[auto] bad sandbox rules report

2019-09-18 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/smf/20_smf.cf (42 rules, 34 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.24 avg Spam%=0.87 avg Ham%=2.80
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.49 avg Spam%=0.60 avg Ham%=0.62
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.48 avg Spam%=1.32 avg Ham%=1.41
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.35 avg Spam%=0.03 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.45
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.05 avg Ham%=3.21
  FSL_RCVD_EX_1:  bad, avg S/O=0.60 avg Spam%=44.89 avg Ham%=30.38
  FSL_RCVD_EX_2:  bad, avg S/O=0.35 avg Spam%=14.54 avg Ham%=27.53
  FSL_RCVD_EX_3:  bad, avg S/O=0.10 avg Spam%=2.85 avg Ham%=24.50
  FSL_RCVD_EX_5:  bad, avg S/O=0.68 avg Spam%=7.86 avg Ham%=3.69
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.17 avg Spam%=1.04 avg Ham%=5.08
  FSL_RCVD_TR_1:  bad, avg S/O=0.08 avg Spam%=1.92 avg Ham%=21.44
  FSL_RCVD_TR_4:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.18
  FSL_RCVD_TR_5:  bad, avg S/O=0.59 avg Spam%=33.36 avg Ham%=22.95
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.18
  FSL_RCVD_UT_1:  bad, avg S/O=0.60 avg Spam%=44.89 avg Ham%=30.38
  FSL_RCVD_UT_2:  bad, avg S/O=0.35 avg Spam%=14.54 avg Ham%=27.53
  FSL_RCVD_UT_3:  bad, avg S/O=0.10 avg Spam%=2.85 avg Ham%=24.50
  FSL_RCVD_UT_5:  bad, avg S/O=0.68 avg Spam%=7.86 avg Ham%=3.69
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.17 avg Spam%=1.04 avg Ham%=5.08
  FSL_UNDISCLOSED_RCPTS:  bad, avg S/O=0.78 avg Spam%=0.28 avg Ham%=0.08
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.79
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.66 avg Spam%=93.15 avg Ham%=48.63
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.79
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.35 avg Spam%=0.03 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_AOL:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.11 avg Ham%=3.39
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.23 avg Spam%=0.09 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.42 avg Spam%=0.02 avg Ham%=0.03

rulesrc/sandbox/pds/20_ntld.cf (23 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (18 rules, 6 bad):

  PDS_DBL_URL_ILLEGAL_CHARS:  no hits of target type
  PDS_DBL_URL_LINKBAIT:  bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.06 avg Spam%=0.43 avg Ham%=7.32
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  __KHOP_URI_HIDDEN:  bad, avg S/O=0.72 avg Spam%=0.92 avg Ham%=0.36
  # used in: PDS_URI_HIDDEN_HELO_NO_DOMAIN
  __PDS_DOUBLE_URL:  bad, avg S/O=0.06 avg Spam%=0.43 

[auto] bad sandbox rules report

2019-09-11 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 2 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  FSL_PHP_EXPLOIT_41:  bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (42 rules, 36 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.22 avg Spam%=0.79 avg Ham%=2.77
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.47 avg Spam%=0.53 avg Ham%=0.61
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.46 avg Spam%=1.17 avg Ham%=1.39
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_GOOGLE:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.35 avg Spam%=0.03 avg Ham%=0.05
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=2.42
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=3.18
  FSL_RCVD_EX_1:  bad, avg S/O=0.60 avg Spam%=46.28 avg Ham%=30.53
  FSL_RCVD_EX_2:  bad, avg S/O=0.35 avg Spam%=14.64 avg Ham%=27.70
  FSL_RCVD_EX_3:  bad, avg S/O=0.09 avg Spam%=2.53 avg Ham%=24.53
  FSL_RCVD_EX_5:  bad, avg S/O=0.67 avg Spam%=7.35 avg Ham%=3.63
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.20 avg Spam%=1.21 avg Ham%=4.95
  FSL_RCVD_TR_1:  bad, avg S/O=0.11 avg Spam%=2.54 avg Ham%=21.52
  FSL_RCVD_TR_4:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.17
  FSL_RCVD_TR_5:  bad, avg S/O=0.56 avg Spam%=33.47 avg Ham%=25.77
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.19
  FSL_RCVD_UT_1:  bad, avg S/O=0.60 avg Spam%=46.28 avg Ham%=30.53
  FSL_RCVD_UT_2:  bad, avg S/O=0.35 avg Spam%=14.64 avg Ham%=27.70
  FSL_RCVD_UT_3:  bad, avg S/O=0.09 avg Spam%=2.53 avg Ham%=24.53
  FSL_RCVD_UT_5:  bad, avg S/O=0.67 avg Spam%=7.35 avg Ham%=3.63
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.20 avg Spam%=1.21 avg Ham%=4.95
  FSL_UNDISCLOSED_RCPTS:  bad, avg S/O=0.76 avg Spam%=0.25 avg Ham%=0.08
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=96.82
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.65 avg Spam%=93.99 avg Ham%=51.55
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=96.82
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_GOOGLE:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.24
  # used in: FSL_NOT_FROM_GOOGLE
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.36 avg Spam%=0.03 avg Ham%=0.05
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_AOL:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.10 avg Ham%=3.40
  # used in: TO_IN_SUBJ FSL_NOT_FROM_GOOGLE URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.21 avg Spam%=0.08 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.38 avg Spam%=0.02 avg Ham%=0.03

rulesrc/sandbox/pds/20_ntld.cf (23 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (18 rules, 6 bad):

  PDS_DBL_URL_ILLEGAL_CHARS:  no hits of target type
  PDS_DBL_URL_LINKBAIT:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.05 avg 

[auto] bad sandbox rules report

2019-09-04 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/smf/20_smf.cf (41 rules, 34 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.31 avg Spam%=1.21 avg Ham%=2.72
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.56 avg Spam%=0.82 avg Ham%=0.63
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.55 avg Spam%=1.76 avg Ham%=1.47
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.40 avg Spam%=0.04 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.33
  FSL_RCVD_EX_0:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=3.12
  FSL_RCVD_EX_1:  bad, avg S/O=0.64 avg Spam%=53.35 avg Ham%=30.70
  FSL_RCVD_EX_2:  bad, avg S/O=0.42 avg Spam%=19.81 avg Ham%=27.33
  FSL_RCVD_EX_3:  bad, avg S/O=0.12 avg Spam%=3.31 avg Ham%=24.81
  FSL_RCVD_EX_4:  bad, avg S/O=0.76 avg Spam%=17.45 avg Ham%=5.43
  FSL_RCVD_EX_5:  bad, avg S/O=0.54 avg Spam%=4.25 avg Ham%=3.66
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.26 avg Spam%=1.78 avg Ham%=4.94
  FSL_RCVD_TR_1:  bad, avg S/O=0.16 avg Spam%=4.19 avg Ham%=22.37
  FSL_RCVD_TR_4:  bad, avg S/O=0.29 avg Spam%=0.02 avg Ham%=0.05
  FSL_RCVD_TR_5:  bad, avg S/O=0.64 avg Spam%=41.29 avg Ham%=22.78
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.18
  FSL_RCVD_UT_1:  bad, avg S/O=0.64 avg Spam%=53.35 avg Ham%=30.70
  FSL_RCVD_UT_2:  bad, avg S/O=0.42 avg Spam%=19.81 avg Ham%=27.33
  FSL_RCVD_UT_3:  bad, avg S/O=0.12 avg Spam%=3.31 avg Ham%=24.81
  FSL_RCVD_UT_4:  bad, avg S/O=0.76 avg Spam%=17.45 avg Ham%=5.43
  FSL_RCVD_UT_5:  bad, avg S/O=0.54 avg Spam%=4.25 avg Ham%=3.66
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.26 avg Spam%=1.78 avg Ham%=4.94
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.88
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.65 avg Spam%=90.48 avg Ham%=49.24
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.88
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.40 avg Spam%=0.04 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.04 avg Spam%=0.15 avg Ham%=3.36
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.30 avg Spam%=0.13 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.48 avg Spam%=0.03 avg Ham%=0.03

rulesrc/sandbox/pds/20_ntld.cf (22 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (18 rules, 6 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.46 avg Spam%=0.69 avg Ham%=0.76
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  PDS_DBL_URL_LINKBAIT:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.07 avg Spam%=0.63 avg Ham%=7.88
  __PDS_BODY_QUOTE:  bad, avg S/O=0.42 avg Spam%=15.87 avg Ham%=21.44
  # used in: 

[auto] bad sandbox rules report

2019-08-28 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.37 avg Spam%=1.54 avg Ham%=2.59
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.59 avg Spam%=0.88 avg Ham%=0.60
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.57 avg Spam%=1.88 avg Ham%=1.41
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.40
  FSL_RCVD_EX_0:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=3.15
  FSL_RCVD_EX_1:  bad, avg S/O=0.65 avg Spam%=59.59 avg Ham%=32.19
  FSL_RCVD_EX_2:  bad, avg S/O=0.45 avg Spam%=22.68 avg Ham%=28.03
  FSL_RCVD_EX_3:  bad, avg S/O=0.12 avg Spam%=3.28 avg Ham%=23.34
  FSL_RCVD_EX_4:  bad, avg S/O=0.65 avg Spam%=9.72 avg Ham%=5.16
  FSL_RCVD_EX_5:  bad, avg S/O=0.45 avg Spam%=2.82 avg Ham%=3.46
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.28 avg Spam%=1.85 avg Ham%=4.67
  FSL_RCVD_TR_1:  bad, avg S/O=0.12 avg Spam%=3.09 avg Ham%=21.90
  FSL_RCVD_TR_4:  bad, avg S/O=0.21 avg Spam%=0.02 avg Ham%=0.15
  FSL_RCVD_TR_5:  bad, avg S/O=0.68 avg Spam%=55.20 avg Ham%=26.48
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.12 avg Spam%=0.03 avg Ham%=0.20
  FSL_RCVD_UT_1:  bad, avg S/O=0.65 avg Spam%=59.59 avg Ham%=32.19
  FSL_RCVD_UT_2:  bad, avg S/O=0.45 avg Spam%=22.68 avg Ham%=28.03
  FSL_RCVD_UT_3:  bad, avg S/O=0.12 avg Spam%=3.28 avg Ham%=23.34
  FSL_RCVD_UT_4:  bad, avg S/O=0.65 avg Spam%=9.72 avg Ham%=5.16
  FSL_RCVD_UT_5:  bad, avg S/O=0.45 avg Spam%=2.82 avg Ham%=3.46
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.28 avg Spam%=1.85 avg Ham%=4.67
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.85
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.63 avg Spam%=90.74 avg Ham%=52.70
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.85
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.05 avg Spam%=0.16 avg Ham%=3.41
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.33 avg Spam%=0.15 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.48 avg Spam%=0.03 avg Ham%=0.03

rulesrc/sandbox/pds/20_ntld.cf (22 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (18 rules, 4 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.72 avg Spam%=1.97 avg Ham%=0.76
  PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.71 avg Ham%=8.23
  __PDS_BODY_QUOTE:  bad, avg S/O=0.49 avg Spam%=20.72 avg Ham%=21.71
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.71 avg Ham%=8.23
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.15 avg Spam%=8.36 avg Ham%=48.91
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD TO_NO_BRKTS_PCNT 
GAPPY_HTML PDS_FROM_2_EMAILS SUBJ_BROKEN_WORD SUBJ_BROKEN_WORDS 

[auto] bad sandbox rules report

2019-08-21 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.05

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.40 avg Spam%=1.77 avg Ham%=2.61
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.60 avg Spam%=0.92 avg Ham%=0.60
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.57 avg Spam%=1.94 avg Ham%=1.46
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.43 avg Spam%=0.05 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.36
  FSL_RCVD_EX_0:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.49
  FSL_RCVD_EX_1:  bad, avg S/O=0.65 avg Spam%=60.80 avg Ham%=33.09
  FSL_RCVD_EX_2:  bad, avg S/O=0.47 avg Spam%=24.55 avg Ham%=27.93
  FSL_RCVD_EX_3:  bad, avg S/O=0.14 avg Spam%=3.82 avg Ham%=23.62
  FSL_RCVD_EX_4:  bad, avg S/O=0.57 avg Spam%=6.76 avg Ham%=5.00
  FSL_RCVD_EX_5:  bad, avg S/O=0.43 avg Spam%=2.46 avg Ham%=3.28
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.25 avg Spam%=1.56 avg Ham%=4.60
  FSL_RCVD_TR_1:  bad, avg S/O=0.09 avg Spam%=2.09 avg Ham%=22.36
  FSL_RCVD_TR_4:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.12
  FSL_RCVD_TR_5:  bad, avg S/O=0.69 avg Spam%=58.15 avg Ham%=26.66
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.16
  FSL_RCVD_UT_1:  bad, avg S/O=0.65 avg Spam%=60.80 avg Ham%=32.46
  FSL_RCVD_UT_2:  bad, avg S/O=0.47 avg Spam%=24.55 avg Ham%=27.93
  FSL_RCVD_UT_3:  bad, avg S/O=0.14 avg Spam%=3.82 avg Ham%=23.62
  FSL_RCVD_UT_4:  bad, avg S/O=0.57 avg Spam%=6.76 avg Ham%=5.00
  FSL_RCVD_UT_5:  bad, avg S/O=0.43 avg Spam%=2.46 avg Ham%=3.28
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.25 avg Spam%=1.56 avg Ham%=4.60
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=97.51
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.62 avg Spam%=88.41 avg Ham%=53.24
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.95 avg Ham%=96.88
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.43 avg Spam%=0.05 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.04 avg Spam%=0.16 avg Ham%=3.42
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.34 avg Spam%=0.16 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.47 avg Spam%=0.03 avg Ham%=0.03

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 4 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.70 avg Spam%=1.79 avg Ham%=0.75
  PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.73 avg Ham%=8.15
  __PDS_BODY_QUOTE:  bad, avg S/O=0.48 avg Spam%=19.78 avg Ham%=21.75
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.73 avg Ham%=8.15
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.16 avg Spam%=9.06 avg Ham%=48.47
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD GAPPY_HTML 
PDS_FROM_2_EMAILS SUBJ_BROKEN_WORDS 

[auto] bad sandbox rules report

2019-08-14 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 30 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.37 avg Spam%=1.60 avg Ham%=2.75
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.56 avg Spam%=0.82 avg Ham%=0.64
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.52 avg Spam%=1.71 avg Ham%=1.56
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.59 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.48
  FSL_RCVD_EX_0:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.62
  FSL_RCVD_EX_1:  bad, avg S/O=0.56 avg Spam%=42.18 avg Ham%=32.92
  FSL_RCVD_EX_2:  bad, avg S/O=0.44 avg Spam%=22.01 avg Ham%=27.64
  FSL_RCVD_EX_3:  bad, avg S/O=0.13 avg Spam%=3.45 avg Ham%=24.01
  FSL_RCVD_EX_5:  bad, avg S/O=0.68 avg Spam%=6.83 avg Ham%=3.25
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.20 avg Spam%=1.19 avg Ham%=4.60
  FSL_RCVD_TR_1:  bad, avg S/O=0.07 avg Spam%=1.94 avg Ham%=24.06
  FSL_RCVD_TR_4:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.11
  FSL_RCVD_TR_5:  bad, avg S/O=0.64 avg Spam%=40.13 avg Ham%=22.82
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.57 avg Spam%=42.18 avg Ham%=32.26
  FSL_RCVD_UT_2:  bad, avg S/O=0.44 avg Spam%=22.01 avg Ham%=27.64
  FSL_RCVD_UT_3:  bad, avg S/O=0.13 avg Spam%=3.45 avg Ham%=24.01
  FSL_RCVD_UT_5:  bad, avg S/O=0.68 avg Spam%=6.83 avg Ham%=3.25
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.20 avg Spam%=1.19 avg Ham%=4.60
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=97.38
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.64 avg Spam%=89.39 avg Ham%=51.33
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=96.72
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.04 avg Spam%=0.14 avg Ham%=3.46
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.29 avg Spam%=0.12 avg Ham%=0.30
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.33 avg Spam%=0.03 avg Ham%=0.06

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 6 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __PDS_SENT_TO_EMAIL_ADDR:  no hits at all
  # used in: SENT_TO_EMAIL_ADDR
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 5 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.38 avg Spam%=0.48 avg Ham%=0.77
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.07 avg Spam%=0.66 avg Ham%=8.23
  __PDS_BODY_QUOTE:  bad, avg S/O=0.41 avg Spam%=15.18 avg Ham%=21.64
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.07 avg Spam%=0.66 avg Ham%=8.23
  # used in: PDS_DBL_URL_ILLEGAL_CHARS PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.14 avg Spam%=7.63 avg Ham%=46.78
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD GAPPY_HTML 
PDS_FROM_2_EMAILS SUBJ_BROKEN_WORD SUBJ_BROKEN_WORDS SUBJ_OBFU_PUNCT_FEW 
SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG 

[auto] bad sandbox rules report

2019-08-07 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.42 avg Spam%=1.94 avg Ham%=2.70
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.59 avg Spam%=0.90 avg Ham%=0.62
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.55 avg Spam%=1.88 avg Ham%=1.54
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.44 avg Spam%=0.05 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=2.54
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.04 avg Ham%=2.68
  FSL_RCVD_EX_1:  bad, avg S/O=0.59 avg Spam%=49.17 avg Ham%=33.84
  FSL_RCVD_EX_2:  bad, avg S/O=0.50 avg Spam%=28.47 avg Ham%=28.28
  FSL_RCVD_EX_3:  bad, avg S/O=0.22 avg Spam%=6.43 avg Ham%=22.92
  FSL_RCVD_EX_4:  bad, avg S/O=0.65 avg Spam%=9.11 avg Ham%=4.80
  FSL_RCVD_EX_5:  bad, avg S/O=0.57 avg Spam%=4.17 avg Ham%=3.08
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.37 avg Spam%=2.61 avg Ham%=4.39
  FSL_RCVD_TR_1:  bad, avg S/O=0.12 avg Spam%=3.40 avg Ham%=23.97
  FSL_RCVD_TR_4:  bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.16
  FSL_RCVD_TR_5:  bad, avg S/O=0.66 avg Spam%=46.80 avg Ham%=24.56
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.60 avg Spam%=49.17 avg Ham%=33.19
  FSL_RCVD_UT_2:  bad, avg S/O=0.50 avg Spam%=28.47 avg Ham%=28.28
  FSL_RCVD_UT_3:  bad, avg S/O=0.22 avg Spam%=6.43 avg Ham%=22.92
  FSL_RCVD_UT_4:  bad, avg S/O=0.65 avg Spam%=9.11 avg Ham%=4.80
  FSL_RCVD_UT_5:  bad, avg S/O=0.57 avg Spam%=4.17 avg Ham%=3.08
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.37 avg Spam%=2.61 avg Ham%=4.39
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=97.32
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.62 avg Spam%=86.46 avg Ham%=53.21
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.96 avg Ham%=96.67
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.43 avg Spam%=0.05 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.04 avg Spam%=0.14 avg Ham%=3.53
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.37 avg Spam%=0.15 avg Ham%=0.26
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.06

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  __PDS_SENT_TO_EMAIL_ADDR:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  # used in: SENT_TO_EMAIL_ADDR

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 7 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.43 avg Spam%=0.59 avg Ham%=0.77
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.77 avg Ham%=8.50
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  no hits of target type
  __KHOP_URI_HIDDEN:  bad, avg S/O=0.77 avg Spam%=1.22 avg Ham%=0.37
  # used in: PDS_URI_HIDDEN_HELO_NO_DOMAIN
  __PDS_BODY_QUOTE:  bad, avg S/O=0.45 avg Spam%=18.14 avg Ham%=21.99
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.77 avg Ham%=8.50
  # used in: PDS_DBL_URL_ILLEGAL_CHARS PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 

[auto] bad sandbox rules report

2019-07-31 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.39 avg Spam%=1.71 avg Ham%=2.71
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.55 avg Spam%=0.75 avg Ham%=0.62
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.51 avg Spam%=1.59 avg Ham%=1.55
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.06
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.32
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.46
  FSL_RCVD_EX_1:  bad, avg S/O=0.57 avg Spam%=46.83 avg Ham%=35.10
  FSL_RCVD_EX_2:  bad, avg S/O=0.46 avg Spam%=24.10 avg Ham%=28.61
  FSL_RCVD_EX_3:  bad, avg S/O=0.24 avg Spam%=6.90 avg Ham%=22.06
  FSL_RCVD_EX_4:  bad, avg S/O=0.74 avg Spam%=13.71 avg Ham%=4.68
  FSL_RCVD_EX_5:  bad, avg S/O=0.65 avg Spam%=5.44 avg Ham%=2.88
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.42 avg Spam%=2.99 avg Ham%=4.21
  FSL_RCVD_TR_1:  bad, avg S/O=0.12 avg Spam%=3.24 avg Ham%=24.45
  FSL_RCVD_TR_4:  bad, avg S/O=0.50 avg Spam%=0.01 avg Ham%=0.01
  FSL_RCVD_TR_5:  bad, avg S/O=0.61 avg Spam%=42.25 avg Ham%=26.44
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.19 avg Spam%=0.03 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.58 avg Spam%=46.83 avg Ham%=34.45
  FSL_RCVD_UT_2:  bad, avg S/O=0.46 avg Spam%=24.10 avg Ham%=28.61
  FSL_RCVD_UT_3:  bad, avg S/O=0.24 avg Spam%=6.90 avg Ham%=22.06
  FSL_RCVD_UT_4:  bad, avg S/O=0.74 avg Spam%=13.71 avg Ham%=4.68
  FSL_RCVD_UT_5:  bad, avg S/O=0.65 avg Spam%=5.44 avg Ham%=2.88
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.42 avg Spam%=2.99 avg Ham%=4.21
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=97.54
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.62 avg Spam%=88.45 avg Ham%=55.12
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.89
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.12 avg Ham%=3.58
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.35 avg Spam%=0.13 avg Ham%=0.24
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.23 avg Spam%=0.08 avg Ham%=0.28

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 2 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (15 rules, 4 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.74 avg Spam%=3.26 avg Ham%=0.78
  PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.80 avg Ham%=8.94
  __PDS_BODY_QUOTE:  bad, avg S/O=0.46 avg Spam%=19.36 avg Ham%=22.14
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.08 avg Spam%=0.80 avg Ham%=8.94
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.15 avg Spam%=7.97 avg Ham%=45.63
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD 
ADVANCE_FEE_4_NEW_FORM GAPPY_HTML PDS_FROM_2_EMAILS SUBJ_BROKEN_WORD 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG UC_GIBBERISH_OBFU

rulesrc/sandbox/mmartinec/20_misc.cf (14 rules, 6 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  

[auto] bad sandbox rules report

2019-07-24 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.34 avg Spam%=1.45 avg Ham%=2.70
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.43 avg Spam%=0.58 avg Ham%=0.61
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.41 avg Spam%=1.27 avg Ham%=1.56
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.07
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.60
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.71
  FSL_RCVD_EX_1:  bad, avg S/O=0.60 avg Spam%=53.98 avg Ham%=36.43
  FSL_RCVD_EX_2:  bad, avg S/O=0.40 avg Spam%=18.56 avg Ham%=28.22
  FSL_RCVD_EX_3:  bad, avg S/O=0.21 avg Spam%=5.79 avg Ham%=21.14
  FSL_RCVD_EX_4:  bad, avg S/O=0.75 avg Spam%=13.79 avg Ham%=4.70
  FSL_RCVD_EX_5:  bad, avg S/O=0.65 avg Spam%=5.04 avg Ham%=2.74
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.41 avg Spam%=2.82 avg Ham%=4.06
  FSL_RCVD_TR_1:  bad, avg S/O=0.10 avg Spam%=2.88 avg Ham%=24.64
  FSL_RCVD_TR_4:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.19
  FSL_RCVD_TR_5:  bad, avg S/O=0.62 avg Spam%=44.51 avg Ham%=26.86
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.20 avg Spam%=0.03 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.60 avg Spam%=53.98 avg Ham%=35.77
  FSL_RCVD_UT_2:  bad, avg S/O=0.40 avg Spam%=18.56 avg Ham%=28.22
  FSL_RCVD_UT_3:  bad, avg S/O=0.21 avg Spam%=5.79 avg Ham%=21.14
  FSL_RCVD_UT_4:  bad, avg S/O=0.75 avg Spam%=13.79 avg Ham%=4.70
  FSL_RCVD_UT_5:  bad, avg S/O=0.65 avg Spam%=5.04 avg Ham%=2.74
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.41 avg Spam%=2.82 avg Ham%=4.06
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=97.29
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.61 avg Spam%=89.96 avg Ham%=56.32
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.63
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.06
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.11 avg Ham%=3.74
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.37 avg Spam%=0.13 avg Ham%=0.22
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.17 avg Spam%=0.06 avg Ham%=0.28

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (9 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 4 bad):

  PDS_DOUBLE_URL:  bad, avg S/O=0.09 avg Spam%=0.91 avg Ham%=9.10
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  bad, avg S/O=0.78 avg Spam%=0.14 avg Ham%=0.00
  __KHOP_URI_HIDDEN:  bad, avg S/O=0.74 avg Spam%=1.00 avg Ham%=0.36
  # used in: PDS_URI_HIDDEN_HELO_NO_DOMAIN
  __PDS_DOUBLE_URL:  bad, avg S/O=0.09 avg Spam%=0.91 avg Ham%=9.10
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.14 avg Spam%=7.12 avg Ham%=43.90
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD 
ADVANCE_FEE_4_NEW_FORM GAPPY_HTML SUBJ_BROKEN_WORD SUBJ_OBFU_PUNCT_FEW 
SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG UC_GIBBERISH_OBFU

rulesrc/sandbox/mmartinec/20_misc.cf (13 rules, 7 bad):

  

[auto] bad sandbox rules report

2019-07-17 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.38 avg Spam%=1.74 avg Ham%=2.92
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.57 avg Spam%=0.88 avg Ham%=0.67
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.53 avg Spam%=1.75 avg Ham%=1.56
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.33 avg Spam%=0.04 avg Ham%=0.07
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=2.57
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.50
  FSL_RCVD_EX_1:  bad, avg S/O=0.58 avg Spam%=56.29 avg Ham%=40.15
  FSL_RCVD_EX_2:  bad, avg S/O=0.37 avg Spam%=15.90 avg Ham%=27.33
  FSL_RCVD_EX_3:  bad, avg S/O=0.25 avg Spam%=6.39 avg Ham%=19.05
  FSL_RCVD_EX_4:  bad, avg S/O=0.70 avg Spam%=10.72 avg Ham%=4.40
  FSL_RCVD_EX_5:  bad, avg S/O=0.65 avg Spam%=5.24 avg Ham%=2.77
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.59 avg Spam%=5.45 avg Ham%=3.79
  FSL_RCVD_TR_1:  bad, avg S/O=0.11 avg Spam%=2.32 avg Ham%=20.82
  FSL_RCVD_TR_4:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.25
  FSL_RCVD_TR_5:  bad, avg S/O=0.60 avg Spam%=45.72 avg Ham%=30.02
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.59 avg Spam%=56.29 avg Ham%=39.43
  FSL_RCVD_UT_2:  bad, avg S/O=0.37 avg Spam%=15.90 avg Ham%=27.33
  FSL_RCVD_UT_3:  bad, avg S/O=0.25 avg Spam%=6.39 avg Ham%=19.05
  FSL_RCVD_UT_4:  bad, avg S/O=0.70 avg Spam%=10.72 avg Ham%=4.40
  FSL_RCVD_UT_5:  bad, avg S/O=0.65 avg Spam%=5.24 avg Ham%=2.77
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.59 avg Spam%=5.45 avg Ham%=3.79
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=97.50
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.61 avg Spam%=87.56 avg Ham%=56.32
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.77
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.33 avg Spam%=0.03 avg Ham%=0.07
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.12 avg Ham%=3.61
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.37 avg Spam%=0.13 avg Ham%=0.23
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.17 avg Spam%=0.06 avg Ham%=0.30

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 5 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.67 avg Spam%=2.33 avg Ham%=0.86
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.33 avg Spam%=0.04 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.12 avg Spam%=1.20 avg Ham%=8.79
  __PDS_BODY_QUOTE:  bad, avg S/O=0.36 avg Spam%=12.52 avg Ham%=21.60
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.12 avg Spam%=1.20 avg Ham%=8.79
  # used in: PDS_DBL_URL_ILLEGAL_CHARS PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.13 avg Spam%=6.54 avg Ham%=45.55
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD 
ADVANCE_FEE_4_NEW_FORM GAPPY_HTML HTML_FONT_TINY SUBJ_BROKEN_WORD 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG 

[auto] bad sandbox rules report

2019-07-10 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.37 avg Spam%=1.63 avg Ham%=2.78
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.57 avg Spam%=0.83 avg Ham%=0.62
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.51 avg Spam%=1.67 avg Ham%=1.60
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.36 avg Spam%=0.04 avg Ham%=0.07
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=2.67
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=2.76
  FSL_RCVD_EX_1:  bad, avg S/O=0.59 avg Spam%=53.83 avg Ham%=37.86
  FSL_RCVD_EX_2:  bad, avg S/O=0.38 avg Spam%=17.28 avg Ham%=27.78
  FSL_RCVD_EX_3:  bad, avg S/O=0.23 avg Spam%=6.23 avg Ham%=20.54
  FSL_RCVD_EX_4:  bad, avg S/O=0.73 avg Spam%=12.31 avg Ham%=4.56
  FSL_RCVD_EX_5:  bad, avg S/O=0.67 avg Spam%=5.19 avg Ham%=2.55
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.57 avg Spam%=5.15 avg Ham%=3.94
  FSL_RCVD_TR_1:  bad, avg S/O=0.08 avg Spam%=2.40 avg Ham%=25.92
  FSL_RCVD_TR_4:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.20
  FSL_RCVD_TR_5:  bad, avg S/O=0.62 avg Spam%=41.87 avg Ham%=26.10
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.10
  FSL_RCVD_UT_1:  bad, avg S/O=0.59 avg Spam%=53.83 avg Ham%=37.19
  FSL_RCVD_UT_2:  bad, avg S/O=0.38 avg Spam%=17.28 avg Ham%=27.78
  FSL_RCVD_UT_3:  bad, avg S/O=0.23 avg Spam%=6.23 avg Ham%=20.54
  FSL_RCVD_UT_4:  bad, avg S/O=0.73 avg Spam%=12.31 avg Ham%=4.56
  FSL_RCVD_UT_5:  bad, avg S/O=0.67 avg Spam%=5.19 avg Ham%=2.55
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.57 avg Spam%=5.15 avg Ham%=3.94
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.99 avg Ham%=97.24
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.61 avg Spam%=88.10 avg Ham%=57.21
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.99 avg Ham%=96.56
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.36 avg Spam%=0.04 avg Ham%=0.07
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.11 avg Ham%=3.83
  # used in: TO_IN_SUBJ URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.34 avg Spam%=0.12 avg Ham%=0.22
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.19 avg Spam%=0.07 avg Ham%=0.29

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 5 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.69 avg Spam%=1.84 avg Ham%=0.84
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.11 avg Spam%=1.14 avg Ham%=9.08
  __PDS_BODY_QUOTE:  bad, avg S/O=0.31 avg Spam%=10.01 avg Ham%=22.05
  # used in: BODY_QUOTE_MALF_MSGID
  __PDS_DOUBLE_URL:  bad, avg S/O=0.11 avg Spam%=1.14 avg Ham%=9.08
  # used in: PDS_DBL_URL_ILLEGAL_CHARS PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.12 avg Spam%=5.68 avg Ham%=41.85
  # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD 
ADVANCE_FEE_4_NEW_FORM GAPPY_HTML HTML_FONT_TINY SUBJ_BROKEN_WORD 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY 

[auto] bad sandbox rules report

2019-07-03 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 2 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type
  FSL_PHP_EXPLOIT_41:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (41 rules, 35 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.36 avg Spam%=1.55 avg Ham%=2.70
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.57 avg Spam%=0.90 avg Ham%=0.69
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.51 avg Spam%=1.82 avg Ham%=1.77
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.38 avg Spam%=0.05 avg Ham%=0.08
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.67
  FSL_RCVD_EX_0:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=3.79
  FSL_RCVD_EX_1:  bad, avg S/O=0.59 avg Spam%=51.80 avg Ham%=36.24
  FSL_RCVD_EX_2:  bad, avg S/O=0.37 avg Spam%=15.91 avg Ham%=26.56
  FSL_RCVD_EX_3:  bad, avg S/O=0.23 avg Spam%=6.69 avg Ham%=21.89
  FSL_RCVD_EX_4:  bad, avg S/O=0.76 avg Spam%=15.05 avg Ham%=4.73
  FSL_RCVD_EX_5:  bad, avg S/O=0.68 avg Spam%=5.63 avg Ham%=2.62
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.54 avg Spam%=4.90 avg Ham%=4.18
  FSL_RCVD_TR_1:  bad, avg S/O=0.10 avg Spam%=3.05 avg Ham%=26.85
  FSL_RCVD_TR_4:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.94
  FSL_RCVD_TR_5:  bad, avg S/O=0.61 avg Spam%=33.58 avg Ham%=21.01
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.10
  FSL_RCVD_UT_1:  bad, avg S/O=0.59 avg Spam%=51.80 avg Ham%=35.50
  FSL_RCVD_UT_2:  bad, avg S/O=0.37 avg Spam%=15.91 avg Ham%=26.56
  FSL_RCVD_UT_3:  bad, avg S/O=0.23 avg Spam%=6.69 avg Ham%=21.89
  FSL_RCVD_UT_4:  bad, avg S/O=0.76 avg Spam%=15.05 avg Ham%=4.73
  FSL_RCVD_UT_5:  bad, avg S/O=0.68 avg Spam%=5.63 avg Ham%=2.62
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.54 avg Spam%=4.90 avg Ham%=4.18
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.21
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.62 avg Spam%=87.68 avg Ham%=53.54
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=95.47
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.38 avg Spam%=0.05 avg Ham%=0.08
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_AOL:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.13 avg Ham%=4.00
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.28 avg Spam%=0.09 avg Ham%=0.24
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.19 avg Spam%=0.07 avg Ham%=0.31

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_helo.cf (4 rules, 3 bad):

  PDS_NO_HELO_DNS:  bad, avg S/O=0.16 avg Spam%=0.92 avg Ham%=4.73
  __HELO_HIGHPROFILE:  bad, avg S/O=0.16 avg Spam%=0.92 avg Ham%=4.73
  # used in: PDS_NO_HELO_DNS
  __HELO_RECORD:  no hits at all
  # used in: PDS_NO_HELO_DNS

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (15 rules, 3 bad):

  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.10 avg Spam%=0.95 avg Ham%=8.58
  __PDS_DOUBLE_URL:  bad, avg 

[auto] bad sandbox rules report

2019-06-26 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 2 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type
  FSL_PHP_EXPLOIT_41:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (41 rules, 35 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.37 avg Spam%=1.66 avg Ham%=2.80
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.56 avg Spam%=0.94 avg Ham%=0.73
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.50 avg Spam%=1.91 avg Ham%=1.88
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.39 avg Spam%=0.05 avg Ham%=0.08
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.15
  FSL_RCVD_EX_0:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.23
  FSL_RCVD_EX_1:  bad, avg S/O=0.58 avg Spam%=49.09 avg Ham%=35.75
  FSL_RCVD_EX_2:  bad, avg S/O=0.31 avg Spam%=12.14 avg Ham%=26.77
  FSL_RCVD_EX_3:  bad, avg S/O=0.24 avg Spam%=7.02 avg Ham%=22.48
  FSL_RCVD_EX_4:  bad, avg S/O=0.78 avg Spam%=17.16 avg Ham%=4.87
  FSL_RCVD_EX_5:  bad, avg S/O=0.74 avg Spam%=7.45 avg Ham%=2.63
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.62 avg Spam%=7.11 avg Ham%=4.27
  FSL_RCVD_TR_1:  bad, avg S/O=0.10 avg Spam%=3.18 avg Ham%=28.45
  FSL_RCVD_TR_4:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.24
  FSL_RCVD_TR_5:  bad, avg S/O=0.61 avg Spam%=29.10 avg Ham%=18.71
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.14 avg Spam%=0.02 avg Ham%=0.12
  FSL_RCVD_UT_1:  bad, avg S/O=0.58 avg Spam%=49.09 avg Ham%=34.97
  FSL_RCVD_UT_2:  bad, avg S/O=0.31 avg Spam%=12.14 avg Ham%=26.77
  FSL_RCVD_UT_3:  bad, avg S/O=0.24 avg Spam%=7.02 avg Ham%=22.48
  FSL_RCVD_UT_4:  bad, avg S/O=0.78 avg Spam%=17.16 avg Ham%=4.87
  FSL_RCVD_UT_5:  bad, avg S/O=0.74 avg Spam%=7.45 avg Ham%=2.63
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.62 avg Spam%=7.11 avg Ham%=4.27
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.99 avg Ham%=96.77
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.63 avg Spam%=87.15 avg Ham%=52.16
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.99 avg Ham%=95.99
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.39 avg Spam%=0.05 avg Ham%=0.08
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_AOL:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.13 avg Ham%=4.12
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.03
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.27 avg Spam%=0.09 avg Ham%=0.26
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.19 avg Spam%=0.07 avg Ham%=0.29

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (12 rules, 2 bad):

  PDS_DOUBLE_URL:  bad, avg S/O=0.13 avg Spam%=1.24 avg Ham%=8.65
  __PDS_DOUBLE_URL:  bad, avg S/O=0.13 avg Spam%=1.24 avg Ham%=8.65
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.12 avg Spam%=5.26 avg Ham%=38.78
  # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_3_NEW_FORM LIST_PRTL_SAME_USER 
PHP_NOVER_MUA THIS_AD GAPPY_HTML HTML_FONT_TINY SUBJ_OBFU_PUNCT_FEW 

[auto] bad sandbox rules report

2019-06-19 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (5 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/smf/20_smf.cf (43 rules, 34 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.41 avg Spam%=2.04 avg Ham%=2.97
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.61 avg Spam%=1.20 avg Ham%=0.77
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.55 avg Spam%=2.42 avg Ham%=1.97
  FSL_NOT_FROM_AOL:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.48 avg Spam%=0.08 avg Ham%=0.09
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.41
  FSL_RCVD_EX_0:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=3.48
  FSL_RCVD_EX_1:  bad, avg S/O=0.57 avg Spam%=44.80 avg Ham%=34.06
  FSL_RCVD_EX_2:  bad, avg S/O=0.35 avg Spam%=14.55 avg Ham%=26.41
  FSL_RCVD_EX_3:  bad, avg S/O=0.30 avg Spam%=10.61 avg Ham%=23.84
  FSL_RCVD_EX_4:  bad, avg S/O=0.79 avg Spam%=18.14 avg Ham%=4.96
  FSL_RCVD_EX_5:  bad, avg S/O=0.72 avg Spam%=6.88 avg Ham%=2.70
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.52 avg Spam%=5.00 avg Ham%=4.56
  FSL_RCVD_TR_1:  bad, avg S/O=0.16 avg Spam%=5.79 avg Ham%=30.88
  FSL_RCVD_TR_4:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.27
  FSL_RCVD_TR_5:  bad, avg S/O=0.65 avg Spam%=22.69 avg Ham%=12.42
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.18 avg Spam%=0.03 avg Ham%=0.14
  FSL_RCVD_UT_1:  bad, avg S/O=0.57 avg Spam%=44.80 avg Ham%=33.22
  FSL_RCVD_UT_2:  bad, avg S/O=0.35 avg Spam%=14.55 avg Ham%=26.41
  FSL_RCVD_UT_3:  bad, avg S/O=0.30 avg Spam%=10.61 avg Ham%=23.84
  FSL_RCVD_UT_4:  bad, avg S/O=0.79 avg Spam%=18.14 avg Ham%=4.96
  FSL_RCVD_UT_5:  bad, avg S/O=0.72 avg Spam%=6.88 avg Ham%=2.70
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.52 avg Spam%=5.00 avg Ham%=4.56
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.52
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.63 avg Spam%=83.18 avg Ham%=48.80
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=95.68
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.48 avg Spam%=0.08 avg Ham%=0.09
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.04 avg Spam%=0.19 avg Ham%=4.19
  # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.03
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.28 avg Spam%=0.11 avg Ham%=0.28
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.28 avg Spam%=0.10 avg Ham%=0.25

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
  # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (10 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
  # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (8 rules, 2 bad):

  PDS_DOUBLE_URL:  bad, avg S/O=0.18 avg Spam%=1.83 avg Ham%=8.35
  __PDS_DOUBLE_URL:  bad, avg S/O=0.18 avg Spam%=1.83 avg Ham%=8.35
  # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.16 avg Spam%=6.93 avg Ham%=36.60
  # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_3_NEW_FORM LIST_PRTL_SAME_USER 
PHP_NOVER_MUA THIS_AD GAPPY_HTML HTML_FONT_TINY SUBJ_OBFU_PUNCT_FEW 
SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG UC_GIBBERISH_OBFU


[auto] bad sandbox rules report

2019-05-08 Thread Rules Report Cron
HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rules/72_active.cf (1225 rules, 619 bad):

  AC_BR_BONANZA:  bad, avg S/O=0.60 avg Spam%=0.02 avg Ham%=0.01
  AC_DIV_BONANZA:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.04
  AC_HTML_NONSENSE_TAGS:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS4:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  ADMAIL:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
  ADVANCE_FEE_2_NEW_MONEY:  bad, avg S/O=0.79 avg Spam%=0.04 avg Ham%=0.01
  ADVANCE_FEE_3_NEW:  bad, avg S/O=0.56 avg Spam%=0.05 avg Ham%=0.03
  ADVANCE_FEE_3_NEW_FORM:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  ADVANCE_FEE_5_NEW_FRM_MNY:  no hits at all
  ADVANCE_FEE_5_NEW_MONEY:  no hits at all
  AD_PREFS:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  APP_DEVELOPMENT_NORDNS:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  AXB_XMAILER_MIMEOLE_OL_024C2:  no hits at all
  BANKING_LAWS:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  BASE64_LENGTH_78_79:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  BASE64_LENGTH_79_INF:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.00
  BIGNUM_EMAILS:  no hits at all
  BODY_EMPTY:  no hits at all
  BOMB_MONEY:  bad, avg S/O=0.58 avg Spam%=0.00 avg Ham%=0.00
  BUG6152_INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.16 avg Spam%=0.00 avg 
Ham%=0.00
  CK_HELO_DYNAMIC_SPLIT_IP:  no hits at all
  CK_HELO_GENERIC:  no hits at all
  COMMENT_GIBBERISH:  no hits at all
  COMPENSATION:  no hits at all
  CTYPE_001C_B:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  CTYPE_8SPACE_GIF:  no hits at all
  CURR_PRICE:  no hits at all
  DATE_IN_FUTURE_96_Q:  no hits at all
  DEAR_BENEFICIARY:  no hits at all
  # used in: ADVANCE_FEE_2_NEW_MONEY ADVANCE_FEE_2_NEW_MONEY 
ADVANCE_FEE_2_NEW_MONEY ADVANCE_FEE_2_NEW_MONEY ADVANCE_FEE_3_NEW 
ADVANCE_FEE_3_NEW ADVANCE_FEE_3_NEW ADVANCE_FEE_3_NEW_FORM 
ADVANCE_FEE_3_NEW_FORM ADVANCE_FEE_3_NEW_FORM ADVANCE_FEE_5_NEW_FRM_MNY 
ADVANCE_FEE_5_NEW_MONEY BOMB_MONEY BOMB_MONEY BOMB_MONEY
  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_RCVD_IP_TWICE_C:  no hits at all
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DRUGS_HDIA:  no hits at all
  DRUGS_STOCK_MIMEOLE:  no hits at all
  DX_TEXT_02:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  DX_TEXT_03:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.02
  EXCUSE_24:  no hits of target type
  FILL_THIS_FORM:  bad, avg S/O=0.61 avg Spam%=0.17 avg Ham%=0.12
  FILL_THIS_FORM_LOAN:  no hits at all
  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.28 avg Spam%=0.70 avg Ham%=1.98
  FROM_MISSPACED:  no hits at all
  FROM_MISSP_DYNIP:  no hits at all
  FROM_MISSP_FREEMAIL:  no hits at all
  FROM_MISSP_MSFT:  no hits at all
  FROM_MISSP_REPLYTO:  no hits at all
  FROM_MISSP_TO_UNDISC:  no hits at all
  FROM_MISSP_USER:  no hits at all
  FROM_MISSP_XPRIO:  no hits at all
  FROM_UNBAL1:  bad, avg S/O=0.66 avg Spam%=0.00 avg Ham%=0.00
  FROM_WORDY:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  FROM_WORDY_SHORT:  no hits at all
  FSL_CTYPE_WIN1251:  no hits at all
  FSL_HELO_DEVICE:  no hits of target type
  FSL_INTERIA_ABUSE:  no hits at all
  FUZZY_ANDROID:  no hits of target type
  FUZZY_MERIDIA:  no hits at all
  FUZZY_PRIVACY:  no hits at all
  FUZZY_SAVINGS:  no hits of target type
  FUZZY_SECURITY:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_WALLET:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  GOOGLE_DOCS_PHISH:  no hits at all
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOG_MALWARE_DNLD:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HEADER_COUNT_SUBJECT:  no hits at all
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.34 avg Spam%=17.16 avg 
Ham%=33.68
  # used in: FREEMAIL_FORGED_FROMDOMAIN
  HELO_MISC_IP:  no hits at all
  HEXHASH_WORD:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  HK_NAME_MR_MRS:  no hits at all
  HK_RANDOM_FROM:  no hits at all
  HK_SCAM_N3:  no hits at all
  HTML_ENTITY_ASCII:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.52 avg Spam%=0.07 avg Ham%=0.07
  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.10 avg Spam%=0.08 avg Ham%=4.40
  KB_FAKED_THE_BAT:  bad, avg 

[auto] bad sandbox rules report

2017-05-24 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (5 rules, 2 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.04
  FSL_LINK_AWS_S3_WEB_FM:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (56 rules, 46 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.31 avg Spam%=0.49 avg Ham%=1.09
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.67 avg Spam%=0.10 avg Ham%=0.05
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.23 avg Spam%=0.45 avg Ham%=1.49
  FSL_HTML_BLOCK_LOTS_1:  bad, avg S/O=0.13 avg Spam%=3.30 avg Ham%=21.28
  FSL_HTML_BLOCK_LOTS_2:  bad, avg S/O=0.13 avg Spam%=3.30 avg Ham%=21.28
  FSL_HTML_BLOCK_LOTS_3:  bad, avg S/O=0.13 avg Spam%=3.30 avg Ham%=21.28
  FSL_HTML_ENT_LOTS_1:  bad, avg S/O=0.53 avg Spam%=73.67 avg Ham%=65.17
  FSL_HTML_ENT_LOTS_2:  bad, avg S/O=0.53 avg Spam%=73.67 avg Ham%=65.17
  FSL_HTML_ENT_LOTS_3:  bad, avg S/O=0.53 avg Spam%=73.67 avg Ham%=65.17
  FSL_NOT_FROM_AOL:  no hits at all
  FSL_NOT_FROM_GOOGLE:  no hits of target type
  FSL_NOT_FROM_HOTMAIL:  no hits of target type
  FSL_NOT_FROM_YAHOO:  no hits of target type
  FSL_NO_RCVD_1:  bad, avg S/O=0.03 avg Spam%=0.10 avg Ham%=3.11
  FSL_RCVD_EX_0:  bad, avg S/O=0.03 avg Spam%=0.11 avg Ham%=3.90
  FSL_RCVD_EX_1:  bad, avg S/O=0.22 avg Spam%=7.92 avg Ham%=27.49
  FSL_RCVD_EX_2:  bad, avg S/O=0.73 avg Spam%=70.33 avg Ham%=26.20
  FSL_RCVD_EX_3:  bad, avg S/O=0.12 avg Spam%=3.14 avg Ham%=22.34
  FSL_RCVD_EX_4:  bad, avg S/O=0.15 avg Spam%=1.86 avg Ham%=10.37
  FSL_RCVD_EX_5:  bad, avg S/O=0.78 avg Spam%=9.16 avg Ham%=2.63
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.51 avg Spam%=7.49 avg Ham%=7.07
  FSL_RCVD_TR_1:  bad, avg S/O=0.06 avg Spam%=2.43 avg Ham%=41.99
  FSL_RCVD_TR_2:  bad, avg S/O=0.61 avg Spam%=14.22 avg Ham%=9.19
  FSL_RCVD_UT_1:  bad, avg S/O=0.73 avg Spam%=73.12 avg Ham%=27.49
  FSL_RCVD_UT_2:  bad, avg S/O=0.17 avg Spam%=5.48 avg Ham%=26.20
  FSL_RCVD_UT_3:  bad, avg S/O=0.15 avg Spam%=3.94 avg Ham%=22.34
  FSL_RCVD_UT_4:  bad, avg S/O=0.47 avg Spam%=9.36 avg Ham%=10.37
  FSL_RCVD_UT_5:  bad, avg S/O=0.68 avg Spam%=5.64 avg Ham%=2.63
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.25 avg Spam%=2.34 avg Ham%=7.07
  FSL_UNDISCLOSED_BULK:  bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.89 avg Ham%=96.10
  # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.66 avg Spam%=98.33 avg Ham%=51.49
  # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_2
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.89 avg Ham%=96.10
  # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_AOL:  no hits of target type
  # used in: FSL_NOT_FROM_AOL
  __FSL_ENVFROM_GOOGLE:  no hits of target type
  # used in: FSL_NOT_FROM_GOOGLE
  __FSL_ENVFROM_HOTMAIL:  no hits of target type
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  no hits at all
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_ROCKET:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YAHOO:  no hits of target type
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YMAIL:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_HTML_BLOCKS:  bad, avg S/O=0.13 avg Spam%=3.30 avg Ham%=21.28
  # used in: FSL_HTML_BLOCK_LOTS_1 FSL_HTML_BLOCK_LOTS_2 
FSL_HTML_BLOCK_LOTS_3
  __FSL_HTML_ENTITIES:  bad, avg S/O=0.53 avg Spam%=73.67 avg Ham%=65.17
  # used in: FSL_HTML_ENT_LOTS_1 FSL_HTML_ENT_LOTS_2 FSL_HTML_ENT_LOTS_3
  __FSL_RELAY_AOL:  bad, avg S/O=0.30 avg Spam%=0.04 avg Ham%=0.09
  # used in: FSL_NOT_FROM_AOL
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.01 avg Spam%=0.07 avg Ham%=7.32
  # used in: TO_IN_SUBJ FSL_NOT_FROM_GOOGLE
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.41 avg Spam%=0.10 avg Ham%=0.15
  # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.70 avg Spam%=0.24 avg Ham%=0.10
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.15 avg Spam%=0.07 avg Ham%=0.38

rulesrc/sandbox/mmartinec/20_misc.cf (16 rules, 7 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  LONGLINE:  bad, avg S/O=0.06 avg Spam%=0.99 avg Ham%=15.30
  RP_8BIT:  no hits at all
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  __LONGLINE:  bad, avg S/O=0.06 avg Spam%=0.99 avg Ham%=15.30
  # used in: FROM_WORDY_SHORT LONGLINE

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no 

[auto] bad sandbox rules report

2015-04-08 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (6 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/smf/20_smf.cf (54 rules, 33 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.46 avg Spam%=2.82 avg Ham%=5.05
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.71 avg Spam%=0.43 avg Ham%=0.18
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.59 avg Spam%=1.28 avg Ham%=0.90
  FSL_HTML_BLOCK_LOTS_1:  bad, avg S/O=0.30 avg Spam%=5.23 avg Ham%=12.27
  FSL_HTML_BLOCK_LOTS_2:  bad, avg S/O=0.30 avg Spam%=5.23 avg Ham%=12.27
  FSL_HTML_BLOCK_LOTS_3:  bad, avg S/O=0.30 avg Spam%=5.23 avg Ham%=12.27
  FSL_HTML_ENT_LOTS_1:  bad, avg S/O=0.25 avg Spam%=13.86 avg Ham%=41.43
  FSL_HTML_ENT_LOTS_2:  bad, avg S/O=0.25 avg Spam%=13.86 avg Ham%=41.43
  FSL_HTML_ENT_LOTS_3:  bad, avg S/O=0.25 avg Spam%=13.86 avg Ham%=41.43
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  FSL_RCVD_EX_1:  bad, avg S/O=0.49 avg Spam%=21.64 avg Ham%=22.62
  FSL_RCVD_EX_2:  bad, avg S/O=0.39 avg Spam%=15.88 avg Ham%=25.37
  FSL_RCVD_EX_3:  bad, avg S/O=0.36 avg Spam%=8.71 avg Ham%=15.56
  FSL_RCVD_EX_4:  bad, avg S/O=0.23 avg Spam%=3.65 avg Ham%=12.94
  FSL_RCVD_EX_5:  bad, avg S/O=0.74 avg Spam%=24.96 avg Ham%=7.89
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.30 avg Spam%=3.78 avg Ham%=10.47
  FSL_RCVD_TR_1:  bad, avg S/O=0.50 avg Spam%=18.38 avg Ham%=19.28
  FSL_RCVD_TR_2:  bad, avg S/O=0.72 avg Spam%=12.83 avg Ham%=5.04
  FSL_RCVD_UT_1:  bad, avg S/O=0.52 avg Spam%=24.13 avg Ham%=22.62
  FSL_RCVD_UT_2:  bad, avg S/O=0.40 avg Spam%=16.07 avg Ham%=25.24
  FSL_RCVD_UT_3:  bad, avg S/O=0.36 avg Spam%=8.99 avg Ham%=15.56
  FSL_RCVD_UT_4:  bad, avg S/O=0.62 avg Spam%=23.62 avg Ham%=12.94
  FSL_RCVD_UT_5:  bad, avg S/O=0.35 avg Spam%=3.65 avg Ham%=7.89
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.20 avg Spam%=2.16 avg Ham%=10.47
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.45 avg Spam%=78.62 avg Ham%=94.85
  # used in: FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 FSL_RCVD_EX_4 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.73 avg Spam%=66.74 avg Ham%=25.52
  # used in: FSL_RCVD_TR_1 FSL_RCVD_TR_2
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.45 avg Spam%=78.62 avg Ham%=94.72
  # used in: FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 FSL_RCVD_UT_4 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_ROCKET:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YMAIL:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_HTML_BLOCKS:  bad, avg S/O=0.30 avg Spam%=5.23 avg Ham%=12.27
  # used in: FSL_HTML_BLOCK_LOTS_1 FSL_HTML_BLOCK_LOTS_2 
FSL_HTML_BLOCK_LOTS_3
  __FSL_HTML_ENTITIES:  bad, avg S/O=0.25 avg Spam%=13.86 avg Ham%=41.43
  # used in: FSL_HTML_ENT_LOTS_1 FSL_HTML_ENT_LOTS_2 FSL_HTML_ENT_LOTS_3
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.16 avg Spam%=0.72 avg Ham%=5.47
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.37 avg Spam%=0.16 avg Ham%=0.29

rulesrc/sandbox/mmartinec/20_misc.cf (16 rules, 13 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  FROM_WSP_LEAD:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.03
  FROM_WSP_TRAIL:  bad, avg S/O=0.49 avg Spam%=0.03 avg Ham%=0.03
  LONGLINE:  bad, avg S/O=0.45 avg Spam%=5.26 avg Ham%=6.61
  MSGID_NOFQDN1:  bad, avg S/O=0.71 avg Spam%=0.05 avg Ham%=0.01
  MSGID_NOFQDN2:  bad, avg S/O=0.40 avg Spam%=7.52 avg Ham%=11.27
  RP_8BIT:  no hits at all
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  __LONGLINE:  bad, avg S/O=0.45 avg Spam%=5.26 avg Ham%=6.61
  # used in: LONGLINE
  __MSGID_NOFQDN1:  bad, avg S/O=0.71 avg Spam%=0.05 avg Ham%=0.01
  # used in: MSGID_NOFQDN1
  __MSGID_NOFQDN2:  bad, avg S/O=0.40 avg Spam%=7.52 avg Ham%=11.27
  # used in: TEQF_USR_MSGID_HEX MSGID_NOFQDN2

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (9 rules, 2 bad):

  FSL_THIS_IS_ADV:  bad, avg S/O=0.63 avg Spam%=0.04 avg Ham%=0.02
  FSL_YHG_ABUSE:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.31

rulesrc/sandbox/maddoc/99_doc_test.cf (17 rules, 8 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.04
  FSL_HAS_TINYURL:  bad, avg S/O=0.75 avg Spam%=0.19 avg Ham%=0.06
  FSL_HELO_HOME:  bad, avg S/O=0.24 avg Spam%=0.08 avg Ham%=0.25
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.71 avg Spam%=0.02 avg Ham%=0.01
  FSL_STACKED_TEXT:  

[auto] bad sandbox rules report

2015-03-25 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (6 rules, 2 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
  FSL_LINK_AWS_S3_WEB_FM:  bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (54 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.35 avg Spam%=2.05 avg Ham%=5.33
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.44 avg Spam%=0.74 avg Ham%=0.98
  FSL_HTML_BLOCK_LOTS_1:  bad, avg S/O=0.23 avg Spam%=3.72 avg Ham%=12.72
  FSL_HTML_BLOCK_LOTS_2:  bad, avg S/O=0.23 avg Spam%=3.72 avg Ham%=12.72
  FSL_HTML_BLOCK_LOTS_3:  bad, avg S/O=0.23 avg Spam%=3.72 avg Ham%=12.72
  FSL_HTML_ENT_LOTS_1:  bad, avg S/O=0.20 avg Spam%=10.12 avg Ham%=42.44
  FSL_HTML_ENT_LOTS_2:  bad, avg S/O=0.20 avg Spam%=10.12 avg Ham%=42.44
  FSL_HTML_ENT_LOTS_3:  bad, avg S/O=0.20 avg Spam%=10.12 avg Ham%=42.44
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.00
  FSL_RCVD_EX_1:  bad, avg S/O=0.45 avg Spam%=17.91 avg Ham%=21.55
  FSL_RCVD_EX_2:  bad, avg S/O=0.45 avg Spam%=19.56 avg Ham%=25.21
  FSL_RCVD_EX_3:  bad, avg S/O=0.51 avg Spam%=14.99 avg Ham%=14.57
  FSL_RCVD_EX_4:  bad, avg S/O=0.39 avg Spam%=7.72 avg Ham%=12.87
  FSL_RCVD_EX_5:  bad, avg S/O=0.52 avg Spam%=7.75 avg Ham%=8.15
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.68 avg Spam%=22.48 avg Ham%=10.64
  FSL_RCVD_TR_1:  bad, avg S/O=0.49 avg Spam%=19.88 avg Ham%=21.58
  FSL_RCVD_TR_2:  bad, avg S/O=0.80 avg Spam%=22.81 avg Ham%=6.05
  FSL_RCVD_UT_1:  bad, avg S/O=0.49 avg Spam%=21.11 avg Ham%=21.55
  FSL_RCVD_UT_2:  bad, avg S/O=0.48 avg Spam%=22.30 avg Ham%=25.07
  FSL_RCVD_UT_3:  bad, avg S/O=0.51 avg Spam%=14.96 avg Ham%=14.57
  FSL_RCVD_UT_4:  bad, avg S/O=0.36 avg Spam%=6.95 avg Ham%=12.87
  FSL_RCVD_UT_5:  bad, avg S/O=0.64 avg Spam%=13.94 avg Ham%=8.15
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.53 avg Spam%=11.15 avg Ham%=10.64
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.49 avg Spam%=90.41 avg Ham%=92.99
  # used in: FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 FSL_RCVD_EX_4 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.74 avg Spam%=79.51 avg Ham%=29.04
  # used in: FSL_RCVD_TR_1 FSL_RCVD_TR_2
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.49 avg Spam%=90.41 avg Ham%=92.85
  # used in: FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 FSL_RCVD_UT_4 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_ROCKET:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YMAIL:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_HTML_BLOCKS:  bad, avg S/O=0.23 avg Spam%=3.72 avg Ham%=12.72
  # used in: FSL_HTML_BLOCK_LOTS_1 FSL_HTML_BLOCK_LOTS_2 
FSL_HTML_BLOCK_LOTS_3
  __FSL_HTML_ENTITIES:  bad, avg S/O=0.20 avg Spam%=10.12 avg Ham%=42.44
  # used in: FSL_HTML_ENT_LOTS_1 FSL_HTML_ENT_LOTS_2 FSL_HTML_ENT_LOTS_3
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.11 avg Spam%=0.50 avg Ham%=5.83
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.48 avg Spam%=0.25 avg Ham%=0.28

rulesrc/sandbox/mmartinec/20_misc.cf (16 rules, 11 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.66 avg Spam%=0.00 avg Ham%=0.00
  FROM_WSP_LEAD:  bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.03
  FROM_WSP_TRAIL:  bad, avg S/O=0.37 avg Spam%=0.02 avg Ham%=0.03
  LONGLINE:  bad, avg S/O=0.33 avg Spam%=3.09 avg Ham%=6.67
  MSGID_NOFQDN2:  bad, avg S/O=0.27 avg Spam%=4.47 avg Ham%=12.18
  RP_8BIT:  no hits at all
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  __LONGLINE:  bad, avg S/O=0.33 avg Spam%=3.09 avg Ham%=6.67
  # used in: LONGLINE
  __MSGID_NOFQDN2:  bad, avg S/O=0.27 avg Spam%=4.47 avg Ham%=12.18
  # used in: TEQF_USR_MSGID_HEX MSGID_NOFQDN2

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (9 rules, 3 bad):

  FSL_BOTSPAM_1:  no hits at all
  FSL_THIS_IS_ADV:  bad, avg S/O=0.59 avg Spam%=0.04 avg Ham%=0.03
  FSL_YHG_ABUSE:  no hits of target type

rulesrc/sandbox/maddoc/99_doc_test.cf (17 rules, 9 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.04
  FSL_HAS_TINYURL:  bad, avg S/O=0.77 avg Spam%=0.17 avg Ham%=0.05
  FSL_HELO_HOME:  bad, avg S/O=0.23 avg Spam%=0.08 avg Ham%=0.26
  FSL_HELO_NON_FQDN_1:  bad, avg S/O=0.77 avg Spam%=0.69 avg Ham%=0.21
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.03
  FSL_STACKED_TEXT:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.00
  __CTYPE_MULTIPART_MIXED: 

[auto] bad sandbox rules report

2015-03-11 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (6 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/smf/20_smf.cf (54 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.30 avg Spam%=1.38 avg Ham%=5.43
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.52 avg Spam%=0.21 avg Ham%=0.20
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.40 avg Spam%=0.60 avg Ham%=0.94
  FSL_HTML_BLOCK_LOTS_1:  bad, avg S/O=0.40 avg Spam%=12.75 avg Ham%=13.12
  FSL_HTML_BLOCK_LOTS_2:  bad, avg S/O=0.40 avg Spam%=12.75 avg Ham%=13.12
  FSL_HTML_BLOCK_LOTS_3:  bad, avg S/O=0.40 avg Spam%=12.75 avg Ham%=13.12
  FSL_HTML_ENT_LOTS_1:  bad, avg S/O=0.20 avg Spam%=10.20 avg Ham%=43.85
  FSL_HTML_ENT_LOTS_2:  bad, avg S/O=0.20 avg Spam%=10.20 avg Ham%=43.85
  FSL_HTML_ENT_LOTS_3:  bad, avg S/O=0.20 avg Spam%=10.20 avg Ham%=43.85
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.55 avg Spam%=0.01 avg Ham%=0.00
  FSL_RCVD_EX_1:  bad, avg S/O=0.44 avg Spam%=17.02 avg Ham%=21.49
  FSL_RCVD_EX_2:  bad, avg S/O=0.48 avg Spam%=22.43 avg Ham%=25.27
  FSL_RCVD_EX_3:  bad, avg S/O=0.57 avg Spam%=20.05 avg Ham%=14.96
  FSL_RCVD_EX_4:  bad, avg S/O=0.51 avg Spam%=13.55 avg Ham%=13.54
  FSL_RCVD_EX_5:  bad, avg S/O=0.64 avg Spam%=15.27 avg Ham%=8.46
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.34 avg Spam%=4.85 avg Ham%=10.97
  FSL_RCVD_TR_1:  bad, avg S/O=0.63 avg Spam%=33.88 avg Ham%=21.61
  FSL_RCVD_UT_1:  bad, avg S/O=0.49 avg Spam%=20.79 avg Ham%=21.49
  FSL_RCVD_UT_2:  bad, avg S/O=0.50 avg Spam%=23.47 avg Ham%=25.12
  FSL_RCVD_UT_3:  bad, avg S/O=0.58 avg Spam%=20.95 avg Ham%=14.96
  FSL_RCVD_UT_4:  bad, avg S/O=0.61 avg Spam%=20.96 avg Ham%=13.54
  FSL_RCVD_UT_5:  bad, avg S/O=0.39 avg Spam%=4.73 avg Ham%=8.46
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.20 avg Spam%=2.27 avg Ham%=10.97
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.50 avg Spam%=93.17 avg Ham%=94.70
  # used in: FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 FSL_RCVD_EX_4 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.76 avg Spam%=87.37 avg Ham%=28.52
  # used in: FSL_RCVD_TR_1
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.50 avg Spam%=93.17 avg Ham%=94.54
  # used in: FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 FSL_RCVD_UT_4 
FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_ROCKET:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.47 avg Spam%=0.01 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YMAIL:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_HTML_BLOCKS:  bad, avg S/O=0.40 avg Spam%=12.75 avg Ham%=13.12
  # used in: FSL_HTML_BLOCK_LOTS_1 FSL_HTML_BLOCK_LOTS_2 
FSL_HTML_BLOCK_LOTS_3
  __FSL_HTML_ENTITIES:  bad, avg S/O=0.20 avg Spam%=10.20 avg Ham%=43.85
  # used in: FSL_HTML_ENT_LOTS_1 FSL_HTML_ENT_LOTS_2 FSL_HTML_ENT_LOTS_3
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.08 avg Spam%=0.40 avg Ham%=6.25
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.16 avg Spam%=0.05 avg Ham%=0.29

rulesrc/sandbox/mmartinec/20_misc.cf (16 rules, 13 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  FROM_WSP_LEAD:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.03
  FROM_WSP_TRAIL:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.03
  LONGLINE:  bad, avg S/O=0.25 avg Spam%=2.12 avg Ham%=6.64
  MSGID_NOFQDN1:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  MSGID_NOFQDN2:  bad, avg S/O=0.35 avg Spam%=7.06 avg Ham%=12.90
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  RP_UNDERLINE:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  __LONGLINE:  bad, avg S/O=0.25 avg Spam%=2.12 avg Ham%=6.64
  # used in: LONGLINE
  __MSGID_NOFQDN1:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  # used in: MSGID_NOFQDN1
  __MSGID_NOFQDN2:  bad, avg S/O=0.35 avg Spam%=7.06 avg Ham%=12.90
  # used in: TEQF_USR_MSGID_HEX MSGID_NOFQDN2

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (9 rules, 3 bad):

  FSL_BOTSPAM_1:  no hits at all
  FSL_THIS_IS_ADV:  bad, avg S/O=0.57 avg Spam%=0.04 avg Ham%=0.03
  FSL_YHG_ABUSE:  no hits of target type

rulesrc/sandbox/maddoc/99_doc_test.cf (17 rules, 8 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.04
  FSL_HAS_TINYURL:  bad, avg S/O=0.75 avg Spam%=0.15 avg Ham%=0.05
  FSL_HELO_HOME:  bad, avg S/O=0.24 avg Spam%=0.08 avg Ham%=0.26
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  FSL_STACKED_TEXT:  bad, avg S/O=0.48 avg 

[auto] bad sandbox rules report

2015-03-04 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (6 rules, 3 bad):

  FSL_BULK_SIG:  bad, avg S/O=0.72 avg Spam%=0.54 avg Ham%=0.04
  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  __FSL_HAS_LIST_UNSUB:  bad, avg S/O=0.60 avg Spam%=53.39 avg Ham%=38.02
  # used in: FSL_BULK_SIG

rulesrc/sandbox/smf/20_smf.cf (54 rules, 35 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.34 avg Spam%=1.99 avg Ham%=5.24
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.62 avg Spam%=0.32 avg Ham%=0.20
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.47 avg Spam%=0.81 avg Ham%=0.93
  FSL_HTML_BLOCK_LOTS_1:  bad, avg S/O=0.21 avg Spam%=3.23 avg Ham%=11.87
  FSL_HTML_BLOCK_LOTS_2:  bad, avg S/O=0.21 avg Spam%=3.23 avg Ham%=11.87
  FSL_HTML_BLOCK_LOTS_3:  bad, avg S/O=0.21 avg Spam%=3.23 avg Ham%=11.87
  FSL_HTML_ENT_LOTS_1:  bad, avg S/O=0.16 avg Spam%=7.79 avg Ham%=40.66
  FSL_HTML_ENT_LOTS_2:  bad, avg S/O=0.16 avg Spam%=7.79 avg Ham%=40.66
  FSL_HTML_ENT_LOTS_3:  bad, avg S/O=0.16 avg Spam%=7.79 avg Ham%=40.66
  FSL_NOT_FROM_GOOGLE:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.00
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  FSL_RCVD_EX_1:  bad, avg S/O=0.30 avg Spam%=9.08 avg Ham%=21.85
  FSL_RCVD_EX_2:  bad, avg S/O=0.40 avg Spam%=16.53 avg Ham%=26.47
  FSL_RCVD_EX_3:  bad, avg S/O=0.61 avg Spam%=18.92 avg Ham%=12.56
  FSL_RCVD_EX_4:  bad, avg S/O=0.27 avg Spam%=4.05 avg Ham%=12.82
  FSL_RCVD_EX_5:  bad, avg S/O=0.47 avg Spam%=6.59 avg Ham%=8.17
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.78 avg Spam%=33.54 avg Ham%=10.20
  FSL_RCVD_TR_1:  bad, avg S/O=0.54 avg Spam%=23.00 avg Ham%=20.41
  FSL_RCVD_TR_2:  bad, avg S/O=0.72 avg Spam%=16.69 avg Ham%=7.01
  FSL_RCVD_UT_1:  bad, avg S/O=0.32 avg Spam%=10.10 avg Ham%=21.85
  FSL_RCVD_UT_2:  bad, avg S/O=0.45 avg Spam%=20.01 avg Ham%=26.29
  FSL_RCVD_UT_3:  bad, avg S/O=0.59 avg Spam%=17.68 avg Ham%=12.56
  FSL_RCVD_UT_4:  bad, avg S/O=0.31 avg Spam%=5.07 avg Ham%=12.82
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.18 avg Spam%=1.58 avg Ham%=10.20
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.49 avg Spam%=88.71 avg Ham%=92.08
  # used in: FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 FSL_RCVD_EX_4 
FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.75 avg Spam%=83.37 avg Ham%=28.36
  # used in: FSL_RCVD_TR_1 FSL_RCVD_TR_2
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.49 avg Spam%=88.71 avg Ham%=91.91
  # used in: FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 FSL_RCVD_UT_4 
FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_GOOGLE:  bad, avg S/O=0.41 avg Spam%=0.01 avg Ham%=0.02
  # used in: FSL_NOT_FROM_GOOGLE
  __FSL_ENVFROM_ROCKET:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.01
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_ENVFROM_YMAIL:  no hits at all
  # used in: FSL_NOT_FROM_YAHOO
  __FSL_HTML_BLOCKS:  bad, avg S/O=0.21 avg Spam%=3.23 avg Ham%=11.87
  # used in: FSL_HTML_BLOCK_LOTS_1 FSL_HTML_BLOCK_LOTS_2 
FSL_HTML_BLOCK_LOTS_3
  __FSL_HTML_ENTITIES:  bad, avg S/O=0.16 avg Spam%=7.79 avg Ham%=40.66
  # used in: FSL_HTML_ENT_LOTS_1 FSL_HTML_ENT_LOTS_2 FSL_HTML_ENT_LOTS_3
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.01 avg Spam%=0.07 avg Ham%=5.87
  # used in: TO_IN_SUBJ FSL_NOT_FROM_GOOGLE
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.09 avg Spam%=0.35 avg Ham%=5.80
  # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.17 avg Spam%=0.04 avg Ham%=0.25

rulesrc/sandbox/mmartinec/20_misc.cf (16 rules, 13 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL1:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  FROM_WSP_LEAD:  bad, avg S/O=0.16 avg Spam%=0.01 avg Ham%=0.04
  FROM_WSP_TRAIL:  bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.04
  LONGLINE:  bad, avg S/O=0.26 avg Spam%=2.23 avg Ham%=6.67
  MSGID_NOFQDN1:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  MSGID_NOFQDN2:  bad, avg S/O=0.36 avg Spam%=7.15 avg Ham%=13.79
  RP_8BIT:  no hits at all
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  __LONGLINE:  bad, avg S/O=0.26 avg Spam%=2.23 avg Ham%=6.67
  # used in: TO_NO_BRKTS_NORDNS_HTML LONGLINE
  __MSGID_NOFQDN1:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  # used in: MSGID_NOFQDN1
  __MSGID_NOFQDN2:  bad, avg S/O=0.36 avg Spam%=7.15 avg Ham%=13.79
  # used in: TEQF_USR_MSGID_HEX MSGID_NOFQDN2

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (9 rules, 2 bad):

  FSL_THIS_IS_ADV:  bad, avg S/O=0.70 avg Spam%=0.04 avg Ham%=0.02
  FSL_YHG_ABUSE:  no hits of target type


Re: [auto] bad sandbox rules report

2013-03-06 Thread Axb

Guys,

I'm disabling 0 hit/non perfomers/abandoned rules in hstern's sandbox.


make test spit out:

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is 
nonexistent

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is 
nonexistent

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is 
nonexistent

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is 
nonexistent

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent


If your rules depend on sandbox rules which are not in your own, PLEASE 
always copy these rules to your own sandbox.

This will avoid suprises in the future.

We're masschecking lots of ancient bloat.

Thanks for your help in cleaning up this mess

Axb


Re: [auto] bad sandbox rules report

2013-03-06 Thread Axb

On 03/06/2013 10:19 AM, Axb wrote:

Guys,

I'm disabling 0 hit/non perfomers/abandoned rules in hstern's sandbox.


make test spit out:

STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is
nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is
nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is
nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_SUBJ_RE_FW which is
nonexistent
STOX_REPLY_TYPE_WITHOUT_QUOTES depends on __HS_QUOTE which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
FROM_12LTRDOM depends on __HS_SUBJ_RE_FW which is nonexistent
RISK_FREE depends on __HS_SUBJ_RE_FW which is nonexistent
T_MIME_NO_TEXT depends on __HS_SUBJ_RE_FW which is nonexistent


If your rules depend on sandbox rules which are not in your own, PLEASE
always copy these rules to your own sandbox.
This will avoid suprises in the future.

We're masschecking lots of ancient bloat.

Thanks for your help in cleaning up this mess


I've copied the dependencies to jm and jhardin sandboxes.
Suggest you rename them so they're unique to your rules and/or put them 
in a commitername_dependencies.cf file






Re: [auto] bad sandbox rules report

2013-03-06 Thread Kevin A. McGrail

On 3/6/2013 4:54 AM, Axb wrote:

I've copied the dependencies to jm and jhardin sandboxes.
Suggest you rename them so they're unique to your rules and/or put 
them in a commitername_dependencies.cf file
I like getting rid of the rules that aren't working.  But this copying 
rules in sandbox concerns me since sandboxes are really a gateway to 
final that copying rules is inefficient.  Doesn't the dependency show up 
and you can edit to leave the original rule?


Re: [auto] bad sandbox rules report

2013-03-06 Thread Axb

On 03/06/2013 11:55 AM, Kevin A. McGrail wrote:

On 3/6/2013 4:54 AM, Axb wrote:

I've copied the dependencies to jm and jhardin sandboxes.
Suggest you rename them so they're unique to your rules and/or put
them in a commitername_dependencies.cf file

I like getting rid of the rules that aren't working.  But this copying
rules in sandbox concerns me since sandboxes are really a gateway to
final that copying rules is inefficient.  Doesn't the dependency show up
and you can edit to leave the original rule?



It would be neater and safer practice not to depend on somebody elses 
sandbox rules.


What if you remove one of your rule files as because you consider them 
to be old, bad, useless, ugly ? are YOU responsible for your neighbour's 
broken metasa?


AND if the dependency is looks like it can be recycled in many, many 
rules we have a nice /rules/10_hasbase.cf for cases like these.


Re: [auto] bad sandbox rules report

2013-03-06 Thread John Hardin

On Wed, 6 Mar 2013, Axb wrote:

If your rules depend on sandbox rules which are not in your own, PLEASE 
always copy these rules to your own sandbox.

This will avoid suprises in the future.


It also can lead to problems if the owner of that rule modifies their 
original copy, but I see your point.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Failure to plan ahead on someone else's part does not constitute
  an emergency on my part. -- David W. Barts in a.s.r
---
 4 days until Daylight Saving Time begins in U.S. - Spring Forward


Re: [auto] bad sandbox rules report

2013-03-06 Thread John Hardin

On Wed, 6 Mar 2013, Axb wrote:


I've copied the dependencies to jm and jhardin sandboxes.
Suggest you rename them so they're unique to your rules and/or put them in a 
commitername_dependencies.cf file



Thanks!

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Failure to plan ahead on someone else's part does not constitute
  an emergency on my part. -- David W. Barts in a.s.r
---
 4 days until Daylight Saving Time begins in U.S. - Spring Forward


Re: [auto] bad sandbox rules report

2012-09-12 Thread Axb

Godo day

rulesrc/sandbox/khopesh/ is full of rules which are tflags nopublish

We've been masschecking these rules for months and it seems pretty 
pointless to spend CPU time on them if they're never going to be published.


Could these be reviewed and disabled/removed if there's no plan to push 
out?


Thanks

Axb.






Re: [auto] bad sandbox rules report

2012-07-04 Thread Axb

Good day Commiters,

Could we agree to remove/disable no hits at all rules?

This would speed up masschecks quite a bit.
(also, never hurts to do a cleanup)

Thanks

Axb


Re: [auto] bad sandbox rules report

2012-07-04 Thread Benny Pedersen

Den 2012-07-04 10:44, Axb skrev:


Could we agree to remove/disable no hits at all rules?


no, spammers would start using this taktics after disable

is there an minimum time for not hitting ?, or just not hitting last 
masscheck ?



This would speed up masschecks quite a bit.


oh fair :)


(also, never hurts to do a cleanup)


it does not take long if done daily, but if it done on each 365 day it 
takes 365 days, i know this from expirence :)




Re: [auto] bad sandbox rules report

2009-08-27 Thread Justin Mason
ah, noted.

--j.

On Thu, Aug 27, 2009 at 01:23, Warren Togamiwtog...@redhat.com wrote:
 On 08/26/2009 04:31 AM, Rules Report Cron wrote:

 rulesrc/sandbox/jm/20_khop_sc_bug_6114.cf (10 rules, 10 bad):

   KHOP_SC_CIDR16:  no hits at all
   KHOP_SC_CIDR24:  no hits at all
   KHOP_SC_CIDR8:  no hits at all
   KHOP_SC_TOP10:  no hits at all
   KHOP_SC_TOP100:  no hits at all
   KHOP_SC_TOP20:  no hits at all
   KHOP_SC_TOP200:  no hits at all
   KHOP_SC_TOP_CIDR16:  no hits at all
   KHOP_SC_TOP_CIDR24:  no hits at all
   KHOP_SC_TOP_CIDR8:  no hits at all

 khopesh in #spamassassin mentioned that these rules in the sandbox broke a
 few weeks ago when the sandbox moved.  He hasn't had time to follow up.  I
 don't know the details myself.

 Warren





-- 
--j.


[auto] bad sandbox rules report

2009-07-08 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

Use of uninitialized value in concatenation (.) or string at 
masses/rule-qa/list-bad-rules line 181.
demoting : config: found endif without matching conditional at 
masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value in hash element at masses/rule-qa/list-bad-rules 
line 183.

rulesrc/sandbox/mmartinec/20_misc.cf (9 rules, 2 bad):

  LONGLINE:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.71
  MSGID_NOFQDN2:  bad, avg S/O=0.67 avg Spam%=24.73 avg Ham%=11.94

rulesrc/sandbox/maddoc/99_doc_test.cf (34 rules, 17 bad):

  FSL_BLOGSPOT_ABUSE:  bad, avg S/O=0.11 avg Spam%=0.11 avg Ham%=0.95
  FSL_FREEMAIL_1:  bad, avg S/O=0.43 avg Spam%=1.33 avg Ham%=1.77
  FSL_FREEMAIL_2:  bad, avg S/O=0.36 avg Spam%=0.61 avg Ham%=1.08
  FSL_GD2_URI:  no hits of target type
  FSL_HAS_TINYURL:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.12
  FSL_HELO_FAKE:  bad, avg S/O=0.67 avg Spam%=0.86 avg Ham%=0.42
  FSL_HELO_HOME:  bad, avg S/O=0.72 avg Spam%=0.49 avg Ham%=0.19
  FSL_HELO_NON_FQDN_2:  bad, avg S/O=0.47 avg Spam%=86.58 avg Ham%=99.09
  FSL_RCVD_USER:  bad, avg S/O=0.72 avg Spam%=4.34 avg Ham%=1.72
  FSL_SINGLE_URI:  bad, avg S/O=0.54 avg Spam%=34.81 avg Ham%=29.21
  FSL_SPAMWARE_STRING_1:  bad, avg S/O=0.69 avg Spam%=0.23 avg Ham%=0.10
  FSL_UA:  bad, avg S/O=0.56 avg Spam%=0.16 avg Ham%=0.13
  __ANY_HTTP_URI:  bad, avg S/O=0.53 avg Spam%=90.17 avg Ham%=79.96
  # used in: FSL_SINGLE_URI
  __FROM_FREEMAIL:  bad, avg S/O=0.13 avg Spam%=1.68 avg Ham%=10.97
  # used in: FSL_FREEMAIL_2
  __FSL_UA_2:  bad, avg S/O=0.56 avg Spam%=0.16 avg Ham%=0.13
  # used in: FSL_UA
  __HAS_REPLY_TO:  bad, avg S/O=0.20 avg Spam%=10.66 avg Ham%=43.22
  # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __REPLY_FREEMAIL:  bad, avg S/O=0.43 avg Spam%=1.33 avg Ham%=1.77
  # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.48 avg Spam%=1.74 avg Ham%=1.87
  __KAM_MX3:  bad, avg S/O=0.48 avg Spam%=1.73 avg Ham%=1.87
  # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (18 rules, 2 bad):

  KAM_REPLACE:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.21
  __KAM_REP2:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.21
  # used in: KAM_REPLACE

rulesrc/sandbox/kb/20_header.cf (5 rules, 1 bad):

  KB_DATE_CONTAINS_TAB:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/jm/80_sane.cf (48 rules, 4 bad):

  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.05 avg Spam%=0.00 avg 
Ham%=0.03
  SANE_d0d2b0f6373bf91253d66dd74c594b87:  no hits of target type
  SANE_e0b42866efae083b5d78a87e2e6710e9:  no hits of target type
  SANE_e761c503a58719e688c96a3ee254fbce:  no hits of target type

rulesrc/sandbox/jm/20_basic.cf (72 rules, 10 bad):

  CURR_PRICE:  no hits of target type
  IMG_ALT_HSPACE_CID_ALIGN:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  MIME_BOUND_EQ_REL:  no hits of target type
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.59
  PART_CID_STOCK:  bad, avg S/O=0.69 avg Spam%=0.40 avg Ham%=0.18
  PART_CID_STOCK_LESS:  bad, avg S/O=0.22 avg Spam%=0.03 avg Ham%=0.10
  STOX_BOUND_090909_B:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.23
  STOX_UA:  no hits of target type
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.16
  # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.83
  # used in: MSNBC_THREAD_INDEX

rulesrc/sandbox/jhardin/20_fillform.cf (8 rules, 5 bad):

  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.34 avg Spam%=0.13 avg Ham%=0.25
  FILL_THIS_FORM_LONG:  bad, avg S/O=0.74 avg Spam%=0.16 avg Ham%=0.06
  # used in: FILL_THIS_FORM_FRAUD_PHISH FILL_THIS_FORM_FRAUD_PHISH
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.63 avg Spam%=0.79 avg Ham%=0.46
  __FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.23 avg Spam%=8.59 avg Ham%=27.91
  # used in: FILL_THIS_FORM_FRAUD_PHISH
  __FILL_THIS_FORM_PARTIAL:  bad, avg S/O=0.37 avg Spam%=0.24 avg Ham%=0.40
  # used in: FILL_THIS_FORM_FRAUD_PHISH

rulesrc/sandbox/hege/20_FreeMail_mass.cf (15 rules, 11 bad):

  FREEMAIL_FORGED_REPLYTO:  bad, avg S/O=0.71 avg Spam%=0.05 avg Ham%=0.02
  FREEMAIL_FROM:  bad, avg S/O=0.18 avg Spam%=2.99 avg Ham%=13.71
  # used in: FREEMAIL_FORGED_REPLYTO
  FREEMAIL_FROM_END_DIGIT:  bad, avg S/O=0.45 avg Spam%=1.32 avg Ham%=1.60
  FREEMAIL_SUBJECT:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  __freemail_hdr_replyto:  bad, avg S/O=0.25 avg Spam%=0.40 avg Ham%=1.17
  # used in: FREEMAIL_FORGED_REPLYTO

[auto] bad sandbox rules report

2009-06-24 Thread Rules Report Cron
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

plugin: failed to create instance of plugin 
Mail::SpamAssassin::Plugin::Sandbox::hstern: Can't locate object method new 
via package Mail::SpamAssassin::Plugin::Sandbox::hstern (perhaps you forgot 
to load Mail::SpamAssassin::Plugin::Sandbox::hstern?) at (eval 271) line 1.

plugin: failed to create instance of plugin 
Mail::SpamAssassin::Plugin::FreeMail: Can't locate object method new via 
package Mail::SpamAssassin::Plugin::FreeMail (perhaps you forgot to load 
Mail::SpamAssassin::Plugin::FreeMail?) at (eval 272) line 1.

Use of uninitialized value in concatenation (.) or string at 
masses/rule-qa/list-bad-rules line 181.
demoting : config: found endif without matching conditional at 
masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value in hash element at masses/rule-qa/list-bad-rules 
line 183.

rulesrc/sandbox/mmartinec/25_yg.cf (17 rules, 17 bad):

  NOTVALID_GMAIL:  bad, avg S/O=0.52 avg Spam%=0.44 avg Ham%=0.40
  NOTVALID_PAY:  bad, avg S/O=0.17 avg Spam%=0.05 avg Ham%=0.24
  NOTVALID_YAHOO:  bad, avg S/O=0.55 avg Spam%=0.85 avg Ham%=0.69
  __AUTH_EBAY:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.20
  # used in: NOTVALID_PAY
  __AUTH_GMAIL:  bad, avg S/O=0.04 avg Spam%=0.44 avg Ham%=11.44
  # used in: NOTVALID_GMAIL
  __AUTH_PAYPAL:  bad, avg S/O=0.57 avg Spam%=0.04 avg Ham%=0.03
  # used in: NOTVALID_PAY
  __AUTH_YAHOO:  bad, avg S/O=0.16 avg Spam%=0.85 avg Ham%=4.50
  # used in: NOTVALID_YAHOO
  __AUTH_YAHOO1:  bad, avg S/O=0.16 avg Spam%=0.51 avg Ham%=2.59
  # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO2:  bad, avg S/O=0.71 avg Spam%=0.09 avg Ham%=0.04
  # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO3:  bad, avg S/O=0.13 avg Spam%=0.13 avg Ham%=0.90
  # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO4:  bad, avg S/O=0.11 avg Spam%=0.12 avg Ham%=0.97
  # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=59.83
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.04 avg Ham%=72.32
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=63.44
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML4:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=39.04
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.07 avg Ham%=24.03
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __VIA_ML:  bad, avg S/O=0.00 avg Spam%=0.11 avg Ham%=74.47
  # used in: NOTVALID_GMAIL NOTVALID_YAHOO

rulesrc/sandbox/mmartinec/20_misc.cf (12 rules, 2 bad):

  LONGLINE:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.64
  MSGID_NOFQDN2:  bad, avg S/O=0.72 avg Spam%=25.36 avg Ham%=9.88

rulesrc/sandbox/maddoc/99_doc_test.cf (37 rules, 15 bad):

  FSL_BLOGSPOT_ABUSE:  bad, avg S/O=0.20 avg Spam%=0.23 avg Ham%=0.91
  FSL_FREEMAIL_1:  bad, avg S/O=0.49 avg Spam%=1.87 avg Ham%=1.95
  FSL_FREEMAIL_2:  bad, avg S/O=0.40 avg Spam%=0.77 avg Ham%=1.16
  FSL_GD2_URI:  no hits of target type
  FSL_HAS_TINYURL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.32
  FSL_HELO_HOME:  bad, avg S/O=0.77 avg Spam%=0.51 avg Ham%=0.15
  FSL_HELO_NON_FQDN_2:  bad, avg S/O=0.47 avg Spam%=86.64 avg Ham%=99.12
  FSL_SINGLE_URI:  bad, avg S/O=0.58 avg Spam%=35.54 avg Ham%=26.10
  FSL_SPAMWARE_STRING_1:  bad, avg S/O=0.41 avg Spam%=0.05 avg Ham%=0.08
  FSL_UA:  bad, avg S/O=0.72 avg Spam%=0.20 avg Ham%=0.08
  __ANY_HTTP_URI:  bad, avg S/O=0.54 avg Spam%=89.42 avg Ham%=77.13
  # used in: FSL_SINGLE_URI
  __FROM_FREEMAIL:  bad, avg S/O=0.11 avg Spam%=2.19 avg Ham%=17.62
  # used in: FSL_FREEMAIL_2
  __FSL_UA_2:  bad, avg S/O=0.72 avg Spam%=0.20 avg Ham%=0.08
  # used in: FSL_UA
  __HAS_REPLY_TO:  bad, avg S/O=0.19 avg Spam%=10.95 avg Ham%=47.94
  # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __REPLY_FREEMAIL:  bad, avg S/O=0.49 avg Spam%=1.87 avg Ham%=1.95
  # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.35 avg Spam%=2.04 avg Ham%=3.82
  __KAM_MX3:  bad, avg S/O=0.35 avg Spam%=2.03 avg Ham%=3.82
  # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (19 rules, 2 bad):

  KAM_REPLACE:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.25
  __KAM_REP2:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.25
  # used in: KAM_REPLACE

rulesrc/sandbox/jm/80_sane.cf (61 rules, 4 bad):

  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.37 avg Spam%=0.01 avg 
Ham%=0.02
  SANE_d0d2b0f6373bf91253d66dd74c594b87:  bad,