HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

plugin: failed to create instance of plugin 
Mail::SpamAssassin::Plugin::Sandbox::hstern: Can't locate object method "new" 
via package "Mail::SpamAssassin::Plugin::Sandbox::hstern" (perhaps you forgot 
to load "Mail::SpamAssassin::Plugin::Sandbox::hstern"?) at (eval 271) line 1.

plugin: failed to create instance of plugin 
Mail::SpamAssassin::Plugin::FreeMail: Can't locate object method "new" via 
package "Mail::SpamAssassin::Plugin::FreeMail" (perhaps you forgot to load 
"Mail::SpamAssassin::Plugin::FreeMail"?) at (eval 272) line 1.

Use of uninitialized value in concatenation (.) or string at 
masses/rule-qa/list-bad-rules line 181.
demoting : config: found endif without matching conditional at 
masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value in hash element at masses/rule-qa/list-bad-rules 
line 183.

rulesrc/sandbox/mmartinec/25_yg.cf (17 rules, 17 bad):

  NOTVALID_GMAIL:  bad, avg S/O=0.52 avg Spam%=0.44 avg Ham%=0.40
  NOTVALID_PAY:  bad, avg S/O=0.17 avg Spam%=0.05 avg Ham%=0.24
  NOTVALID_YAHOO:  bad, avg S/O=0.55 avg Spam%=0.85 avg Ham%=0.69
  __AUTH_EBAY:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.20
      # used in: NOTVALID_PAY
  __AUTH_GMAIL:  bad, avg S/O=0.04 avg Spam%=0.44 avg Ham%=11.44
      # used in: NOTVALID_GMAIL
  __AUTH_PAYPAL:  bad, avg S/O=0.57 avg Spam%=0.04 avg Ham%=0.03
      # used in: NOTVALID_PAY
  __AUTH_YAHOO:  bad, avg S/O=0.16 avg Spam%=0.85 avg Ham%=4.50
      # used in: NOTVALID_YAHOO
  __AUTH_YAHOO1:  bad, avg S/O=0.16 avg Spam%=0.51 avg Ham%=2.59
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO2:  bad, avg S/O=0.71 avg Spam%=0.09 avg Ham%=0.04
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO3:  bad, avg S/O=0.13 avg Spam%=0.13 avg Ham%=0.90
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO4:  bad, avg S/O=0.11 avg Spam%=0.12 avg Ham%=0.97
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=59.83
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=72.32
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=63.44
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML4:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=39.04
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.07 avg Ham%=24.03
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __VIA_ML:  bad, avg S/O=0.00 avg Spam%=0.11 avg Ham%=74.47
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO

rulesrc/sandbox/mmartinec/20_misc.cf (12 rules, 2 bad):

  LONGLINE:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.64
  MSGID_NOFQDN2:  bad, avg S/O=0.72 avg Spam%=25.36 avg Ham%=9.88

rulesrc/sandbox/maddoc/99_doc_test.cf (37 rules, 15 bad):

  FSL_BLOGSPOT_ABUSE:  bad, avg S/O=0.20 avg Spam%=0.23 avg Ham%=0.91
  FSL_FREEMAIL_1:  bad, avg S/O=0.49 avg Spam%=1.87 avg Ham%=1.95
  FSL_FREEMAIL_2:  bad, avg S/O=0.40 avg Spam%=0.77 avg Ham%=1.16
  FSL_GD2_URI:  no hits of target type
  FSL_HAS_TINYURL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.32
  FSL_HELO_HOME:  bad, avg S/O=0.77 avg Spam%=0.51 avg Ham%=0.15
  FSL_HELO_NON_FQDN_2:  bad, avg S/O=0.47 avg Spam%=86.64 avg Ham%=99.12
  FSL_SINGLE_URI:  bad, avg S/O=0.58 avg Spam%=35.54 avg Ham%=26.10
  FSL_SPAMWARE_STRING_1:  bad, avg S/O=0.41 avg Spam%=0.05 avg Ham%=0.08
  FSL_UA:  bad, avg S/O=0.72 avg Spam%=0.20 avg Ham%=0.08
  __ANY_HTTP_URI:  bad, avg S/O=0.54 avg Spam%=89.42 avg Ham%=77.13
      # used in: FSL_SINGLE_URI
  __FROM_FREEMAIL:  bad, avg S/O=0.11 avg Spam%=2.19 avg Ham%=17.62
      # used in: FSL_FREEMAIL_2
  __FSL_UA_2:  bad, avg S/O=0.72 avg Spam%=0.20 avg Ham%=0.08
      # used in: FSL_UA
  __HAS_REPLY_TO:  bad, avg S/O=0.19 avg Spam%=10.95 avg Ham%=47.94
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __REPLY_FREEMAIL:  bad, avg S/O=0.49 avg Spam%=1.87 avg Ham%=1.95
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.35 avg Spam%=2.04 avg Ham%=3.82
  __KAM_MX3:  bad, avg S/O=0.35 avg Spam%=2.03 avg Ham%=3.82
      # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (19 rules, 2 bad):

  KAM_REPLACE:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.25
  __KAM_REP2:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.25
      # used in: KAM_REPLACE

rulesrc/sandbox/jm/80_sane.cf (61 rules, 4 bad):

  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.37 avg Spam%=0.01 avg 
Ham%=0.02
  SANE_d0d2b0f6373bf91253d66dd74c594b87:  bad, avg S/O=0.73 avg Spam%=0.00 avg 
Ham%=0.00
  SANE_e0b42866efae083b5d78a87e2e6710e9:  no hits of target type
  SANE_e761c503a58719e688c96a3ee254fbce:  bad, avg S/O=0.01 avg Spam%=0.00 avg 
Ham%=0.54

rulesrc/sandbox/jm/20_basic.cf (72 rules, 10 bad):

  CURR_PRICE:  no hits of target type
  IMG_ALT_HSPACE_CID_ALIGN:  no hits of target type
  IMG_CID_PART1:  no hits of target type
  MIME_BOUND_EQ_REL:  no hits of target type
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.38
  PART_CID_STOCK_LESS:  bad, avg S/O=0.40 avg Spam%=0.04 avg Ham%=0.06
  STOX_BOUND_090909_B:  bad, avg S/O=0.22 avg Spam%=0.06 avg Ham%=0.22
  STOX_UA:  no hits of target type
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.87
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.77
      # used in: MSNBC_THREAD_INDEX

rulesrc/sandbox/jhardin/20_fillform.cf (8 rules, 6 bad):

  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.34 avg Spam%=0.14 avg Ham%=0.26
  FILL_THIS_FORM_LONG:  bad, avg S/O=0.77 avg Spam%=0.20 avg Ham%=0.06
      # used in: FILL_THIS_FORM_FRAUD_PHISH
  FILL_THIS_FORM_ML:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
      # used in: FILL_THIS_FORM_FRAUD_PHISH
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.55 avg Spam%=0.84 avg Ham%=0.69
      # used in: FILL_THIS_FORM_FRAUD_PHISH
  __FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.35 avg Spam%=10.74 avg 
Ham%=20.25
      # used in: FILL_THIS_FORM_FRAUD_PHISH
  __FILL_THIS_FORM_PARTIAL:  bad, avg S/O=0.40 avg Spam%=0.21 avg Ham%=0.32
      # used in: FILL_THIS_FORM_FRAUD_PHISH FILL_THIS_FORM_ML

rulesrc/sandbox/hstern/20_uri_tests.cf (11 rules, 1 bad):

  HS_EXTRA:  no hits of target type

rulesrc/sandbox/hege/20_FreeMail_mass.cf (15 rules, 12 bad):

  FREEMAIL_FORGED_REPLYTO:  bad, avg S/O=0.57 avg Spam%=0.05 avg Ham%=0.04
  FREEMAIL_FROM:  bad, avg S/O=0.16 avg Spam%=3.78 avg Ham%=19.57
      # used in: FREEMAIL_FORGED_REPLYTO
  FREEMAIL_FROM_END_DIGIT:  bad, avg S/O=0.53 avg Spam%=1.88 avg Ham%=1.64
  FREEMAIL_REPLY:  bad, avg S/O=0.69 avg Spam%=0.14 avg Ham%=0.06
  FREEMAIL_SUBJECT:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  __freemail_hdr_replyto:  bad, avg S/O=0.26 avg Spam%=0.42 avg Ham%=1.20
      # used in: FREEMAIL_FORGED_REPLYTO
  __freemail_safe:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=75.92
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY
  __freemail_safe_fwd:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=9.94
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY __freemail_safe
  __freemail_safe_ml1:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=72.32
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY __freemail_safe
  __freemail_safe_ml2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=39.04
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY __freemail_safe
  __freemail_safe_ml3:  no hits of target type
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY __freemail_safe
  __freemail_safe_rls:  no hits of target type
      # used in: FREEMAIL_FORGED_REPLYTO FREEMAIL_REPLY __freemail_safe

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (57 rules, 46 bad):

  FAKE_REPLY_B:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  FAKE_REPLY_C:  bad, avg S/O=0.74 avg Spam%=0.05 avg Ham%=0.02
  FAKE_REPLY_SURE_A:  bad, avg S/O=0.01 avg Spam%=0.34 avg Ham%=38.48
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.01 avg Spam%=0.35 avg Ham%=41.94
  NICE_REPLY_A:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type
  __BOTH_INR_AND_REF:  bad, avg S/O=0.42 avg Spam%=2.82 avg Ham%=3.90
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B 
FAKE_REPLY_SURE_B NICE_REPLY_A
  __BROKE_MUAS:  bad, avg S/O=0.49 avg Spam%=0.13 avg Ham%=0.13
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __INR_AND_NO_REF:  bad, avg S/O=0.31 avg Spam%=4.27 avg Ham%=9.52
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B
  __MISSING_REF:  bad, avg S/O=0.65 avg Spam%=99.92 avg Ham%=54.99
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B 
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B 
NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B
  __MISSING_REPLY:  bad, avg S/O=0.65 avg Spam%=96.25 avg Ham%=50.86
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B 
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B 
NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_C
  __MISSING_THREAD:  bad, avg S/O=0.51 avg Spam%=98.34 avg Ham%=93.44
      # used in: FAKE_REPLY_SURE_A
  __SUBJ_RE:  bad, avg S/O=0.01 avg Spam%=0.42 avg Ham%=48.91
      # used in: FAKE_REPLY_C FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B 
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B 
NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B TEST_REPLY_C
  __UA_GNUS:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __UA_IMP:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.17
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __UA_KMAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.93
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __UA_KNODE:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __UA_MOZ5:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.65
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __UA_MSENTOUR:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.52
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __UA_MSOEMAC:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __UA_MUTT:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.39
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __UA_PAN:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __XM_AOL:  bad, avg S/O=0.30 avg Spam%=0.03 avg Ham%=0.08
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_APPLEMAIL:  bad, avg S/O=0.01 avg Spam%=0.05 avg Ham%=5.60
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_COMMUNIG:  bad, avg S/O=0.66 avg Spam%=0.05 avg Ham%=0.03
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_ELM:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __XM_LOTUSN:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.12
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_LOTUSN5:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_MAILSMITH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_MIMETOOLS:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.03
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_MOZ4:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __XM_MSCDO:  bad, avg S/O=0.20 avg Spam%=0.05 avg Ham%=0.18
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_MSOUT:  bad, avg S/O=0.30 avg Spam%=0.50 avg Ham%=1.15
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_NETMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_NOVELL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_PEGASUS:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.14
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_QUALCOM:  bad, avg S/O=0.78 avg Spam%=3.59 avg Ham%=1.01
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_SQRLMAIL:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __XM_SYLPHEED:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.06
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __XM_VM:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF
  __XM_WWWMAIL:  no hits of target type
      # used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C 
TEST_REPLY_C
  __XM_XIMEVOL:  bad, avg S/O=0.42 avg Spam%=0.02 avg Ham%=0.02
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A 
__BOTH_INR_AND_REF

rulesrc/sandbox/felicity/70_phishing.cf (38 rules, 12 bad):

  TVD_PH_1:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_7:  bad, avg S/O=0.28 avg Spam%=0.02 avg Ham%=0.05
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.07
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.27 avg Spam%=0.03 avg Ham%=0.07
  TVD_PH_FR5:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.10
  TVD_PH_SUBJ_META:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.02
  TVD_PH_SUBJ_META_ALL:  bad, avg S/O=0.72 avg Spam%=0.12 avg Ham%=0.05
  TVD_PH_SUBJ_UPDATE:  bad, avg S/O=0.54 avg Spam%=0.01 avg Ham%=0.01
      # used in: TVD_PH_SUBJ_META_ALL
  TVD_PH_SUBJ_URGENT:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  __PH_TVD_FROM2:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.20
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_05:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
      # used in: TVD_PH_BODY_META_ALL
  __TVD_PH_SUBJ_ACCESS_POST:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.02
      # used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL

rulesrc/sandbox/felicity/70_other.cf (64 rules, 28 bad):

  FUZZY_SPRM:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  HEADER_COUNT_SUBJECT:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.00
  NULL_IN_BODY:  no hits of target type
  RCVD_BAD_ID:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  TVD_ACT_193:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  TVD_APP_LOAN:  no hits of target type
  TVD_DOLLARS_US:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  TVD_FLOAT_GENERAL:  no hits of target type
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.37 avg Spam%=0.01 avg Ham%=0.02
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FUZZY_SYMBOL:  no hits of target type
  TVD_FW_GRAPHIC_ID1:  bad, avg S/O=0.71 avg Spam%=0.52 avg Ham%=0.21
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.07
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.07
  TVD_GET_STOCK:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.02
  TVD_HEAD_KERNEL:  no hits of target type
  TVD_LONG_WORD5:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.15
  TVD_SECTION:  no hits of target type
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  TVD_SPACED_SUBJECT_WORD3:  no hits of target type
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.07
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.12
  TVD_SUBJ_FINGER_07:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  T_TVD_IP_HEX:  bad, avg S/O=0.37 avg Spam%=0.01 avg Ham%=0.01
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.24
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  __HEAD_X_KERNEL:  no hits of target type
      # used in: TVD_HEAD_KERNEL

rulesrc/sandbox/emailed/00_FVGT_File001.cf (389 rules, 118 bad):

  FB_BE_MILLION:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  FB_CONSOL_YOUR:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  FB_DDDD_BUCKS:  no hits of target type
  FB_DROWNING_DEBT:  no hits of target type
  FB_EXPLOSIVE:  no hits of target type
  FB_EXP_POWER_OF:  no hits of target type
  FB_FUNNY_WEIGHT:  no hits of target type
  FB_INCREASE_VOL:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
  FB_NUMYO:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  FB_SPACED_PHN_3B:  no hits of target type
  FB_SSEX:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.00
  FB_TIRED_OF_YOUR:  bad, avg S/O=0.44 avg Spam%=0.01 avg Ham%=0.01
  FB_WORD1_END_DOLLAR:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.01
  FB_WORD2_END_DOLLAR:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.10
  FB_YOUR_MORTGAGE:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_REFI:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  FB_YOUR_REFILL:  no hits of target type
  FB_YOUR_WEIGHT:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  FF_IHOPE_YOU_SINK:  bad, avg S/O=0.11 avg Spam%=0.03 avg Ham%=0.30
  FF_LEO_FLOAT_RIGHT:  no hits of target type
  FH_HAS_XID:  no hits of target type
  FH_MSGID_01C67:  no hits of target type
  FH_RANDOM_SURE:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.04
  FH_RCVD_FROM_2_WDS:  no hits of target type
  FH_XMAIL_HEX20:  no hits of target type
  FM_ASCII_ART_SPACINGc:  no hits of target type
  FM_BIG_REASON:  bad, avg S/O=0.68 avg Spam%=0.03 avg Ham%=0.02
  FM_CLAIM_IPOD:  no hits of target type
  FM_FORGED_GMAIL:  bad, avg S/O=0.01 avg Spam%=0.07 avg Ham%=4.38
  FM_GOOD_ENF_CREDIT:  no hits of target type
  FM_LOTTO_MONEY:  bad, avg S/O=0.79 avg Spam%=0.03 avg Ham%=0.01
  FM_MAKE_MONEY_HOME:  no hits of target type
  FM_MORTGAGE3PLUS:  no hits of target type
  FM_RATSIGN_1106:  no hits of target type
  FM_RE_HELLO_SPAM:  no hits of target type
  FM_XMAIL_F_OUT:  no hits of target type
  FRT_ADULT2:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  FRT_BELOW2:  bad, avg S/O=0.64 avg Spam%=0.04 avg Ham%=0.02
  FRT_CANSPAM:  no hits of target type
  FRT_CLICK:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.05
  FRT_CONTACT:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.52
  FRT_ERECTION:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  FRT_FOLLOW1:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  FRT_FOLLOW2:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  FRT_FRIEND:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FRT_FUCK1:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
  FRT_HEALTH:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
  FRT_LITTLE:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
  FRT_LOLITA1:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
  FRT_MEETING:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  FRT_OFFER2:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  FRT_PACKAGE:  bad, avg S/O=0.80 avg Spam%=0.01 avg Ham%=0.00
  FRT_PENIS1:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  FRT_PHARMAC:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.02
  FRT_PRICE:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  FRT_PROFILE1:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.07
  FRT_PROFILE2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.11
  FRT_PROFIT1:  no hits of target type
  FRT_PROFIT2:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  FRT_SLUT:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  FRT_STOCK1:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  FRT_STOCK2:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.22
  FRT_STRONG1:  no hits of target type
  FRT_SYMBOL:  no hits of target type
  FRT_VALIUM1:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  FRT_VALIUM2:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  FRT_XANAX1:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.00
  FR_3TAG_3TAG:  no hits of target type
  FR_ALMOST_VIAG2:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  FR_IMPORT_CSS:  no hits of target type
  FR_PORN_NOT_URL:  no hits of target type
  FR_P_END_P_MANY10:  no hits of target type
  FR_TEST_BASE64_BAD:  no hits of target type
  FS_COSTARICA:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  FS_END_BILLS:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  FS_SINGLE_LETTER_H:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
  FU_16R:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  FU_COMMON_SUBS2:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  FU_LOTSOFCOLONS:  no hits of target type
  FU_RX_DIR:  no hits of target type
  FU_UKGEOCITIES:  bad, avg S/O=0.59 avg Spam%=0.00 avg Ham%=0.00
  __ALL_RANDOM:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: FH_RANDOM_SURE
  __APPROVALFVGT:  bad, avg S/O=0.11 avg Spam%=0.09 avg Ham%=0.70
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS
  __BIGDOLLARSFVGT:  bad, avg S/O=0.25 avg Spam%=0.24 avg Ham%=0.73
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS
  __DATE_700:  bad, avg S/O=0.40 avg Spam%=5.71 avg Ham%=8.53
      # used in: FM_RATSIGN_1106
  __FB_BEST:  bad, avg S/O=0.76 avg Spam%=0.90 avg Ham%=0.29
      # used in: FM_BIG_REASON
  __FB_BIG:  bad, avg S/O=0.58 avg Spam%=0.39 avg Ham%=0.28
      # used in: FM_BIG_REASON
  __FB_FIND_OUT:  bad, avg S/O=0.56 avg Spam%=0.56 avg Ham%=0.44
      # used in: FM_MAKE_MONEY_HOME
  __FB_FROM_YOUR:  bad, avg S/O=0.34 avg Spam%=0.74 avg Ham%=1.44
      # used in: FM_MAKE_MONEY_HOME
  __FB_GENERATE:  bad, avg S/O=0.10 avg Spam%=0.50 avg Ham%=4.45
      # used in: FM_MAKE_MONEY_HOME
  __FB_HOME_HOUSE:  bad, avg S/O=0.42 avg Spam%=9.26 avg Ham%=12.87
      # used in: FM_MAKE_MONEY_HOME
  __FB_LOTTERY:  bad, avg S/O=0.54 avg Spam%=0.19 avg Ham%=0.16
      # used in: FM_LOTTO_MONEY
  __FB_NATIONAL:  bad, avg S/O=0.33 avg Spam%=1.61 avg Ham%=3.32
      # used in: FM_LOTTO_MONEY
  __FB_REASON:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.05
      # used in: FM_BIG_REASON
  __FH_MSGID_01C7:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: FM_RE_HELLO_SPAM
  __FIXED_RATEFVGT:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS
  __FM_LARGE_MONEY:  bad, avg S/O=0.19 avg Spam%=0.94 avg Ham%=4.10
      # used in: FM_LOTTO_MONEY
  __FM_MORTGAGE3PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS
  __FM_NAT_LOTTERY:  bad, avg S/O=0.41 avg Spam%=0.03 avg Ham%=0.05
      # used in: FM_LOTTO_MONEY
  __FROM_GMAIL:  bad, avg S/O=0.04 avg Spam%=0.45 avg Ham%=11.44
      # used in: FM_FORGED_GMAIL
  __FR_SPACING_15:  bad, avg S/O=0.25 avg Spam%=0.13 avg Ham%=0.40
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_22:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.30
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_8:  bad, avg S/O=0.63 avg Spam%=1.17 avg Ham%=0.69
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_9:  bad, avg S/O=0.76 avg Spam%=1.15 avg Ham%=0.36
      # used in: FM_ASCII_ART_SPACINGc
  __FS_IPODXBOX:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.12
      # used in: FM_CLAIM_IPOD
  __FS_MP3PLAY:  no hits of target type
      # used in: FM_CLAIM_IPOD
  __FS_SUBJ_RE:  bad, avg S/O=0.00 avg Spam%=0.07 avg Ham%=43.81
      # used in: FM_RE_HELLO_SPAM
  __F_LARGE_MONEY:  bad, avg S/O=0.24 avg Spam%=0.76 avg Ham%=2.46
      # used in: FM_LOTTO_MONEY __FM_LARGE_MONEY
  __F_LARGE_MONEY_2:  bad, avg S/O=0.09 avg Spam%=0.19 avg Ham%=1.93
      # used in: FM_LOTTO_MONEY __FM_LARGE_MONEY
  __GOOD_ENOUGH:  bad, avg S/O=0.06 avg Spam%=0.02 avg Ham%=0.34
      # used in: FM_GOOD_ENF_CREDIT
  __HOMELOANFVGT:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __LOANURIFVGT:  bad, avg S/O=0.47 avg Spam%=0.01 avg Ham%=0.01
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __MSGID_GMAIL:  bad, avg S/O=0.01 avg Spam%=0.18 avg Ham%=14.38
      # used in: FM_FORGED_GMAIL
  __MSGID_VGA:  no hits of target type
      # used in: FM_RATSIGN_1106
  __PREAPPROVEDFVGT:  no hits of target type
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS
  __RAW_RANDOM:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
      # used in: FH_RANDOM_SURE
  __YOUR_CREDIT:  bad, avg S/O=0.53 avg Spam%=0.32 avg Ham%=0.28
      # used in: FM_GOOD_ENF_CREDIT
  __YOUR_CREDITFVGT:  bad, avg S/O=0.55 avg Spam%=0.35 avg Ham%=0.29
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS 
FM_MORTGAGE3PLUS __FM_MORTGAGE3PLUS

rulesrc/sandbox/duncf/20_header.cf (3 rules, 2 bad):

  APOSTROPHE_TOCC:  no hits of target type
  STUDDLYCAPS:  bad, avg S/O=0.60 avg Spam%=0.45 avg Ham%=0.30

rulesrc/sandbox/dos/70_other.cf (55 rules, 11 bad):

  DOS_FAKE_SQUIRREL:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.05
  DOS_OUTLOOK_TO_MX_IMAGE:  no hits of target type
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.59 avg Spam%=3.29 avg Ham%=2.31
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=72.32
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=72.14
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_MAILING_LIST:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=39.04
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_MAILER_SM:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
      # used in: DOS_FAKE_SQUIRREL
  __DOS_RELAYED_EXT:  bad, avg S/O=0.14 avg Spam%=16.10 avg Ham%=96.99
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_RELAY_SM:  bad, avg S/O=0.06 avg Spam%=0.02 avg Ham%=0.23
      # used in: DOS_FAKE_SQUIRREL
  __DOS_SM_MID:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.22
      # used in: DOS_FAKE_SQUIRREL
  __DOS_UA_SM:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.23
      # used in: DOS_FAKE_SQUIRREL

rulesrc/sandbox/dos/20_uri.cf (3 rules, 1 bad):

  GEO_QUERY_STRING:  no hits of target type

rules/72_active.cf (75 rules, 3 bad):

  TVD_FW_GRAPHIC_NAME_LONG:  bad, avg S/O=0.49 avg Spam%=0.03 avg Ham%=0.03
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.22 avg Spam%=0.02 avg Ham%=0.07
  __PART_CID_STOCK_LESS:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.06
      # used in: PART_CID_STOCK_LESS

rules/70_sandbox.cf (69 rules, 1 bad):

  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.12
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2

rules/25_replace.cf (32 rules, 17 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_AMBIEN:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.04
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.49 avg Spam%=0.05 avg Ham%=0.05
  FUZZY_ERECT:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  FUZZY_MORTGAGE:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_REFINANCE:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_REMOVE:  no hits at all
  FUZZY_ROLEX:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_XPILL:  bad, avg S/O=0.80 avg Spam%=0.02 avg Ham%=0.01
  SUBJECT_FUZZY_CHEAP:  no hits at all
  SUBJECT_FUZZY_TION:  bad, avg S/O=0.74 avg Spam%=0.03 avg Ham%=0.01

rules/20_vbounce.cf (160 rules, 151 bad):

  ANY_BOUNCE_MESSAGE:  no hits of target type
  BOUNCE_MESSAGE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE
  CHALLENGE_RESPONSE:  no hits at all
  VBOUNCE_MESSAGE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE
  __AUTO_GEN_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_4:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_AG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_AS:  bad, avg S/O=0.10 avg Spam%=0.08 avg Ham%=0.68
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_BBTL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_CM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_PREC:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __AUTO_GEN_XBT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __AUTO_GEN_XXSP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_ADDR_ERR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_GENERATED:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.42
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_REPLY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPOND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_AUTO_RESPONSE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_COULD_NOT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_CTYPE:  bad, avg S/O=0.28 avg Spam%=0.03 avg Ham%=0.08
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DATA_FORMAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_DEL_FAIL:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE 
BOUNCE_MESSAGE
  __BOUNCE_ESMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_FROM_DAEMON:  bad, avg S/O=0.47 avg Spam%=0.14 avg Ham%=0.16
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAILDELFAIL:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.03
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MAIL_DEL_FAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_MSGDELFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NEVER_SEE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NONWORKING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NOTDEL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_RESEND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_NO_VAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_OOO_H3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RETURNED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RET_MAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_ERRMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_MD:  bad, avg S/O=0.69 avg Spam%=0.14 avg Ham%=0.06
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_RPATH_NULL:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_STAT_FAIL:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_SYMANTEC:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.02
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_UNDELIVERABLE_ML:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_X_ERR_STAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __BOUNCE_Y_AUTOGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_HEADER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_UOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VANQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __CRBOUNCE_VERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE
  __HAVE_BOUNCE_RELAYS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY2:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MAJORDOMO_SUBJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __MY_SERVERS_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE 
BOUNCE_MESSAGE CHALLENGE_RESPONSE VBOUNCE_MESSAGE
  __NONBOUNCE_READ_RECEIPT_CTYPE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
  __VBOUNCE_ALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ANTIGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATTACHMENT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AVREPORT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CISCO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DETECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_DUTCH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMANAGER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EMVD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_EXIM:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_FROMPT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GSHIELD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GUIN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE 
VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE 
VBOUNCE_MESSAGE
  __VBOUNCE_INFLEX:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_JMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_LUTHER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MAJORDOMO_HELP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MELDING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MMS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_MSGLABS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_RAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_UNDELIV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_WARNING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
  __XM_VBULLETIN:  bad, avg S/O=0.76 avg Spam%=0.06 avg Ham%=0.02
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED
  __X_CRON_ENV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED

rules/20_uri_tests.cf (18 rules, 15 bad):

  HTTP_77:  no hits at all
  HTTP_ESCAPED_HOST:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  IP_LINK_PLUS:  no hits at all
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.43 avg Spam%=0.30 avg Ham%=0.40
  NUMERIC_HTTP_ADDR:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  SPOOF_COM2COM:  bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.01
  SPOOF_COM2OTH:  bad, avg S/O=0.66 avg Spam%=0.02 avg Ham%=0.01
  SPOOF_NET2COM:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
  URI_HEX:  bad, avg S/O=0.19 avg Spam%=0.08 avg Ham%=0.35
  URI_NO_WWW_BIZ_CGI:  no hits at all
  URI_NO_WWW_INFO_CGI:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.11
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (92 rules, 23 bad):

  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  RATWARE_GECKO_BUILD:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  __ANY_OUTLOOK_MUA:  bad, avg S/O=0.78 avg Spam%=28.59 avg Ham%=7.92
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __CTYPE_CHARSET_QUOTED:  bad, avg S/O=0.57 avg Spam%=40.58 avg Ham%=30.58
      # used in: FORGED_MUA_THEBAT_CS
  __GATED_THROUGH_RCVD_REMOVER:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=18.95
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __HOTMAIL_BAYDAV_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IMS_MSGID:  bad, avg S/O=0.06 avg Spam%=0.16 avg Ham%=2.39
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IPLANET_MESSAGING_SERVER:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.03
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=48.68
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __MAILMAN_21:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=17.98
      # used in: FORGED_MUA_THEBAT_CS
  __RATWARE_0_TZ_DATE:  bad, avg S/O=0.30 avg Spam%=4.86 avg Ham%=11.25
      # used in: RATWARE_NAME_ID RATWARE_ZERO_TZ
  __RATWARE_NAME_ID:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.33
      # used in: RATWARE_NAME_ID
  __SYMPATICO_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __THEBAT_MUA_V1:  bad, avg S/O=0.48 avg Spam%=0.01 avg Ham%=0.01
      # used in: FORGED_THEBAT_HTML
  __UNUSABLE_MSGID:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=48.81
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID

rules/20_porn.cf (4 rules, 3 bad):

  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (48 rules, 29 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  BAD_CREDIT:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.08
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  DEAR_SOMETHING:  bad, avg S/O=0.23 avg Spam%=0.03 avg Ham%=0.11
  DIET_1:  bad, avg S/O=0.54 avg Spam%=1.48 avg Ham%=1.24
  EM_ROLEX:  no hits at all
  EXCUSE_4:  no hits of target type
  EXCUSE_REMOVE:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  no hits at all
  INVESTMENT_ADVICE:  no hits of target type
  JOIN_MILLIONS:  bad, avg S/O=0.63 avg Spam%=0.01 avg Ham%=0.01
  LOW_PRICE:  bad, avg S/O=0.65 avg Spam%=0.18 avg Ham%=0.10
  MARKETING_PARTNERS:  no hits of target type
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits at all
  ONE_TIME:  no hits at all
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits of target type
  URG_BIZ:  bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
  US_DOLLARS_3:  bad, avg S/O=0.64 avg Spam%=0.05 avg Ham%=0.03
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 6 bad):

  NO_HEADERS_MESSAGE:  bad, avg S/O=0.52 avg Spam%=0.01 avg Ham%=0.01
  PERCENT_RANDOM:  no hits at all
  UPPERCASE_75_100:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.02
  __PC_RND_HEADER:  no hits at all
      # used in: PERCENT_RANDOM
  __PC_RND_RAWBODY:  no hits at all
      # used in: PERCENT_RANDOM
  __UPPERCASE_75_100:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.02
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 10 bad):

  DC_IMAGE_SPAM_HTML:  bad, avg S/O=0.79 avg Spam%=0.06 avg Ham%=0.01
  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.78 avg Spam%=0.06 avg Ham%=0.02
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  no hits at all
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.64 avg Spam%=0.06 avg Ham%=0.03
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT 
DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __GIF_ATTACH_1:  bad, avg S/O=0.71 avg Spam%=0.66 avg Ham%=0.27
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_ATTACH_2P:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.25
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT 
DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO __DC_PNG_MULTI_LARGO
  __PNG_ATTACH_2P:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 30 bad):

  HIDE_WIN_STATUS:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.14 avg Spam%=0.02 avg Ham%=0.12
  HTML_COMMENT_SHORT:  no hits at all
  HTML_EMBEDS:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.70 avg Spam%=0.36 avg Ham%=0.15
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.21 avg Spam%=0.09 avg Ham%=0.33
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
  HTML_IMAGE_ONLY_08:  bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.47 avg Spam%=0.60 avg Ham%=0.69
  HTML_MESSAGE:  bad, avg S/O=0.80 avg Spam%=82.14 avg Ham%=20.87
  HTML_NONELEMENT_30_40:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  HTML_NONELEMENT_40_50:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
  HTML_OBFUSCATE_10_20:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits of target type
  __JS_DOCWRITE:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.20
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.03
      # used in: OBFUSCATING_COMMENT

rules/20_head_tests.cf (146 rules, 48 bad):

  CONFIRMED_FORGED:  no hits at all
  DATE_IN_PAST_03_06:  bad, avg S/O=0.44 avg Spam%=0.50 avg Ham%=0.64
  DATE_IN_PAST_06_12:  bad, avg S/O=0.63 avg Spam%=1.31 avg Ham%=0.77
  DATE_IN_PAST_12_24:  bad, avg S/O=0.67 avg Spam%=0.53 avg Ham%=0.26
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  EXTRA_MPART_TYPE:  bad, avg S/O=0.49 avg Spam%=0.38 avg Ham%=0.40
  FORGED_HOTMAIL_RCVD2:  bad, avg S/O=0.71 avg Spam%=0.36 avg Ham%=0.15
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_TELESP_RCVD:  no hits at all
  GAPPY_SUBJECT:  bad, avg S/O=0.61 avg Spam%=0.03 avg Ham%=0.02
  HEADER_COUNT_CTYPE:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  INVALID_DATE_TZ_ABSURD:  no hits of target type
  INVALID_TZ_EST:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.01
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.58 avg Spam%=0.00 avg Ham%=0.00
  MISSING_DATE:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.01
  MISSING_HEADERS:  bad, avg S/O=0.07 avg Spam%=0.23 avg Ham%=2.91
  MISSING_MID:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.01
  MISSING_MIMEOLE:  bad, avg S/O=0.62 avg Spam%=0.20 avg Ham%=0.13
  MISSING_SUBJECT:  bad, avg S/O=0.54 avg Spam%=0.02 avg Ham%=0.02
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.05 avg Spam%=0.16 avg Ham%=2.74
  MSGID_MULTIPLE_AT:  bad, avg S/O=0.50 avg Spam%=0.06 avg Ham%=0.06
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  NO_RDNS_DOTCOM_HELO:  bad, avg S/O=0.32 avg Spam%=0.01 avg Ham%=0.01
  PLING_QUERY:  bad, avg S/O=0.68 avg Spam%=0.31 avg Ham%=0.15
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_AS_SEEN:  no hits at all
  SUBJ_BUY:  bad, avg S/O=0.70 avg Spam%=0.02 avg Ham%=0.01
  SUBJ_DOLLARS:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.08
  UNCLOSED_BRACKET:  bad, avg S/O=0.44 avg Spam%=0.05 avg Ham%=0.06
  UNRESOLVED_TEMPLATE:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  WITH_LC_SMTP:  no hits at all
  X_IP:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.60
  __DOUBLE_IP_SPAM_1:  no hits at all
      # used in: RCVD_DOUBLE_IP_LOOSE
  __FORGED_AOL_RCVD:  no hits at all
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_RCVD_TRAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.61
      # used in: CONFIRMED_FORGED
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.22 avg Spam%=0.38 avg Ham%=1.34
      # used in: MSGID_FROM_MTA_HEADER
  __HAS_MIMEOLE:  bad, avg S/O=0.77 avg Spam%=33.86 avg Ham%=10.26
      # used in: MISSING_MIMEOLE
  __HAS_SQUIRRELMAIL_IN_MAILER:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
      # used in: MISSING_MIMEOLE
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%=99.98 avg Ham%=99.98
      # used in: MISSING_SUBJECT
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=3.44
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.05 avg Spam%=0.17 avg Ham%=3.24
      # used in: MSGID_FROM_MTA_HEADER

rules/20_fake_helo_tests.cf (11 rules, 1 bad):

  HELO_DYNAMIC_ROGERS:  no hits at all

rules/20_drugs.cf (86 rules, 5 bad):

  DRUGS_ANXIETY_OBFU:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%=99.99 avg Ham%=99.99
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (29 rules, 16 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  LONGWORDS:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  MIME_BASE64_BLANKS:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.47
  MIME_BASE64_TEXT:  bad, avg S/O=0.31 avg Spam%=0.07 avg Ham%=0.16
  MIME_HTML_MOSTLY:  bad, avg S/O=0.23 avg Spam%=0.39 avg Ham%=1.28
  MIME_HTML_ONLY_MULTI:  no hits at all
  MPART_ALT_DIFF:  bad, avg S/O=0.56 avg Spam%=0.49 avg Ham%=0.39
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.50 avg Spam%=0.08 avg Ham%=0.08
  TRACKER_ID:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.02
  TVD_SPACE_RATIO:  bad, avg S/O=0.69 avg Spam%=0.75 avg Ham%=0.35
  URI_TRUNCATED:  no hits at all
  WEIRD_QUOTING:  bad, avg S/O=0.57 avg Spam%=0.02 avg Ham%=0.01
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.66 avg Spam%=32.04 avg Ham%=16.37
      # used in: MIME_HTML_ONLY_MULTI
  __LONGWORDS_A:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
      # used in: LONGWORDS
  __LONGWORDS_B:  bad, avg S/O=0.73 avg Spam%=0.02 avg Ham%=0.01
      # used in: LONGWORDS

Reply via email to