According to the new script "build/listpromotable" -- should I just go ahead and promote these?
## ---------------------------------------------------------------------- ## Promotable rule: T_GEO_QUERY_STRING ## so=1.000 spc=2.433 hpc=0.000 ## rulesrc/sandbox/dos/20_uri.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_GEO_QUERY_STRING&s_detail=1 uri T_GEO_QUERY_STRING /^http:\/\/(?:\w{2,4}\.)?geocities\.com(?::\d*)?\/.+?\/\?/i ## ---------------------------------------------------------------------- ## Promotable rule: T_FORGED_IMS_TAGS ## so=1.000 spc=0.878 hpc=0.000 ## rulesrc/sandbox/dos/70_bugs.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FORGED_IMS_TAGS&s_detail=1 meta T_FORGED_IMS_TAGS (!T__YAHOO_BULK && __ANY_IMS_MUA && __MIME_HTML && !(__TAG_EXISTS_HTML && __TAG_EXISTS_HEAD && __TAG_EXISTS_META && __TAG_EXISTS_BODY)) ## ---------------------------------------------------------------------- ## Promotable rule: T_FORGED_IMS_HTML ## so=1.000 spc=1.260 hpc=0.000 ## rulesrc/sandbox/dos/70_bugs.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FORGED_IMS_HTML&s_detail=1 meta T_FORGED_IMS_HTML (!T__YAHOO_BULK && __IMS_MUA && MIME_HTML_ONLY && !(__IMS_HTML_BUILDS && __IMS_HTML_RCVD)) ## ---------------------------------------------------------------------- ## Promotable rule: T_FORGED_OUTLOOK_HTML ## so=0.999 spc=12.776 hpc=0.007 ## rulesrc/sandbox/dos/70_bugs.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FORGED_OUTLOOK_HTML&s_detail=1 meta T_FORGED_OUTLOOK_HTML (!T__YAHOO_BULK && __ANY_OUTLOOK_MUA && MIME_HTML_ONLY) ## ---------------------------------------------------------------------- ## Promotable rule: T_FORGED_OUTLOOK_TAGS ## so=0.999 spc=10.591 hpc=0.007 ## rulesrc/sandbox/dos/70_bugs.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FORGED_OUTLOOK_TAGS&s_detail=1 meta T_FORGED_OUTLOOK_TAGS (!T__YAHOO_BULK && __ANY_OUTLOOK_MUA && __MIME_HTML && !(__TAG_EXISTS_HTML && __TAG_EXISTS_HEAD && __TAG_EXISTS_META && __TAG_EXISTS_BODY)) ## ---------------------------------------------------------------------- ## Promotable rule: T_VERTICAL_DRUGS_1 ## so=1.000 spc=0.525 hpc=0.000 ## rulesrc/sandbox/duncf/20_drugs.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_VERTICAL_DRUGS_1&s_detail=1 describe T_VERTICAL_DRUGS_1 Looks like drug names spelled vertically ## ---------------------------------------------------------------------- ## Promotable rule: T_FUZZY_STOCK ## so=0.997 spc=3.600 hpc=0.010 ## rulesrc/sandbox/duncf/25_replace.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FUZZY_STOCK&s_detail=1 body T_FUZZY_STOCK /(?!stock)<S><T><O><C><K>/i describe T_FUZZY_STOCK Obfuscates the word "stock" ## ---------------------------------------------------------------------- ## Promotable rule: T_FUZZY_SPRM ## so=0.997 spc=1.066 hpc=0.004 ## rulesrc/sandbox/felicity/70_other.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_FUZZY_SPRM&s_detail=1 body T_FUZZY_SPRM /<inter W1><post P2><S><P><U><R><M>/i ## ---------------------------------------------------------------------- ## Promotable rule: T_SUBJECT_NEEDS_ENCODING ## so=0.995 spc=21.473 hpc=0.109 ## rulesrc/sandbox/felicity/70_other.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_SUBJECT_NEEDS_ENCODING&s_detail=1 meta T_SUBJECT_NEEDS_ENCODING (!__SUBJECT_ENCODED_B64 && !__SUBJECT_ENCODED_QP) && __SUBJECT_NEEDS_MIME ## ---------------------------------------------------------------------- ## Promotable rule: T_SUBJ_RE_NUM ## so=0.976 spc=0.789 hpc=0.019 ## rulesrc/sandbox/felicity/70_other.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_SUBJ_RE_NUM&s_detail=1 meta T_SUBJ_RE_NUM !__THEBAT_MUA && __SUBJ_RE_NUM describe T_SUBJ_RE_NUM Subject is faking 'The Bat!' responses ## ---------------------------------------------------------------------- ## Promotable rule: T_DRUGS_HDIA ## so=1.000 spc=0.463 hpc=0.000 ## rulesrc/sandbox/felicity/70_other.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_DRUGS_HDIA&s_detail=1 # tvd # 0.506 0.5714 0.0000 1.000 1.00 0.01 T_DRUGS_HDIA header T_DRUGS_HDIA Subject =~ /\bhoodia\b/i ## ---------------------------------------------------------------------- ## Promotable rule: T_URI_HTML_ONLY ## so=0.986 spc=21.650 hpc=0.306 ## rulesrc/sandbox/felicity/70_other.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_URI_HTML_ONLY&s_detail=1 # From discussion on users@ list body T_URI_HTML_ONLY eval:check_html_uri_only() describe T_URI_HTML_ONLY URIs only found in HTML part of multipart/alternative message ## ---------------------------------------------------------------------- ## Promotable rule: T_SUBJ_ACC_NUM ## so=1.000 spc=0.518 hpc=0.000 ## rulesrc/sandbox/felicity/70_phishing.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_SUBJ_ACC_NUM&s_detail=1 # 1.575 1.8696 0.0000 1.000 1.00 0.01 T_SUBJ_ACC_NUM3 # 1.532 1.8192 0.0000 1.000 0.67 0.01 T_SUBJ_ACC_NUM # 1.532 1.8192 0.0000 1.000 0.67 0.01 T_SUBJ_ACC_NUM2 header T_SUBJ_ACC_NUM Subject =~ /\b(?i:invoice|account).{1,4}\d+[A-Z]+/ describe T_SUBJ_ACC_NUM Subject has spammy looking monetary reference ## ---------------------------------------------------------------------- ## Promotable rule: T_SUBJ_ACC_NUM2 ## so=1.000 spc=0.494 hpc=0.000 ## rulesrc/sandbox/felicity/70_phishing.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_SUBJ_ACC_NUM2&s_detail=1 header T_SUBJ_ACC_NUM2 Subject =~ /\b(?i:invoice|account).{1,4}\d+[A-Z]+\s*$/ describe T_SUBJ_ACC_NUM2 Subject has spammy looking monetary reference ## ---------------------------------------------------------------------- ## Promotable rule: T_SUBJ_ACC_NUM3 ## so=0.996 spc=0.598 hpc=0.002 ## rulesrc/sandbox/felicity/70_phishing.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_SUBJ_ACC_NUM3&s_detail=1 header T_SUBJ_ACC_NUM3 Subject =~ /\b[a-zA-Z]+ \W{1,4}\d+[A-Z]+\s*$/ describe T_SUBJ_ACC_NUM3 Subject has spammy looking monetary reference ## ---------------------------------------------------------------------- ## Promotable rule: T_PH_TVD_7 ## so=0.952 spc=0.331 hpc=0.017 ## rulesrc/sandbox/felicity/70_phishing.cf ## http://buildbot.spamassassin.org/ruleqa?daterev=20051208-r354929-n&rule=T_PH_TVD_7&s_detail=1 body T_PH_TVD_7 /\baccount .{0,20}suspen/i
