I am taking a pass at reducing the number of warnings a stock install
has by going after a large number of rules that do not have
descriptions. Attached is a list of rules that I have found so far.
I've just committed revision 1579814, which makes a small dent, and I'll
be continuing as I get time. I will likely be emailing the list for help
deciphering particularly complex rules.
If anyone has any particular rules from the list attached that they
would like documented, let me know and I can focus on those first.
Regards,
JMQ
AXB_XMAILER_MIMEOLE_OL_024C2
AXB_XMAILER_MIMEOLE_OL_1ECD5
BUG6152_INVALID_DATE_TZ_ABSURD
CTYPE_001C_A
CTYPE_001C_B
CURR_PRICE
describe TVD_RCVD_SINGLE Message was received from localhost
DKIM_POLICY_SIGNALL
DKIM_POLICY_SIGNSOME
DKIM_POLICY_TESTING
DKIM_VERIFIED
DOS_STOCK_BAT2
FAKE_REPLY_C
FROM_MISSP_SPF_FAIL
FSL_FAKE_GMAIL_RCVD
FSL_FAKE_HOTMAIL_RVCD
FSL_GEO_ABUSE
FSL_HELO_BARE_IP_1
FSL_HELO_BARE_IP_2
FSL_HELO_DEVICE
FSL_HELO_FIREWALL
FSL_HELO_NON_FQDN_1
FSL_HELO_SETUP
FSL_INTERIA_ABUSE
FSL_NEW_HELO_USER
FSL_YG_ABUSE
GEO_QUERY_STRING
header TVD_RCVD_SINGLE Received =~ /^from\s+(?!localhost)[^\s.a-z0-9-]+\s/
HELO_FRIEND
HELO_LH_HOME
HELO_LH_LD
HELO_LOCALHOST
HELO_OEM
HIGH_CODEPAGE_URI
HK_LOTTO
HK_NAME_FM_MR_MRS
HK_NAME_FROM
HK_NAME_MR_MRS
HK_SCAM_N1
HK_SCAM_N13
HK_SCAM_N15
HK_SCAM_N2
HK_SCAM_N3
HK_SCAM_N4
HTML_TITLE_SUBJ_DIFF
HTTPS_HTTP_MISMATCH
Is this correct?
JM_I_FEEL_LUCKY
JM_RCVD_QMAILV1
JM_TORA_XM
KB_DATE_CONTAINS_TAB
KB_FAKED_THE_BAT
KB_RATWARE_BOUNDARY
KB_RATWARE_MSGID
KB_RATWARE_OUTLOOK_08
KB_RATWARE_OUTLOOK_12
KB_RATWARE_OUTLOOK_16
KB_RATWARE_OUTLOOK_MID
LIVEFILESTORE
LONG_TERM_PRICE
LOTTERY_1
LOTTERY_PH_004470
L_SPAM_TOOL_13
MID_DEGREES
MIME_BOUND_EQ_REL
MSGID_DOLLARS_RANDOM
MSOE_MID_WRONG_CASE
MULTIPART_ALT_NON_TEXT
RCVD_FORGED_WROTE2
RCVD_IN_BRBL_LASTEXT
RCVD_IN_MSPIKE_ZBI
REPLYTO_WITHOUT_TO_CC
SB_GIF_AND_NO_URIS
SHORT_TERM_PRICE
STOCK_PRICES
STOX_AND_PRICE
STOX_REPLY_TYPE
STOX_REPLY_TYPE_WITHOUT_QUOTES
THEBAT_UNREG
TVD_EB_PHISH
TVD_PH_BODY_META
TVD_PP_PHISH
TVD_SPACE_RATIO
TVD_SUBJ_NUM_OBFU_MINFP
X_MAILER_CME_6543_MSN
