e5a37703662e0ddb9ade84fbec87a0:  no hits at all
  SANE_c97e4079b46b2915d66cea44b79f17c5:  no hits at all
  SANE_c9867f8f421f5cc77866438bcbcd0564:  no hits at all
  SANE_cc2d7802858f0341d301b7f2d3c9c7c2:  no hits at all
  SANE_ce7a8ca9858b4f0806b3bbca7bdc595c:  no hits at all
  SANE_d1ef7f3b64327d9d1c3535a0b7d7de11:  no hits at all
  SANE_d793965619441891f0b620c084d2d600:  no hits at all
  SANE_dbcae43bbc8bcf65efc826c058a76954:  no hits at all
  SANE_df300736ee1d0723e9e9361846d6350e:  no hits at all
  SANE_e0b42866efae083b5d78a87e2e6710e9:  no hits of target type
  SANE_e1dda269f3dd1d78c4d0e6d154e2c76c:  no hits at all
  SANE_e25abff035c05b7ff829d5f599a90340:  no hits at all
  SANE_e2ae2c84e02091f07fa6f6fa5fbf5f56:  no hits at all
  SANE_e3634fb4bb521c6a312bb1d001c20a1d:  bad, avg S/O=0.79 avg Spam%=0.05 avg \
Ham%=0.01  SANE_e4fa59cc2a88295a3bd2c84e67564be7:  no hits at all
  SANE_e761c503a58719e688c96a3ee254fbce:  bad, avg S/O=0.03 avg Spam%=0.01 avg \
Ham%=0.39  SANE_e9470267063d9892fd9da5697e7fdd5f:  no hits at all
  SANE_eab2266c69bb04051617e2559fd196d9:  no hits at all
  SANE_ec20496617c80edc5fea24737f73bdc7:  no hits at all
  SANE_f103e97140c3b2a483cd702f35e2a38c:  no hits at all
  SANE_f71a6e07c3f770cd68f363db8526de0b:  no hits at all
  SANE_fb4053a5b92a05b0cd322a34ab76561c:  no hits at all
  SANE_m150552353f7eaba57a4da76c2a82098d:  no hits at all
  SANE_m5372bd5260d3e6022b05cc794a288a72:  no hits at all
  SANE_m614d8dba879f47d3fe5ffbde4aa8d8a7:  no hits at all
  SANE_m72c8fe9fa7167078ff0b441e95bcb586:  no hits at all
  SANE_mb49329effea35453d098d577cddd778f:  no hits at all

rulesrc/sandbox/jm/70_tt_drugs.cf (12 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_XANAX:  no hits at all

rulesrc/sandbox/jm/20_xmailer.cf (128 rules, 4 bad):

  XMAILER_MIMEOLE_OL_72641:  no hits at all
  XMAILER_MIMEOLE_OL_A842E:  no hits at all
  __MO_OL_72641:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
      # used in: XMAILER_MIMEOLE_OL_72641
  __MO_OL_A842E:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
      # used in: XMAILER_MIMEOLE_OL_A842E

rulesrc/sandbox/jm/20_storm.cf (2 rules, 2 bad):

  GMD_R_DOT_HTML:  no hits at all
  JM_MID_STORM:  no hits at all

rulesrc/sandbox/jm/20_sought.cf (1 rules, 1 bad):

  JM_SOUGHT_1:  no hits at all

rulesrc/sandbox/jm/20_games.cf (3 rules, 3 bad):

  GAMES:  no hits at all
  __GAMES_BODY:  no hits at all
      # used in: GAMES
  __GAMES_SUBJ:  no hits at all
      # used in: GAMES

rulesrc/sandbox/jm/20_basic.cf (109 rules, 51 bad):

  AB_TEST_PDF4:  no hits at all
  CARD_DIRECT_WWW_ADDRESS:  no hits at all
  CTYPE_001C_A:  no hits at all
  CURR_PRICE:  no hits of target type
  DUH_DIKSBJ:  no hits at all
  DVLABS_GOZI_PDF:  no hits at all
  FAKE_OUTBLAZE_RCVD_168:  no hits at all
  FAKE_OUTBLAZE_RCVD_168_2:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  IMG_ALT_HSPACE_CID_ALIGN:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
  IMG_CID_PART1:  no hits at all
  JM_0800_GMT:  no hits at all
  JM_GMT_RCVD:  no hits at all
  JM_I_FEEL_LUCKY:  no hits at all
  JM_NICE_GIRL:  no hits at all
  JM_RCVD_QMAILV1:  no hits at all
  JM_REMOVE_FROM_URL:  no hits at all
  JM_TORA_XM:  no hits at all
  MID_DEGREES:  no hits at all
  MIME_BOUND_EQ_REL:  no hits of target type
  MSHTML_6_00_2900_3199_A:  no hits at all
  MSHTML_6_00_2900_3199_B:  no hits at all
  MSHTML_6_00_2900_3199_C:  no hits at all
  MSNBC_HDR_ORDER:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.37
  OE_MULTIPART_RELATED:  bad, avg S/O=0.71 avg Spam%=0.33 avg Ham%=0.13
  PART_CID_STOCK:  bad, avg S/O=0.67 avg Spam%=0.25 avg Ham%=0.12
  PART_CID_STOCK_LESS:  bad, avg S/O=0.24 avg Spam%=0.02 avg Ham%=0.07
  RCVD_FORGED_WROTE:  no hits at all
  SB_GIF_AND_NO_URIS:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
  STOCK_IMG_OUTLOOK:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
  STOX_AND_PRICE:  no hits at all
  STOX_BOUND_090909_B:  bad, avg S/O=0.23 avg Spam%=0.05 avg Ham%=0.16
  STOX_META_5:  no hits at all
  STOX_REPLY_TYPE:  bad, avg S/O=0.79 avg Spam%=2.14 avg Ham%=0.57
      # used in: STOX_AND_PRICE
  STOX_UA:  no hits of target type
  TEMPLATE_203_RCVD:  no hits at all
  TVD_PDF_FINGER01_JO:  no hits at all
  __CARD_DIRECT_WWW_ADDRESS:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __HAS_ANY_EMAIL:  bad, avg S/O=0.26 avg Spam%.80 avg Ham%S.30
      # used in: SB_GIF_AND_NO_URIS
  __HAS_ANY_URI:  bad, avg S/O=0.52 avg Spam%•.94 avg Ham%‰.17
      # used in: SB_GIF_AND_NO_URIS
  __LEGIT_MARLO_CARD:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __MAILER_OL_6626:  no hits of target type
      # used in: JM_TORA_XM
  __MID_START_001C:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.21
      # used in: HDR_ORDER_FTSDMCXX_001C
  __MOLE_2962:  bad, avg S/O=0.45 avg Spam%=0.05 avg Ham%=0.06
      # used in: JM_TORA_XM
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.03 avg Spam%=0.05 avg Ham%=2.02
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.77
      # used in: MSNBC_THREAD_INDEX
  __MULTIPART_RELATED:  bad, avg S/O=0.44 avg Spam%=0.49 avg Ham%=0.64
      # used in: OE_MULTIPART_RELATED
  __NAKED_TO:  bad, avg S/O=0.11 avg Spam%=7.06 avg Ham%T.95
      # used in: JM_TORA_XM DOS_DEREK_AUG08
  __XM_MS_IN_GENERAL:  bad, avg S/O=0.73 avg Spam%#.14 avg Ham%=8.70
      # used in: STOCK_IMG_OUTLOOK

rulesrc/sandbox/hstern/70_syndicate.cf (15 rules, 14 bad):

  HS_FAST_FORWARD:  no hits at all
  HS_ODD_OE_ORIGINAL_MESSAGE:  no hits at all
  HS_OE_FUNNY_BODY_FROM:  no hits at all
  HS_SYNDICATE_P1:  no hits at all
  HS_SYNDICATE_P2:  no hits at all
  HS_SYNDICATE_P3:  no hits at all
  HS_SYNDICATE_P4:  no hits at all
  HS_SYNDICATE_P5:  no hits at all
  __HS_FUNNY_BODY_FROM:  no hits at all
      # used in: HS_OE_FUNNY_BODY_FROM HS_SYNDICATE_P4
  __HS_NONDEFAULT_OE_QUOTE:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.71
      # used in: HS_SYNDICATE_P2
  __HS_ODD_ORIGINAL_MESSAGE:  no hits of target type
      # used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P3
  __HS_QUOTE:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=7.67
      # used in: HS_SYNDICATE_P2 __HS_NONDEFAULT_OE_QUOTE
  __HS_SUBJ_RE_FW:  bad, avg S/O=0.00 avg Spam%=0.09 avg Ham%F.74
      # used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P2 HS_SYNDICATE_P3 \
__HS_NONDEFAULT_OE_QUOTE  __HS_SUBJ_UC_FW:  bad, avg S/O=0.01 avg Spam%=0.01 avg \
Ham%=0.67  # used in: HS_SYNDICATE_P1

rulesrc/sandbox/hstern/20_uri_tests.cf (15 rules, 8 bad):

  HS_EXTRA:  no hits of target type
  HS_GETMEOFF:  no hits at all
  HS_URI_HOOKUP:  no hits at all
  __HS_AOL_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5  __HS_FREEHOST_URI:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.02
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5  __HS_GEOCITIES_URI:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.01
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5 __HS_FREEHOST_URI  __HS_MSNSPACES_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5 __HS_FREEHOST_URI  __HS_TRIPOD_URI:  no hits of target type
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5 __HS_FREEHOST_URI

rulesrc/sandbox/hstern/20_meta_tests.cf (1 rules, 1 bad):

  HS_DRUG_DOLLAR_MANY:  no hits at all

rulesrc/sandbox/hstern/20_head_tests.cf (5 rules, 3 bad):

  HS_OUTLOOK_MID_NOBRK:  no hits at all
  HS_SUBJ_NEW_SOFTWARE:  no hits at all
  HS_SUBJ_ONLINE_PHARMACEUTICAL:  no hits at all

rulesrc/sandbox/hstern/20_body_tests.cf (8 rules, 6 bad):

  HS_BODY_UPLOADED_SOFTWARE:  no hits at all
  HS_DRUG_DOLLAR_2:  no hits at all
  HS_DRUG_DOLLAR_3:  no hits at all
  HS_MEETUP_FOR_SEX:  no hits at all
  HS_NO_FLOWERS:  no hits at all
  HS_SEXOHOLICS_DATESITE:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (71 rules, 65 bad):

  FAKE_REPLY_A1:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
  FAKE_REPLY_B:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
  FAKE_REPLY_C:  bad, avg S/O=0.42 avg Spam%=0.02 avg Ham%=0.02
  FAKE_REPLY_SURE_A:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%4.90
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%8.16
  NICE_REPLY_A:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.10
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=4.59
  TEST_REPLY_C:  no hits of target type
  __BOTH_INR_AND_REF:  bad, avg S/O=0.56 avg Spam%=5.17 avg Ham%=4.00
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_A  __BROKE_MUAS:  bad, avg S/O=0.68 avg Spam%=0.23 avg \
Ham%=0.11  # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __INR_AND_NO_REF:  bad, avg S/O=0.09 avg Spam%=0.88 avg Ham%=8.93
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B  __MISSING_REF:  bad, avg S/O=0.63 avg \
Spam%™.97 avg Ham%X.74  # used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B  \
__MISSING_REPLY:  bad, avg S/O=0.64 avg Spam%—.55 avg Ham%T.91  # used in: \
FAKE_REPLY_A1 FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B \
NICE_REPLY_C TEST_REPLY_C  __MISSING_THREAD:  bad, avg S/O=0.51 avg Spam%—.59 avg \
Ham%“.57  # used in: FAKE_REPLY_SURE_A
  __NO_INR_YES_REF:  bad, avg S/O=0.75 avg Spam%.57 avg Ham%=6.44
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C  __SUBJ_RE:  bad, avg S/O=0.00 avg \
Spam%=0.07 avg Ham%E.54  # used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_B \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C \
TEST_REPLY_B TEST_REPLY_C  __UA_GNUS:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __UA_IMP:  bad, avg S/O=0.06 avg Spam%=0.01 avg \
                Ham%=0.17
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_KMAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg \
                Ham%=2.06
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __UA_KNODE:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __UA_MOZ5:  bad, avg S/O=0.01 avg Spam%=0.02 avg \
                Ham%=1.61
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __UA_MSENTOUR:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.49
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_MSOEMAC:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_MUTT:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __UA_PAN:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __UA_XNEWS:  no hits at all
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __XM_AOL:  bad, avg S/O=0.14 avg Spam%=0.01 avg \
Ham%=0.06  # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_APPLEMAIL:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=4.94
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_BALSA:  no hits at all
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_CALYPSO:  no hits at all
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_COMMUNIG:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_DTMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_EDMAX:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_ELM:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_EXMH:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_FREEMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_GNUS:  no hits at all
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __XM_IMAIL:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_LOTUSN:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_LOTUSN5:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_MAILCITY:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MAILSMITH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MHE:  no hits at all
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_MIMETOOLS:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MOZ4:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __XM_MSCDO:  bad, avg S/O=0.05 avg Spam%=0.01 avg \
                Ham%=0.20
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MSOUT:  bad, avg S/O=0.39 avg Spam%=0.82 avg \
                Ham%=1.29
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_NETMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_NETSCAPEW:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_NOVELL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_OPENWEB:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_OPERA6:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_PEGASUS:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_POSTMAN:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_QUALCOM:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.00
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_SKYRI:  no hits at all
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __XM_SQRLMAIL:  bad, avg S/O=0.02 avg Spam%=0.00 avg \
                Ham%=0.05
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_SYLPHEED:  no hits of target type
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_VM:  no hits of target type
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF  __XM_WEBMAIL5:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_WWWMAIL:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C \
TEST_REPLY_C __NO_INR_YES_REF  __XM_XIMEVOL:  no hits of target type
      # used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A \
__BOTH_INR_AND_REF

rulesrc/sandbox/felicity/70_phishing.cf (54 rules, 13 bad):

  TVD_PH_1:  bad, avg S/O=0.52 avg Spam%=0.01 avg Ham%=0.01
  TVD_PH_7:  bad, avg S/O=0.24 avg Spam%=0.02 avg Ham%=0.05
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.31 avg Spam%=0.03 avg Ham%=0.06
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.69 avg Spam%=0.15 avg Ham%=0.06
  TVD_PH_FR5:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
  TVD_PH_SEC:  no hits at all
  TVD_PH_SUBJ_ACCOUNTS_POST:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
  TVD_PH_SUBJ_ACCOUNTS_PRE:  bad, avg S/O=0.58 avg Spam%=0.02 avg Ham%=0.01
  TVD_PH_SUBJ_UPDATE:  bad, avg S/O=0.70 avg Spam%=0.02 avg Ham%=0.01
  TVD_PH_SUBJ_URGENT:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
  TVD_SUBJ_ACC_NUM:  no hits at all
  __PH_TVD_FROM2:  bad, avg S/O=0.10 avg Spam%=0.03 avg Ham%=0.24
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_07:  no hits at all
      # used in: TVD_PH_BODY_META_ALL

rulesrc/sandbox/felicity/70_other.cf (86 rules, 57 bad):

  FUZZY_SPRM:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
  HEADER_COUNT_SUBJECT:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  NULL_IN_BODY:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  RCVD_BAD_ID:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  TVD_ACT_193:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  TVD_APPROVED:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  TVD_APP_LOAN:  no hits of target type
  TVD_BODY_END_STAR:  no hits of target type
  TVD_COMPANY_PICK:  no hits at all
  TVD_DEAD_JOB:  no hits at all
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_DOLLARS_US:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.02
  TVD_FINGER_01:  no hits at all
  TVD_FLOAT_GENERAL:  no hits of target type
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FUZZY_SYMBOL:  no hits of target type
  TVD_FW_GRAPHIC_ID1:  bad, avg S/O=0.51 avg Spam%=0.25 avg Ham%=0.25
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.07
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.07
  TVD_GET_STOCK:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  TVD_GOOG_LUCKY:  no hits at all
  TVD_HEAD_EDITION:  no hits at all
  TVD_HEAD_KERNEL:  no hits of target type
  TVD_HEAD_USR:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  TVD_PDF_FINGER01:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.10
  TVD_SECTION:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  TVD_SPACED_SUBJECT_WORD3:  no hits of target type
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.06
  TVD_SPACED_WORDS:  no hits at all
  TVD_STOCK1:  no hits of target type
  TVD_SUBJ_APPR_LOAN:  no hits at all
  TVD_SUBJ_END_STAR:  no hits at all
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.13
  TVD_SUBJ_OWE:  no hits at all
  TVD_UA_FOSTERING:  no hits at all
  TVD_UNDER_VALUED:  no hits at all
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_IP_HEX:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.20 avg Spam%=0.05 avg Ham%=0.22
  T_TVD_PCT_OFF3:  no hits at all
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.76 avg Spam%=0.68 avg Ham%=0.22
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.77 avg Spam%=0.80 avg Ham%=0.24
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.77 avg Spam%=0.80 avg Ham%=0.24
  __HEAD_X_KERNEL:  no hits of target type
      # used in: TVD_HEAD_KERNEL
  __TVD_BODY:  bad, avg S/O=0.50 avg Spam%™.74 avg Ham%™.93
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_GOT_UR:  no hits at all
      # used in: TVD_FINGER_01
  __TVD_HAPPY_WITH:  no hits at all
      # used in: TVD_FINGER_01
  __TVD_INT_CID:  bad, avg S/O=0.41 avg Spam%=0.74 avg Ham%=1.07
      # used in: TVD_FW_GRAPHIC_ID3
  __TVD_MIME_ATT:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.19
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_MIME_CT_MM:  bad, avg S/O=0.17 avg Spam%=0.57 avg Ham%=2.85
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_VISIT_SITE:  no hits at all
      # used in: TVD_FINGER_01
  __USER_AGENT_MUTT:  no hits at all
      # used in: TVD_HEAD_KERNEL

rulesrc/sandbox/fanf/30_text.cf (4 rules, 4 bad):

  IMG_ALT_BRACKETS:  no hits at all
  LONG_TERM_PRICE:  no hits of target type
  SHORT_TERM_PRICE:  no hits at all
  STOCK_PRICES:  no hits at all

rulesrc/sandbox/fanf/20_uri_tests.cf (1 rules, 1 bad):

  YAHOO_RDS_REDIR:  no hits at all

rulesrc/sandbox/fanf/10_headers.cf (3 rules, 2 bad):

  RCVD_FORGED_WROTE3:  no hits at all
  RCVD_FORGED_WROTE4:  no hits at all

rulesrc/sandbox/emailed/99_alex_test.cf (1 rules, 1 bad):

  AXB_XR_STULDAP:  no hits at all

rulesrc/sandbox/emailed/99_alex_dev.cf (9 rules, 6 bad):

  AXB_RCVD_ZOOBSEND:  no hits at all
  AXB_RCVD_ZOONAT:  no hits at all
  AXB_XMID_1212:  no hits of target type
  AXB_XMID_1510:  no hits at all
  AXB_XM_SENDMAIL_NOT:  no hits at all
  AXB_XTIDX_CHAIN:  no hits at all

rulesrc/sandbox/emailed/00_FVGT_File001.cf (604 rules, 406 bad):

  FB_ALMOST_SEX:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  FB_ANA_TRIM:  no hits at all
  FB_ANUI:  no hits at all
  FB_AN_ERROR_4U:  no hits at all
  FB_BEDISCARDED:  no hits at all
  FB_BE_MILLION:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
  FB_BILLI0N:  no hits at all
  FB_BOOST_CONFIDEN:  no hits at all
  FB_BROKEN_PHNUM:  no hits at all
  FB_BROWSER_ERR:  no hits at all
  FB_C0MPANY:  no hits at all
  FB_CASINO:  no hits at all
  FB_CHOLESTERBLCK:  no hits at all
  FB_DDDD_BUCKS:  bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
  FB_DOUBLE_0WORDS:  no hits at all
  FB_DROWNING_DEBT:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FB_EMAIL_HIER:  no hits at all
  FB_ENHANCED_MALE:  no hits at all
  FB_EXPLOSIVE:  no hits of target type
  FB_EXP_POWER_OF:  no hits of target type
  FB_FAKE_NUMBERS:  no hits at all
  FB_FAKE_NUMS2:  no hits at all
  FB_FAKE_NUMS4:  no hits at all
  FB_FEDERALLY_COMPL:  no hits at all
  FB_FHARMACY:  no hits at all
  FB_FORWARD_LOOK:  no hits at all
  FB_FREE888:  no hits at all
  FB_FUNNY_WEIGHT:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  FB_GAPPY_ADDRESS:  no hits at all
  FB_GAPPY_SOMETHING:  no hits at all
  FB_GET_LAID:  no hits at all
  FB_GET_XXX_CASH:  no hits at all
  FB_HA1R:  no hits at all
  FB_HOMELOAN:  no hits at all
  FB_IMPRESS_GIRL:  no hits at all
  FB_IMPROVEJA:  no hits at all
  FB_INCREASE_VOL:  no hits of target type
  FB_INDEPEND_RWD:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  FB_L0AN:  no hits at all
  FB_LAON:  no hits at all
  FB_LATEST_OEM:  no hits at all
  FB_LETTERS_21B:  no hits at all
  FB_LOSE_WEIGHT_CAP:  no hits at all
  FB_MAGIC_TAB:  no hits at all
  FB_MAKE_MONEY:  no hits at all
  FB_MASCULINE_PERF:  no hits at all
  FB_MEDS_PERCENT:  no hits at all
  FB_MORE_SEMEN:  no hits at all
  FB_MORE_SIZE:  no hits at all
  FB_MOST_QUALITY:  no hits at all
  FB_MOST_RECOG:  no hits of target type
  FB_N3W:  no hits at all
  FB_NATIONALSURV:  no hits at all
  FB_NEW_LOW_RATE:  no hits at all
  FB_NOT_PHONE_NUM1:  no hits at all
  FB_NOT_PHONE_NUM2:  no hits at all
  FB_NOT_PHONE_NUM3:  no hits at all
  FB_NOT_SCHOOL:  no hits at all
  FB_NOT_SEXUAL:  no hits at all
  FB_NOW_NOW_NOW:  no hits at all
  FB_NO_MORE_ADS:  no hits at all
  FB_NO_MORE_HTTP:  no hits at all
  FB_NO_MORE_MAIL:  no hits at all
  FB_NO_MORE_OFFER:  no hits at all
  FB_NUMYO:  no hits of target type
  FB_NUMYO2:  no hits at all
  FB_ODD_SPACED_MONEY:  no hits at all
  FB_ONIINE:  no hits at all
  FB_PA1N:  no hits at all
  FB_PASTE_LINK:  no hits at all
  FB_PC_DOCTOR:  no hits at all
  FB_PENIS_GROWTH:  no hits at all
  FB_PIPEDOLLAR:  no hits at all
  FB_PIPENEWSLETTER:  no hits at all
  FB_PIPE_ILLION:  no hits at all
  FB_PROLONGED_HARD:  no hits at all
  FB_RANDOM_SPUR:  no hits at all
  FB_REF_CODE_SPACE:  no hits at all
  FB_REWARDS_GATE:  no hits at all
  FB_ROLLER_IS_T:  no hits at all
  FB_ROLX:  no hits at all
  FB_SPACED_CASH:  no hits at all
  FB_SPACED_FREE:  no hits at all
  FB_SPACED_LOWER:  no hits at all
  FB_SPACED_PHN_3B:  no hits of target type
  FB_SPACEY_ZIP:  no hits at all
  FB_SPUR_M:  no hits at all
  FB_SSEX:  no hits of target type
  FB_STAMINA_IN_BED:  no hits at all
  FB_STOCK_EXPLODE:  no hits at all
  FB_STOP_EMAILING:  no hits at all
  FB_STREAM_OF:  no hits at all
  FB_STRONGER_EJ:  no hits at all
  FB_SUPERBREWARD:  no hits at all
  FB_SYMBLO:  no hits at all
  FB_THIS_ADVERT:  no hits at all
  FB_THOUS_PERSONAL:  no hits at all
  FB_TIRED_OF_YOUR:  bad, avg S/O=0.48 avg Spam%=0.01 avg Ham%=0.01
  FB_TO_STOP_DISTRO:  no hits at all
  FB_UGGS_NOW:  no hits at all
  FB_UNLOCK_YOUR_G:  no hits at all
  FB_UNRESOLV_PROV:  no hits at all
  FB_VERIFY_ZIP:  no hits at all
  FB_V_SPACE_GRA:  no hits at all
  FB_WHILECONNECTED:  no hits at all
  FB_WHITEGOLD:  no hits at all
  FB_WORD1_END_DOLLAR:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  FB_WORD2_END_DOLLAR:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.11
  FB_YOURSELF_MASTER:  no hits at all
  FB_YOUR_PC_ERROR:  no hits at all
  FB_YOUR_REFI:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_REFILL:  no hits of target type
  FB_YOUR_WEIGHT:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_WOMAN:  no hits at all
  FB_YOUTH_THIS:  no hits at all
  FB_YOU_CAN_BECOME:  bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
  FB_YOU_LOVE:  no hits at all
  FF_IHOPE_YOU_SINK:  bad, avg S/O=0.78 avg Spam%=1.03 avg Ham%=0.29
  FF_LEO_FLOAT_RIGHT:  no hits of target type
  FH_BAD_MSOE14:  no hits at all
  FH_FROMEML_NOTLD:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  FH_FROM_GET_NAME:  no hits at all
  FH_FROM_RND_1:  no hits at all
  FH_HAS_UID:  no hits at all
  FH_HAS_X:  no hits at all
  FH_HAS_XAIMC:  no hits at all
  FH_HAS_XCVBN:  no hits at all
  FH_HAS_XFGHJ:  no hits at all
  FH_HAS_XID:  no hits of target type
  FH_HAS_XOVE:  no hits at all
  FH_HAS_XUIOP:  no hits at all
  FH_HAS_X_WBC:  no hits at all
  FH_HELO_GMAILSMTP:  no hits at all
  FH_HOST_EQ_SPRINT_H:  no hits at all
  FH_MSGID_01C67:  no hits of target type
  FH_MSGID_01C70XXX:  no hits at all
  FH_MSGID_DIGIT:  no hits at all
  FH_RANDOM_SURE:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.03
  FH_RCVD_FROM_2_WDS:  no hits of target type
  FH_RCVD_HELODATE:  no hits at all
  FH_RE_NEW_DDD:  no hits at all
  FH_SPOOF_NAMES:  no hits at all
  FH_VIRUS_NORTON:  no hits at all
  FH_XCON_HAS_EQ:  no hits at all
  FH_XMAIL_HEX20:  no hits of target type
  FH_XMAIL_RND_833:  no hits at all
  FH_X_REFS_DDD:  no hits at all
  FM_APPROVE_COMPLETE:  no hits at all
  FM_ASCII_ART_SPACINGc:  no hits of target type
  FM_BIG_REASON:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  FM_CLAIM_IPOD:  no hits of target type
  FM_CONG_GIFTCARD:  no hits at all
  FM_COSTA_RICA:  no hits at all
  FM_CUSTOMLOGODSGNc:  no hits at all
  FM_DOESNT_SAY_STOCK:  no hits at all
  FM_FORGED_GMAIL:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.43
  FM_FUCK_ASS_TEEN:  no hits at all
  FM_GET_CASH_SURVEY:  no hits at all
  FM_GOOD_ENF_CREDIT:  no hits of target type
  FM_HOW_IMG_COST:  no hits at all
  FM_HOW_IMG_COST2:  no hits at all
  FM_IS_IT_OUR_ACCOUNT:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  FM_LEND_MONEY:  no hits at all
  FM_LIKE_STOCKS:  no hits at all
  FM_LOAN_NUM_DOMAIN:  no hits at all
  FM_LOWER_CASE_HEAD:  no hits at all
  FM_LUX_GIFTS_REDUCED:  no hits at all
  FM_MAKE_MONEY_HOME:  no hits of target type
  FM_MANY_DRUG_WORDS:  no hits at all
  FM_MEDS_SUBJ_2WDS:  no hits at all
  FM_MORTGAGE3PLUS:  no hits of target type
  FM_MORTGAGE4PLUS:  no hits at all
  FM_MORTGAGE5PLUS:  no hits at all
  FM_MORTGAGE6PLUS:  no hits at all
  FM_NIKE_ADIDAS:  no hits at all
  FM_PAYING_LOWER:  no hits at all
  FM_PC_ERROR_DBL:  no hits at all
  FM_PEOPLE_LOOK_4ME:  no hits at all
  FM_PHN_NODNS:  no hits at all
  FM_RATSIGN_1106:  no hits of target type
  FM_REPLY_OR_NOT:  no hits at all
  FM_RE_HELLO_SPAM:  no hits of target type
  FM_ROLEX_ADS:  no hits at all
  FM_SCHOOL_TYPES:  no hits at all
  FM_SUBJ_APPROVE:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FM_SUB_TEEN_NUDE:  no hits at all
  FM_TRUE_LOV_ALL_N:  no hits at all
  FM_WEIGHT_LOSS:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  FM_XMAIL_F_OUT:  no hits of target type
  FM_XREF_CLICKPHP:  no hits at all
  FRT_ADOBE2:  no hits at all
  FRT_ADULT2:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  FRT_BELOW2:  bad, avg S/O=0.50 avg Spam%=0.02 avg Ham%=0.01
  FRT_BIGGERMEM1:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  FRT_CANSPAM:  no hits of target type
  FRT_CLICK:  no hits of target type
  FRT_COCK:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  FRT_CONTACT:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.54
  FRT_DIPLOMA:  no hits at all
  FRT_ERECTION:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  FRT_ESTABLISH2:  no hits at all
  FRT_FOLLOW1:  no hits of target type
  FRT_FOLLOW2:  no hits of target type
  FRT_FREE:  bad, avg S/O=0.60 avg Spam%=0.02 avg Ham%=0.01
  FRT_FRIEND:  no hits of target type
  FRT_FUCK1:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  FRT_FUCK2:  no hits at all
  FRT_HEALTH:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00
  FRT_HOUR:  no hits at all
  FRT_INCOME:  no hits of target type
  FRT_INTEREST:  no hits at all
  FRT_INVESTOR:  no hits at all
  FRT_LEVITRA:  no hits at all
  FRT_LITTLE:  no hits of target type
  FRT_LOLITA1:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  FRT_MEETING:  no hits of target type
  FRT_OFFER2:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
  FRT_PACKAGE:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
  FRT_PENIS1:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  FRT_PHARMAC:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.02
  FRT_PRICE:  bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.00
      # used in: FM_DOESNT_SAY_STOCK
  FRT_PROFILE1:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.07
  FRT_PROFILE2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.12
  FRT_PROFIT1:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  FRT_PROFIT2:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
  FRT_PUSSY:  no hits at all
  FRT_SLUT:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  FRT_SOMA:  no hits at all
  FRT_SOMA2:  no hits at all
  FRT_STOCK1:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  FRT_STOCK2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.17
  FRT_STRONG1:  no hits of target type
  FRT_SYMBOL:  no hits at all
  FRT_VALIUM1:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  FRT_VALIUM2:  bad, avg S/O=0.45 avg Spam%=0.01 avg Ham%=0.01
  FRT_VIRGIN1:  no hits at all
  FRT_XANAX1:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  FR_3TAG_3TAG:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  FR_CANTSEETEXT:  no hits at all
  FR_DIV_DRUGS_3:  no hits at all
  FR_DOT_FEVER_5:  no hits at all
  FR_IMPORT_CSS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  FR_MIDER:  no hits at all
  FR_PORN_NOT_URL:  no hits of target type
  FR_P_END_P_MANY10:  no hits of target type
  FR_TEST_BASE64_BAD:  no hits of target type
  FR_TITLE_CONS_6:  no hits at all
  FR_TITLE_NUMS:  no hits at all
  FS_APPROVE_YOU:  no hits at all
  FS_ATTRACT_CUST:  no hits at all
  FS_BROKEN_MEETING:  no hits at all
  FS_CLAIM_NOW:  no hits at all
  FS_COSTARICA:  no hits of target type
  FS_CUTE_TEEN:  no hits at all
  FS_DOLLAR_BONUS:  no hits at all
  FS_END_BILLS:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
  FS_GIFT_CARD_OFF:  no hits at all
  FS_HUGECOCK:  no hits at all
  FS_LOW_RATES:  no hits at all
  FS_NEED_MONEY:  no hits at all
  FS_NEW_SOFT_UPLOAD:  no hits at all
  FS_NEW_XXX:  no hits at all
  FS_NUDE:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
      # used in: FM_SUB_TEEN_NUDE
  FS_NUMYO:  no hits at all
  FS_PAYINGTOOM:  no hits at all
  FS_PERSCRIPTION:  no hits at all
  FS_PRE_SUBJ:  no hits at all
  FS_RAMROD:  no hits at all
  FS_REPL_TOKEN:  no hits at all
  FS_RESULTS_BED:  no hits at all
  FS_RE_APPROV:  no hits at all
  FS_SINGLE_LETTER_H:  bad, avg S/O=0.55 avg Spam%=0.01 avg Ham%=0.01
  FS_SINGLE_LETTER_J:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  FS_SPLASH:  no hits of target type
  FS_START_DOYOU2:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
  FS_TIP_DDD:  no hits at all
  FS_VIEWPHOTOS:  no hits at all
  FS_WE_WANT:  no hits at all
  FS_WITH_SMALL:  no hits at all
  FS_YOUR_COMPUTER:  no hits at all
      # used in: FM_PC_ERROR_DBL
  FS_YOUR_PRESCRIP:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
  FS_YOUR_REFILL:  no hits at all
  FU_16R:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  FU_CLICK_PHP_DDD:  no hits at all
      # used in: FM_XREF_CLICKPHP
  FU_COMMON_SUBS:  no hits at all
  FU_COMMON_SUBS2:  no hits of target type
  FU_ENDS_NUMS_DOTS_CLK:  no hits at all
  FU_ENDS_RT:  no hits at all
  FU_ENDS_SG:  no hits at all
  FU_END_ET:  no hits at all
  FU_HOODIA:  no hits at all
  FU_LONG_HTML:  no hits at all
  FU_LOTSOFCOLONS:  no hits of target type
  FU_MIDER:  no hits at all
  FU_RX_DIR:  no hits of target type
  FU_SUB_D_WEIRD:  no hits at all
  FU_UKGEOCITIES:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
  FU_URI_TRACKER_T:  no hits at all
  __ALL_RANDOM:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
      # used in: FH_RANDOM_SURE
  __APPROVALFVGT:  bad, avg S/O=0.18 avg Spam%=0.15 avg Ham%=0.70
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS  __BEEN_APPROVED:  bad, avg S/O=0.36 avg Spam%=0.04 avg Ham%=0.07
      # used in: FM_APPROVE_COMPLETE
  __BIGDOLLARSFVGT:  bad, avg S/O=0.20 avg Spam%=0.18 avg Ham%=0.72
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS  __CAN_HELP:  bad, avg S/O=0.13 avg Spam%=0.24 avg Ham%=1.62
      # used in: FM_APPROVE_COMPLETE
  __COMPLETE_REVIEW:  no hits of target type
      # used in: FM_APPROVE_COMPLETE
  __COSTA_RI:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_COSTA_RICA
  __CS_WORD:  bad, avg S/O=0.72 avg Spam%=0.13 avg Ham%=0.05
      # used in: FM_MANY_DRUG_WORDS
  __DATE_700:  bad, avg S/O=0.27 avg Spam%=2.91 avg Ham%=8.08
      # used in: FM_RATSIGN_1106
  __DATE_LOWER:  no hits of target type
      # used in: FM_LOWER_CASE_HEAD
  __DOMAIN_WITH_NUMS:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_LOAN_NUM_DOMAIN
  __EXCLAIM_SUBJ:  bad, avg S/O=0.68 avg Spam%=7.36 avg Ham%=3.40
      # used in: FM_SUBJ_APPROVE
  __FB_BA:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.04
      # used in: FM_SCHOOL_TYPES
  __FB_BCs:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.02
      # used in: FM_SCHOOL_TYPES
  __FB_BEST:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.31
      # used in: FM_BIG_REASON
  __FB_BIG:  bad, avg S/O=0.19 avg Spam%=0.07 avg Ham%=0.30
      # used in: FM_BIG_REASON
  __FB_COST:  bad, avg S/O=0.21 avg Spam%=1.12 avg Ham%=4.34
      # used in: FM_HOW_IMG_COST2
  __FB_COULD_NOT_F:  no hits at all
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_CUSTOM_RECOG:  no hits at all
      # used in: FM_CUSTOMLOGODSGNc
  __FB_DO_NOT_REPLY:  no hits at all
      # used in: FM_REPLY_OR_NOT
  __FB_FIND_OUT:  bad, avg S/O=0.38 avg Spam%=0.31 avg Ham%=0.51
      # used in: FM_MAKE_MONEY_HOME
  __FB_FROM_YOUR:  bad, avg S/O=0.23 avg Spam%=0.41 avg Ham%=1.40
      # used in: FM_MAKE_MONEY_HOME
  __FB_GENERATE:  bad, avg S/O=0.04 avg Spam%=0.17 avg Ham%=3.94
      # used in: FM_MAKE_MONEY_HOME
  __FB_GLASHUTE:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_HOME_HOUSE:  bad, avg S/O=0.22 avg Spam%=3.48 avg Ham%.59
      # used in: FM_MAKE_MONEY_HOME
  __FB_HOTTEST:  bad, avg S/O=0.25 avg Spam%=0.12 avg Ham%=0.36
      # used in: FM_LIKE_STOCKS
  __FB_HOWMUCH:  bad, avg S/O=0.08 avg Spam%=0.12 avg Ham%=1.45
      # used in: FM_HOW_IMG_COST2
  __FB_IDENTITY:  bad, avg S/O=0.22 avg Spam%=0.34 avg Ham%=1.18
      # used in: FM_HOW_IMG_COST2
  __FB_IMAGE_OF:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FB_LOGO_DESIGN:  no hits at all
      # used in: FM_CUSTOMLOGODSGNc
  __FB_LUX_GIFTS:  no hits at all
      # used in: FM_LUX_GIFTS_REDUCED
  __FB_MA:  bad, avg S/O=0.56 avg Spam%=0.39 avg Ham%=0.31
      # used in: FM_SCHOOL_TYPES
  __FB_MBA:  bad, avg S/O=0.57 avg Spam%=0.05 avg Ham%=0.04
      # used in: FM_SCHOOL_TYPES
  __FB_NUM_PERCNT:  bad, avg S/O=0.60 avg Spam%=8.46 avg Ham%=5.55
      # used in: FM_LUX_GIFTS_REDUCED
  __FB_OMEGA:  bad, avg S/O=0.72 avg Spam%=0.30 avg Ham%=0.12
      # used in: FM_ROLEX_ADS
  __FB_PICK:  bad, avg S/O=0.12 avg Spam%=0.23 avg Ham%=1.70
      # used in: FM_LIKE_STOCKS
  __FB_PPLE_ARE_SEARCH:  no hits of target type
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_PROJECTED:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.10
      # used in: FM_LIKE_STOCKS
  __FB_P_ALLNIGHT:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
      # used in: FM_TRUE_LOV_ALL_N
  __FB_P_TRUELOVE:  no hits of target type
      # used in: FM_TRUE_LOV_ALL_N
  __FB_REASON:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
      # used in: FM_BIG_REASON
  __FB_ROLEX_MEN:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_ROLEX_WMEN:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_S_PRICE:  bad, avg S/O=0.72 avg Spam%.65 avg Ham%=6.17
      # used in: FM_DOESNT_SAY_STOCK
  __FB_S_STOCK:  bad, avg S/O=0.11 avg Spam%=0.42 avg Ham%=3.53
      # used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
  __FB_TARGET_AUDIEN:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.08
      # used in: FM_CUSTOMLOGODSGNc
  __FB_TOUR:  bad, avg S/O=0.06 avg Spam%=0.06 avg Ham%=0.90
      # used in: FM_COSTA_RICA
  __FB_YOUR_IMAGE:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FB_YOU_ARE_PAYING:  no hits of target type
      # used in: FM_PAYING_LOWER
  __FH_HAS_XMSMAIL:  bad, avg S/O=0.76 avg Spam% .70 avg Ham%=6.49
      # used in: FM_RE_HELLO_SPAM
  __FH_HAS_XPRIORITY:  bad, avg S/O=0.73 avg Spam%&.65 avg Ham%=9.94
      # used in: FM_RE_HELLO_SPAM
  __FH_MSGID_01C7:  no hits of target type
      # used in: FM_RE_HELLO_SPAM
  __FM_HOW_COST:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.26
      # used in: FM_HOW_IMG_COST2
  __FM_HOW_COST_ID:  bad, avg S/O=0.20 avg Spam%=0.36 avg Ham%=1.43
      # used in: FM_HOW_IMG_COST2
  __FM_MORTGAGE3PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS
  __FM_MORTGAGE4PLUS:  no hits at all
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE5PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE6PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MY_PRICE:  bad, avg S/O=0.72 avg Spam%.66 avg Ham%=6.17
      # used in: FM_DOESNT_SAY_STOCK
  __FM_STOCK_WORDS:  bad, avg S/O=0.14 avg Spam%=0.35 avg Ham%=2.14
      # used in: FM_LIKE_STOCKS
  __FM_YOUR_IMAGE:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FROM_GMAIL:  bad, avg S/O=0.02 avg Spam%=0.22 avg Ham%=9.02
      # used in: FM_FORGED_GMAIL
  __FROM_LOWER:  bad, avg S/O=0.49 avg Spam%=0.10 avg Ham%=0.10
      # used in: FM_LOWER_CASE_HEAD
  __FR_SPACING_15:  bad, avg S/O=0.14 avg Spam%=0.08 avg Ham%=0.47
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_17:  bad, avg S/O=0.49 avg Spam%=0.08 avg Ham%=0.08
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_22:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.44
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_8:  bad, avg S/O=0.79 avg Spam%=2.79 avg Ham%=0.76
      # used in: FM_ASCII_ART_SPACINGc
  __FS_COST:  bad, avg S/O=0.56 avg Spam%=0.13 avg Ham%=0.10
      # used in: FM_HOW_IMG_COST
  __FS_HOWMUCH:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
      # used in: FM_HOW_IMG_COST
  __FS_IPODXBOX:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.11
      # used in: FM_CLAIM_IPOD
  __FS_LEND:  no hits at all
      # used in: FM_LEND_MONEY
  __FS_MP3PLAY:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: FM_CLAIM_IPOD
  __FS_NIKE:  no hits of target type
      # used in: FM_NIKE_ADIDAS
  __FS_RE_TWO_WORDS:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.14
      # used in: FM_MEDS_SUBJ_2WDS
  __FS_SUBJ_RE:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%@.31
      # used in: FM_RE_HELLO_SPAM
  __FS_S_TRADE:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_DOESNT_SAY_STOCK
  __FS_TEEN:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_SUB_TEEN_NUDE
  __FU_LOAN:  no hits of target type
      # used in: FM_LOAN_NUM_DOMAIN
  __F_ASS:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.64
      # used in: FM_FUCK_ASS_TEEN
  __F_FUCK:  bad, avg S/O=0.23 avg Spam%=0.06 avg Ham%=0.20
      # used in: FM_FUCK_ASS_TEEN
  __F_TEEN:  bad, avg S/O=0.10 avg Spam%=0.05 avg Ham%=0.49
      # used in: FM_FUCK_ASS_TEEN
  __GIFTCERT:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_CONG_GIFTCARD
  __GOOD_ENOUGH:  bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.33
      # used in: FM_GOOD_ENF_CREDIT
  __HOMELOANFVGT:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __LOANURIFVGT:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __LOSE_WEIGHT:  bad, avg S/O=0.56 avg Spam%=0.53 avg Ham%=0.43
      # used in: FM_WEIGHT_LOSS
  __MANY_RECIPS:  bad, avg S/O=0.10 avg Spam%=0.59 avg Ham%=5.19
      # used in: FM_IS_IT_OUR_ACCOUNT
  __MORTURIFVGT:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __MSGID_GMAIL:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%.28
      # used in: FM_FORGED_GMAIL
  __MSGID_VGA:  no hits of target type
      # used in: FM_RATSIGN_1106
  __NUMBERS_IN_SUBJ:  bad, avg S/O=0.43 avg Spam%.06 avg Ham%%.05
      # used in: FM_LEND_MONEY
  __OWN_LAND:  bad, avg S/O=0.09 avg Spam%=0.10 avg Ham%=0.98
      # used in: FM_COSTA_RICA
  __OWN_PROP:  bad, avg S/O=0.04 avg Spam%=0.09 avg Ham%=2.11
      # used in: FM_COSTA_RICA
  __PREAPPROVEDFVGT:  no hits of target type
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __RAW_RANDOM:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
      # used in: FH_RANDOM_SURE
  __SEEN_ON_ABC:  bad, avg S/O=0.37 avg Spam%=0.09 avg Ham%=0.16
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CBS:  bad, avg S/O=0.42 avg Spam%=0.15 avg Ham%=0.21
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CNN:  bad, avg S/O=0.09 avg Spam%=0.04 avg Ham%=0.44
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_NBC:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.12
      # used in: FM_WEIGHT_LOSS
  __SUBJ_APPROVE:  bad, avg S/O=0.74 avg Spam%=0.11 avg Ham%=0.04
      # used in: FM_SUBJ_APPROVE
  __SUBJ_LOWER:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
      # used in: FM_LOWER_CASE_HEAD
  __SURVEY:  bad, avg S/O=0.78 avg Spam%=1.68 avg Ham%=0.49
      # used in: FM_GET_CASH_SURVEY
  __TO___LOWER:  bad, avg S/O=0.07 avg Spam%=0.80 avg Ham%.35
      # used in: FM_LOWER_CASE_HEAD
  __VA_WORD:  bad, avg S/O=0.47 avg Spam%=0.01 avg Ham%=0.01
      # used in: FM_MANY_DRUG_WORDS
  __VM_WORD:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_MANY_DRUG_WORDS
  __YOUR_ACCOUNT:  bad, avg S/O=0.32 avg Spam%=0.48 avg Ham%=1.01
      # used in: FM_IS_IT_OUR_ACCOUNT
  __YOUR_CREDIT:  bad, avg S/O=0.65 avg Spam%=0.61 avg Ham%=0.33
      # used in: FM_GOOD_ENF_CREDIT
  __YOUR_CREDITFVGT:  bad, avg S/O=0.65 avg Spam%=0.62 avg Ham%=0.34
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS

rulesrc/sandbox/duncf/20_header.cf (3 rules, 2 bad):

  APOSTROPHE_TOCC:  no hits of target type
  STUDDLYCAPS:  bad, avg S/O=0.32 avg Spam%=0.14 avg Ham%=0.30

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 1 bad):

  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (122 rules, 99 bad):

  BELL_MOBILITY_TXT_MSG:  no hits at all
  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_ANAL_SPAM_MAILER2:  no hits at all
  DOS_BODY_HIGH_NO_MID:  no hits at all
  DOS_DEREK_AUG08:  no hits at all
  DOS_DOM_LIST_CENTER:  no hits at all
  DOS_DOT_COM_AT:  no hits at all
  DOS_DOUBLE_SOTCK:  no hits at all
  DOS_FAKE_SQUIRREL:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.04
  DOS_FIX_MY_URI:  no hits at all
  DOS_FORGED_RCVD_QUADS:  no hits at all
  DOS_GOOGLE_LUCKY_REDIRECT:  no hits at all
  DOS_HC_ZIP_VIRUS:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_MED_CAN_PHARM_NOV07:  no hits at all
  DOS_MORTGAGE:  no hits at all
  DOS_OUTLOOK_TO_MX:  bad, avg S/O=0.71 avg Spam%=0.11 avg Ham%=0.05
  DOS_OUTLOOK_TO_MX_IMAGE:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
      # used in: DOS_OUTLOOK_TO_MX
  DOS_PHISH_WWW_COM_RU:  no hits at all
  DOS_PLAYED_IN_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  DOS_PORN_BOUNDARY:  no hits at all
  DOS_PROVISION4:  no hits at all
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.75 avg Spam%=7.39 avg Ham%=2.53
  DOS_REMOVE_DOMAIN_DOT:  no hits at all
  DOS_REMOVE_DOMAIN_DOT_YAHOO:  no hits at all
  DOS_REPORT_FIN_INC:  no hits at all
  DOS_STOCK_BAT:  no hits of target type
  DOS_STOCK_CDYV_GENERIC:  no hits at all
  DOS_STOCK_INCOME_STATEMENT:  no hits at all
  DOS_STOCK_O_PRICE:  no hits at all
  DOS_TO_READ_STOCK:  no hits at all
  DOS_TWO_MIS_STOCK:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  __BELL_MOBILITY_RELAY:  no hits at all
      # used in: BELL_MOBILITY_TXT_MSG
  __DOS_198K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_248K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_372K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_488K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_492K_INT:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_BODY_FRI:  bad, avg S/O=0.01 avg Spam%=0.08 avg Ham%=8.89
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_MON:  bad, avg S/O=0.02 avg Spam%=0.14 avg Ham%=8.46
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT \
DOS_STOCK_BAT  __DOS_BODY_SAT:  bad, avg S/O=0.01 avg Spam%=0.05 avg Ham%=3.20
      # used in: DOS_STOCK_BAT
  __DOS_BODY_STOCK:  bad, avg S/O=0.05 avg Spam%=0.14 avg Ham%=2.90
      # used in: DOS_STOCK_BAT
  __DOS_BODY_SUN:  bad, avg S/O=0.01 avg Spam%=0.06 avg Ham%=7.63
      # used in: DOS_STOCK_BAT
  __DOS_BODY_THU:  bad, avg S/O=0.01 avg Spam%=0.09 avg Ham%=8.21
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_TUE:  bad, avg S/O=0.01 avg Spam%=0.12 avg Ham%=8.71
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT \
DOS_STOCK_BAT  __DOS_BODY_WED:  bad, avg S/O=0.01 avg Spam%=0.12 avg Ham%=8.84
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_COMING_TO_YOUR_PLACE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_CORRESPOND_EMAIL:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_DEAL_MAKE_MONEY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_DOM_LIST_CENTER:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_DROP_ME_A_LINE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_GREAT_DRAWN_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HAS_ANY_URI:  bad, avg S/O=0.52 avg Spam%•.94 avg Ham%‰.17
      # used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_MED_CAN_PHARM_NOV07
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%d.35
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.00 avg Spam%=0.19 avg Ham%d.77
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_MAILING_LIST:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%2.44
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAVE_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HEADLINES:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.80
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_HI:  bad, avg S/O=0.25 avg Spam%=0.72 avg Ham%=2.14
      # used in: DOS_FIX_MY_URI
  __DOS_INCREASE_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_I_DRIVE_A:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_KEY_GET_IN_EARLY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_LET_GO_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_LINK:  bad, avg S/O=0.71 avg Spam%.34 avg Ham%=6.32
      # used in: DOS_FIX_MY_URI
  __DOS_MAILER_SM:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05
      # used in: DOS_FAKE_SQUIRREL
  __DOS_MED_CAN_WEB_PHARM:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_MARK_DOWN:  no hits of target type
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_NO_DIRECTION:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_WHAT_COULD:  no hits of target type
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MEET_EACH_OTHER:  no hits of target type
      # used in: DOS_YOUR_PLACE
  __DOS_MSGID_DIGITS10:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.25
      # used in: DOS_DEREK_AUG08
  __DOS_MSGID_DIGITS9:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_DEREK_AUG08
  __DOS_MY_OLD_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_NO_STOPPING:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_OIL_EXCEED:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_RCVD_FRI:  bad, avg S/O=0.49 avg Spam%.69 avg Ham%.31
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_MON:  bad, avg S/O=0.40 avg Spam%.74 avg Ham%$.00
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SAT:  bad, avg S/O=0.63 avg Spam%.90 avg Ham%=8.69
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SUN:  bad, avg S/O=0.58 avg Spam%.88 avg Ham%=9.41
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_THU:  bad, avg S/O=0.45 avg Spam%.28 avg Ham%.41
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_TUE:  bad, avg S/O=0.37 avg Spam%.27 avg Ham%&.67
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_WED:  bad, avg S/O=0.39 avg Spam%.02 avg Ham%".49
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_REF_2_WK_DAYS:  bad, avg S/O=0.01 avg Spam%=0.03 avg Ham%=2.95
      # used in: DOS_STOCK_BAT
  __DOS_REF_NEXT_WK_DAY:  bad, avg S/O=0.02 avg Spam%=0.08 avg Ham%=4.34
      # used in: DOS_STOCK_BAT
  __DOS_REF_TODAY:  bad, avg S/O=0.01 avg Spam%=0.44 avg Ham%2.79
      # used in: DOS_STOCK_BAT
  __DOS_RELAYED_EXT:  bad, avg S/O=0.12 avg Spam%.45 avg Ham%–.96
      # used in: DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_RELAY_SM:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.22
      # used in: DOS_FAKE_SQUIRREL
  __DOS_REQ_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_SM_MID:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.21
      # used in: DOS_FAKE_SQUIRREL
  __DOS_STOCK_COMPANY:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.65
      # used in: DOS_STOCK_O_PRICE
  __DOS_STOCK_O_PRICE:  no hits at all
      # used in: DOS_STOCK_O_PRICE
  __DOS_SYMBOL_4:  no hits at all
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_TAKING_HOME:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_TOLD_DAY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_UA_SM:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.21
      # used in: DOS_FAKE_SQUIRREL
  __DOS_WASTE_TIME_MISS:  no hits at all
      # used in: DOS_TO_READ_STOCK

rulesrc/sandbox/dos/20_uri.cf (3 rules, 1 bad):

  GEO_QUERY_STRING:  no hits of target type

rules/72_active.cf (10 rules, 8 bad):

  TVD_FW_GRAPHIC_NAME_LONG:  bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.04
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.10
  __ANY_IMAGE_ATTACH:  bad, avg S/O=0.27 avg Spam%=0.44 avg Ham%=1.19
      # used in: PART_CID_STOCK PART_CID_STOCK_LESS STOCK_IMG_OUTLOOK \
DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX_IMAGE  __GIF_ATTACH:  bad, avg S/O=0.12 avg \
Spam%=0.09 avg Ham%=0.63  # used in: SB_GIF_AND_NO_URIS
  __PART_CID_STOCK_LESS:  bad, avg S/O=0.23 avg Spam%=0.02 avg Ham%=0.08
      # used in: PART_CID_STOCK_LESS
  __PART_STOCK_CD_F:  bad, avg S/O=0.13 avg Spam%=0.28 avg Ham%=1.90
      # used in: PART_CID_STOCK
  __PART_STOCK_CID:  bad, avg S/O=0.53 avg Spam%=0.25 avg Ham%=0.22
      # used in: PART_CID_STOCK
  __PART_STOCK_CL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
      # used in: PART_CID_STOCK

rules/70_sandbox.cf (4 rules, 4 bad):

  __TVD_MIME_ATT_AOPDF:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_AP:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.15
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_TP:  bad, avg S/O=0.28 avg Spam%1.87 avg Ham%€.28
      # used in: DOS_DEREK_AUG08 TVD_PDF_FINGER01
  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2

rules/25_replace.cf (32 rules, 14 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_AMBIEN:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.04
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.41 avg Spam%=0.04 avg Ham%=0.05
  FUZZY_ERECT:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.00
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_ROLEX:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.01
  SUBJECT_FUZZY_CHEAP:  no hits at all

rules/20_vbounce.cf (160 rules, 151 bad):

  ANY_BOUNCE_MESSAGE:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
  BOUNCE_MESSAGE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE
  CHALLENGE_RESPONSE:  no hits at all
  VBOUNCE_MESSAGE:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE
  __AUTO_GEN_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_4:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_AG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_AS:  bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=0.87
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_BBTL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_CM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_MS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_PREC:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_XBT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_XXSP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ADDR_ERR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_GENERATED:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.49
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_REPLY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPOND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPONSE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_COULD_NOT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_CTYPE:  bad, avg S/O=0.24 avg Spam%=0.03 avg Ham%=0.09
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DATA_FORMAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DEL_FAIL:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ESMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ETRUST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_FROM_DAEMON:  bad, avg S/O=0.50 avg Spam%=0.15 avg Ham%=0.15
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAILDELFAIL:  bad, avg S/O=0.16 avg Spam%=0.01 avg Ham%=0.04
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAIL_DEL_FAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MSGDELFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NEVER_SEE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NONWORKING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NOTDEL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NOTIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_RESEND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_VAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RET_MAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_ERRMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_MD:  bad, avg S/O=0.68 avg Spam%=0.15 avg Ham%=0.07
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_NULL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_STAT_FAIL:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_SYMANTEC:  bad, avg S/O=0.29 avg Spam%=0.01 avg Ham%=0.02
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_UNDELIVERABLE_ML:  bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_X_ERR_STAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_Y_AUTOGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_HEADER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SPAMLION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VANQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __HAVE_BOUNCE_RELAYS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY2:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_SUBJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MY_SERVERS_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE \
BOUNCE_MESSAGE CHALLENGE_RESPONSE VBOUNCE_MESSAGE  __NONBOUNCE_READ_RECEIPT_CTYPE:  \
no hits of target type  # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __VBOUNCE_ALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ANTIGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATTACHMENT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CISCO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DETECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DUTCH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMANAGER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMVD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EXIM:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FROMPT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GSHIELD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GUIN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE \
VBOUNCE_MESSAGE  __VBOUNCE_GWAVA2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE \
VBOUNCE_MESSAGE  __VBOUNCE_INFLEX:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_JMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_LUTHER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAJORDOMO_HELP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MELDING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MMS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MSGLABS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_RAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_UNDELIV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_WARNING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __XM_VBULLETIN:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED
  __X_CRON_ENV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED

rules/20_uri_tests.cf (18 rules, 12 bad):

  HTTP_77:  no hits at all
  HTTP_ESCAPED_HOST:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.01
  IP_LINK_PLUS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.21
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.11 avg Spam%=0.06 avg Ham%=0.43
  SPOOF_NET2COM:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  URI_HEX:  bad, avg S/O=0.62 avg Spam%=0.46 avg Ham%=0.28
  URI_NO_WWW_BIZ_CGI:  no hits at all
  URI_NO_WWW_INFO_CGI:  no hits of target type
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.11
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (92 rules, 18 bad):

  FORGED_OUTLOOK_TAGS:  bad, avg S/O=0.67 avg Spam%=0.17 avg Ham%=0.09
  RATWARE_GECKO_BUILD:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  __ANY_OUTLOOK_MUA:  bad, avg S/O=0.73 avg Spam%#.13 avg Ham%=8.49
      # used in: FORGED_OUTLOOK_TAGS DOS_OUTLOOK_TO_MX DOS_OUTLOOK_TO_MX \
DOS_OUTLOOK_TO_MX_IMAGE  __BAT_BOUNDARY:  bad, avg S/O=0.65 avg Spam%=1.93 avg \
Ham%=1.03  # used in: HDR_ORDER_FTSDMCXX_BAT
  __GATED_THROUGH_RCVD_REMOVER:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%.25
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __HOTMAIL_BAYDAV_MSGID:  no hits of target type
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IMS_MSGID:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.58
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IPLANET_MESSAGING_SERVER:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.03
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  bad, avg S/O=0.00 avg Spam%=0.10 avg Ham%C.02
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __RATWARE_0_TZ_DATE:  bad, avg S/O=0.23 avg Spam%=2.71 avg Ham%=9.25
      # used in: RATWARE_ZERO_TZ
  __SYMPATICO_MSGID:  no hits of target type
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __UNUSABLE_MSGID:  bad, avg S/O=0.00 avg Spam%=0.10 avg Ham%C.16
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: FORGED_MUA_MOZILLA TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 \
__UNUSABLE_MSGID  __YAHOO_BULK:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.47
      # used in: FORGED_OUTLOOK_TAGS

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (48 rules, 28 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  BAD_CREDIT:  bad, avg S/O=0.75 avg Spam%=0.25 avg Ham%=0.08
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.01
  DEAR_SOMETHING:  bad, avg S/O=0.67 avg Spam%=0.19 avg Ham%=0.09
  DIET_1:  bad, avg S/O=0.34 avg Spam%=0.53 avg Ham%=1.04
  EM_ROLEX:  no hits at all
  EXCUSE_4:  no hits of target type
  EXCUSE_REMOVE:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  no hits at all
  INVESTMENT_ADVICE:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  JOIN_MILLIONS:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.01
  LOW_PRICE:  bad, avg S/O=0.22 avg Spam%=0.03 avg Ham%=0.10
  MARKETING_PARTNERS:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.07
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits at all
  ONE_TIME:  no hits at all
  PREST_NON_ACCREDITED:  no hits at all
  REMOVE_BEFORE_LINK:  no hits of target type
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits of target type
  URG_BIZ:  bad, avg S/O=0.69 avg Spam%=0.03 avg Ham%=0.01
  US_DOLLARS_3:  bad, avg S/O=0.62 avg Spam%=0.06 avg Ham%=0.03
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 10 bad):

  EMPTY_MESSAGE:  bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
  FORGED_MUA_MOZILLA:  no hits at all
  NO_HEADERS_MESSAGE:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  UPPERCASE_50_75:  bad, avg S/O=0.65 avg Spam%=0.04 avg Ham%=0.02
  UPPERCASE_75_100:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.02
  __MOZILLA_MSGID:  bad, avg S/O=0.08 avg Spam%=1.17 avg Ham%.61
      # used in: FORGED_MUA_MOZILLA
  __MOZILLA_MUA:  no hits of target type
      # used in: FORGED_MUA_MOZILLA
  __NONEMPTY_BODY:  bad, avg S/O=0.50 avg Spam%0.00 avg Ham%0.00
      # used in: EMPTY_MESSAGE STOX_META_5
  __UPPERCASE_50_75:  bad, avg S/O=0.68 avg Spam%=0.05 avg Ham%=0.02
      # used in: UPPERCASE_50_75
  __UPPERCASE_75_100:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.02
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 14 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  DC_IMAGE_SPAM_HTML:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.02
  DC_PNG_UNO_LARGO:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_IMG_HTML_RATIO:  bad, avg S/O=0.47 avg Spam%=0.22 avg Ham%=0.25
      # used in: DC_IMAGE_SPAM_HTML
  __DC_IMG_TEXT_RATIO:  bad, avg S/O=0.35 avg Spam%=0.22 avg Ham%=0.42
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  no hits at all
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.04
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML \
DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO  __GIF_ATTACH_1:  bad, avg \
S/O=0.21 avg Spam%=0.09 avg Ham%=0.32  # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML \
DC_IMAGE_SPAM_TEXT  __GIF_ATTACH_2P:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.30
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT \
DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO __DC_PNG_MULTI_LARGO  __PNG_ATTACH_1:  bad, avg \
S/O=0.04 avg Spam%=0.00 avg Ham%=0.01  # used in: DC_IMAGE_SPAM_HTML \
DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO  __PNG_ATTACH_2P:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 36 bad):

  HIDE_WIN_STATUS:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.59 avg Spam%=0.17 avg Ham%=0.11
  HTML_EMBEDS:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.18
  HTML_FONT_LOW_CONTRAST:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.15 avg Spam%=0.04 avg Ham%=0.20
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.15 avg Spam%=0.06 avg Ham%=0.35
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.02
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.42 avg Spam%=0.59 avg Ham%=0.80
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.13 avg Spam%=0.17 avg Ham%=1.15
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.08 avg Spam%=0.06 avg Ham%=0.77
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.69
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.50 avg Spam%=0.22 avg Ham%=0.21
  HTML_NONELEMENT_30_40:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  HTML_NONELEMENT_40_50:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.69 avg Spam%=0.02 avg Ham%=0.01
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.18 avg Spam%=0.06 avg Ham%=0.26
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  __HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
      # used in: HTML_TITLE_SUBJ_DIFF
  __JS_DOCWRITE:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.24
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __MIME_ATTACHMENT:  bad, avg S/O=0.14 avg Spam%=0.28 avg Ham%=1.70
      # used in: EMPTY_MESSAGE HTML_TITLE_SUBJ_DIFF STOX_META_5
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.60 avg Spam%=0.05 avg Ham%=0.03
      # used in: OBFUSCATING_COMMENT

rules/20_head_tests.cf (146 rules, 61 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.16 avg Spam%=0.01 avg Ham%=0.03
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_PAST_03_06:  bad, avg S/O=0.29 avg Spam%=0.23 avg Ham%=0.56
  DATE_IN_PAST_06_12:  bad, avg S/O=0.34 avg Spam%=0.36 avg Ham%=0.70
  DATE_IN_PAST_12_24:  bad, avg S/O=0.40 avg Spam%=0.17 avg Ham%=0.25
  DATE_IN_PAST_24_48:  bad, avg S/O=0.43 avg Spam%=0.04 avg Ham%=0.05
  ENGLISH_UCE_SUBJECT:  no hits at all
  EXTRA_MPART_TYPE:  bad, avg S/O=0.31 avg Spam%=0.21 avg Ham%=0.47
  FORGED_TELESP_RCVD:  no hits at all
  FROM_BLANK_NAME:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  HEADER_COUNT_CTYPE:  no hits of target type
  INVALID_DATE_TZ_ABSURD:  no hits of target type
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  MIME_BOUND_DIGITS_15:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.76 avg Spam%=0.49 avg Ham%=0.15
  MISSING_DATE:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.01
  MISSING_HEADERS:  bad, avg S/O=0.05 avg Spam%=0.21 avg Ham%=3.90
  MISSING_MID:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  MISSING_MIMEOLE:  bad, avg S/O=0.45 avg Spam%=0.11 avg Ham%=0.14
  MISSING_SUBJECT:  bad, avg S/O=0.47 avg Spam%=0.02 avg Ham%=0.03
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.12 avg Spam%=0.41 avg Ham%=2.96
  MSGID_RANDY:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  NO_RDNS_DOTCOM_HELO:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.01
  PLING_QUERY:  bad, avg S/O=0.64 avg Spam%=0.25 avg Ham%=0.14
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_ALL_CAPS:  bad, avg S/O=0.79 avg Spam%=1.36 avg Ham%=0.35
  SUBJ_AS_SEEN:  no hits at all
  SUBJ_BUY:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_DOLLARS:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.07
  TO_MALFORMED:  bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
  UNCLOSED_BRACKET:  bad, avg S/O=0.27 avg Spam%=0.02 avg Ham%=0.06
  WITH_LC_SMTP:  no hits at all
  X_IP:  bad, avg S/O=0.07 avg Spam%=0.03 avg Ham%=0.46
  X_PRIORITY_CC:  no hits at all
  __CD:  bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=8.01
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT:  bad, avg S/O=0.54 avg Spam%™.86 avg Ham%„.33
      # used in: MIME_HEADER_CTYPE_ONLY
  __CTE:  bad, avg S/O=0.21 avg Spam%.58 avg Ham%X.55
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT_TEXT_PLAIN:  bad, avg S/O=0.17 avg Spam%.35 avg Ham%a.08
      # used in: MIME_HEADER_CTYPE_ONLY DOS_DEREK_AUG08 HS_SYNDICATE_P2
  __DOUBLE_IP_SPAM_1:  no hits at all
      # used in: RCVD_DOUBLE_IP_LOOSE
  __FORGED_AOL_RCVD:  no hits at all
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_HOTMAIL_RCVD:  bad, avg S/O=0.80 avg Spam%=0.01 avg Ham%=0.00
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_RCVD_TRAIL:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.62
      # used in: CONFIRMED_FORGED
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.26 avg Spam%=0.53 avg Ham%=1.50
      # used in: MSGID_FROM_MTA_HEADER
  __HAS_MIMEOLE:  bad, avg S/O=0.67 avg Spam%#.08 avg Ham%.25
      # used in: MISSING_MIMEOLE
  __HAS_MSMAIL_PRI:  bad, avg S/O=0.76 avg Spam% .70 avg Ham%=6.49
      # used in: MISSING_MIMEOLE
  __HAS_SQUIRRELMAIL_IN_MAILER:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05
      # used in: MISSING_MIMEOLE
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%™.98 avg Ham%™.97
      # used in: MISSING_SUBJECT BELL_MOBILITY_TXT_MSG
  __HAS_X_MAILER:  bad, avg S/O=0.40 avg Spam%0.00 avg Ham%E.54
      # used in: FSL_MAILER_NO_MID
  __MIME_VERSION:  bad, avg S/O=0.54 avg Spam%–.31 avg Ham%‚.34
      # used in: MIME_HEADER_CTYPE_ONLY
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.01 avg Spam%=0.05 avg Ham%=3.06
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.11 avg Spam%=0.42 avg Ham%=3.37
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_OK_DIGITS:  bad, avg S/O=0.59 avg Spam%u.50 avg Ham%Q.73
      # used in: MSGID_RANDY
  __MSGID_OK_HEX:  bad, avg S/O=0.62 avg Spam%!.89 avg Ham%.60
      # used in: MSGID_RANDY
  __MSGID_OK_HOST:  bad, avg S/O=0.25 avg Spam%&.61 avg Ham%x.74
      # used in: MSGID_RANDY

rules/20_fake_helo_tests.cf (11 rules, 1 bad):

  HELO_DYNAMIC_ROGERS:  no hits at all

rules/20_dynrdns.cf (36 rules, 3 bad):

  __CGATE_RCVD:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.22
      # used in: FM_PHN_NODNS
  __DOMINO_RCVD:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_PHN_NODNS
  __LAST_UNTRUSTED_RELAY_NO_AUTH:  bad, avg S/O=0.50 avg Spam%0.00 avg Ham%™.12
      # used in: DOS_DEREK_AUG08

rules/20_drugs.cf (86 rules, 17 bad):

  DRUGS_ANXIETY:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.02
  DRUGS_ANXIETY_OBFU:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all
  __DRUGS_ANXIETY1:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_OBFU
  __DRUGS_ANXIETY3:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.01
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_OBFU
  __DRUGS_ANXIETY5:  no hits at all
      # used in: DRUGS_ANXIETY
  __DRUGS_ANXIETY6:  no hits at all
      # used in: DRUGS_ANXIETY
  __DRUGS_ANXIETY7:  no hits at all
      # used in: DRUGS_ANXIETY
  __DRUGS_ANXIETY8:  no hits at all
      # used in: DRUGS_ANXIETY
  __DRUGS_ANXIETY9:  no hits at all
      # used in: DRUGS_ANXIETY
  __DRUGS_ANXIETY_VAL:  bad, avg S/O=0.60 avg Spam%=0.02 avg Ham%=0.01
      # used in: DRUGS_ANXIETY_OBFU
  __DRUGS_SLEEP2:  no hits of target type
      # used in: DRUGS_SLEEP_EREC
  __DRUGS_SLEEP3:  no hits at all
      # used in: DRUGS_SLEEP_EREC
  __DRUGS_SLEEP4:  no hits at all
      # used in: DRUGS_SLEEP_EREC

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%0.00 avg Ham%™.99
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (29 rules, 13 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_BLANKS:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=3.48
  MIME_BASE64_TEXT:  bad, avg S/O=0.37 avg Spam%=0.09 avg Ham%=0.15
  MIME_HTML_MOSTLY:  bad, avg S/O=0.12 avg Spam%=0.14 avg Ham%=1.08
  MIME_HTML_ONLY_MULTI:  bad, avg S/O=0.19 avg Spam%=0.05 avg Ham%=0.21
  MIME_QP_LONG_LINE:  bad, avg S/O=0.71 avg Spam%=2.77 avg Ham%=1.12
  MPART_ALT_DIFF:  bad, avg S/O=0.38 avg Spam%=0.23 avg Ham%=0.38
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.06
  TRACKER_ID:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01
  URI_TRUNCATED:  no hits at all
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.56 avg Spam%.06 avg Ham%.28
      # used in: MIME_HTML_ONLY_MULTI


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic