svn commit: r1936020 - spamassassin/trunk/rules
[email protected] Thu, 09 Jul 2026 08:30:14 -0000
| Newsgroups | gmane.mail.spam.spamassassin.cvs |
|---|---|
| Message-ID | <178358581452.1386958.6863980225552433101@svn03-he-fi> |
Author: spamassassin_role Date: Thu Jul 9 08:30:14 2026 New Revision: 1936020 Log: promotions validated Modified: spamassassin/trunk/rules/active.list Modified: spamassassin/trunk/rules/active.list ============================================================================== --- spamassassin/trunk/rules/active.list Thu Jul 9 06:45:03 2026 (r1936019) +++ spamassassin/trunk/rules/active.list Thu Jul 9 08:30:14 2026 (r1936020) @@ -1,9 +1,6 @@ # DO NOT EDIT: file generated by build/mkupdates/listpromotable # active ruleset list, automatically generated from https://ruleqa.spamassassin.org/ -# with results from: last-net: net-giovanni-ham net-giovanni-spam net-grenier net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 4: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 5: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream - -# good enough -ACCT_PHISHING +# with results from: last-net: net-giovanni-ham net-giovanni-spam net-grenier net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 4: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 5: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw -mails-ham mmiroslaw-mails-spam spamsponge whyscream # good enough ACCT_PHISHING_MANY @@ -116,9 +113,6 @@ ALL_TRUSTED # tflags publish AMAZON_IMG_NOT_RCVD_AMZN -# good enough -APOSTROPHE_FROM - # tflags publish APP_DEVELOPMENT_FREEM @@ -197,7 +191,10 @@ BITCOIN_EXTORT_02 # tflags publish BITCOIN_IMGUR -# tflags publish +# good enough +BITCOIN_MALF_HTML + +# tflags net BITCOIN_MALWARE # tflags publish @@ -263,10 +260,7 @@ BITCOIN_XPRIO # tflags publish BITCOIN_YOUR_INFO -# good enough -BODY_SINGLE_WORD - -# tflags publish +# tflags net BODY_URI_ONLY # tflags publish @@ -347,9 +341,6 @@ DEAR_BENEFICIARY # good enough DEAR_EMAIL -# good enough -DEAR_NOBODY - # tflags net DIGEST_MULTIPLE @@ -440,6 +431,9 @@ DOS_OUTLOOK_TO_MX # tflags publish DOTGOV_IMAGE +# good enough +DSN_NO_MIMEVERSION + # tflags publish DX_TEXT_02 @@ -450,14 +444,8 @@ DX_TEXT_03 DYNAMIC_IMGUR # good enough -DYN_RDNS_AND_INLINE_IMAGE - -# good enough DYN_RDNS_SHORT_HELO_HTML -# good enough -DYN_RDNS_SHORT_HELO_IMAGE - # tflags publish EBAY_IMG_NOT_RCVD_EBAY @@ -491,9 +479,6 @@ FBI_SPOOF # tflags publish FILL_THIS_FORM -# good enough -FKO_MS_OAUTH_SILENT - # tflags publish FONT_INVIS_DIRECT @@ -515,13 +500,10 @@ FONT_INVIS_NORDNS # tflags publish FONT_INVIS_POSTEXTRAS -# good enough -FORGED_RELAY_MUA_TO_MX - # tflags net FORGED_SPF_HELO -# tflags publish +# tflags net FORM_FRAUD # tflags publish @@ -642,9 +624,6 @@ FROM_SUSPICIOUS_NTLD FROM_SUSPICIOUS_NTLD_FP # good enough -FROM_UNBAL2 - -# good enough FROM_WSP_LEAD # good enough @@ -663,10 +642,7 @@ FSL_HAS_TINYURL FSL_HELO_BARE_IP_1 # good enough -FSL_HELO_NON_FQDN_1 - -# good enough -FSL_LINK_AWS_S3_WEB +FSL_HELO_BARE_IP_2 # tflags publish FSL_NEW_HELO_USER @@ -755,9 +731,6 @@ GB_BITCOIN_CP # tflags publish GB_CUSTOM_HTM_URI -# good enough -GB_FAKE_RF - # tflags publish GB_FAKE_RF_SHORT @@ -842,12 +815,12 @@ HAS_X_NO_RELAY # tflags publish HAS_X_OUTGOING_SPAM_STAT +# tflags net +HDRS_LCASE + # tflags publish HDRS_MISSP -# good enough -HDR_CASE_REV_ENC - # tflags publish HDR_ORDER_FTSDMCXX_DIRECT @@ -861,9 +834,6 @@ HEADER_FROM_DIFFERENT_DOMAINS HEAD_LONG # good enough -HELO_LOCALHOST - -# good enough HELO_MISC_IP # tflags publish @@ -879,6 +849,9 @@ HK_CTE_RAW HK_NAME_FM_MR_MRS # good enough +HK_NAME_FROM + +# good enough HK_NAME_MR_MRS # tflags publish @@ -896,9 +869,6 @@ HK_RCVD_IP_MULTICAST # tflags publish HK_SCAM -# good enough -HK_SPAMMY_FILENAME - # tflags publish HOSTED_IMG_DIRECT_MX @@ -926,9 +896,6 @@ HREF_EMPTY_XANTIABUSE # tflags publish HREF_EMPTY_XAUTHED -# good enough -HTML_ATTACH - # tflags publish HTML_BADATTR @@ -962,9 +929,6 @@ HTML_TEXT_INVISIBLE_FONT # tflags publish HTML_TEXT_INVISIBLE_STYLE -# good enough -IMG_DIRECT_TO_MX - # tflags publish IMG_ONLY_FM_DOM_INFO @@ -977,9 +941,6 @@ JH_SPAMMY_PATTERN01 # tflags publish JH_SPAMMY_PATTERN02 -# good enough -KHOP_DYNAMIC - # tflags net KHOP_HELO_FCRDNS @@ -992,9 +953,6 @@ LIST_PRTL_PUMPDUMP # tflags publish LIST_PRTL_SAME_USER -# good enough -LITECOIN_EXTORT_01 - # tflags publish LONG_HEX_URI @@ -1025,10 +983,13 @@ MALWARE_PASSWORD # tflags publish MALW_ATTACH +# tflags net +MANY_HDRS_LCASE + # tflags publish MANY_SPAN_IN_TEXT -# tflags net +# good enough MAY_BE_FORGED # tflags publish @@ -1083,9 +1044,6 @@ MONERO_MALWARE MONERO_PAY_ME # good enough -MONEY_ATM_CARD - -# good enough MONEY_FORM # good enough @@ -1104,17 +1062,20 @@ MONEY_FRAUD_8 MONEY_FREEMAIL_REPTO # good enough +MONEY_FROM_41 + +# good enough MONEY_FROM_MISSP +# good enough +MONEY_NOHTML + # tflags publish MSGID_DOLLARS_URI_IMG # tflags publish MSGID_HDR_MALF -# good enough -MSGID_MULTIPLE_AT - # tflags publish MSM_PRIO_REPTO @@ -1128,6 +1089,9 @@ MXG_EMAIL_FRAG MXG_SPOOFED_DOCUSIGN # good enough +NAME_EMAIL_DIFF + +# good enough NA_DOLLARS # tflags publish @@ -1181,9 +1145,6 @@ OBFU_BITCOIN # tflags publish OBFU_HTML_ATTACH -# good enough -OBFU_JPG_ATTACH - # tflags publish OBFU_JVSCR_ESC @@ -1203,9 +1164,6 @@ PAYPAL_PHISH_07 PDS_BAD_THREAD_QP_64 # good enough -PDS_BRAND_SUBJ_NAKED_TO - -# good enough PDS_BTC_ID # good enough @@ -1230,12 +1188,6 @@ PDS_FROM_NAME_TO_DOMAIN PDS_HELO_SPF_FAIL # good enough -PDS_LTC_CP - -# good enough -PDS_LTC_HUSH - -# good enough PDS_NAKED_TO_NUMERO # good enough @@ -1244,15 +1196,6 @@ PDS_OTHER_BAD_TLD # good enough PDS_RDNS_DYNAMIC_FP -# good enough -PDS_SHORT_SPOOFED_URL - -# good enough -PDS_TO_EQ_FROM_NAME - -# good enough -PDS_X_PHP_WP_EXP - # tflags publish PHISH_ATTACH @@ -1292,6 +1235,9 @@ POSSIBLE_APPLE_PHISH_02 # tflags publish POSSIBLE_EBAY_PHISH_02 +# good enough +POSSIBLE_GMAIL_PHISHER + # tflags publish POSSIBLE_PAYPAL_PHISH_01 @@ -1551,7 +1497,7 @@ RDNS_NUM_TLD_ATCHNX RDNS_NUM_TLD_XM # good enough -REPLYTO_WITHOUT_TO_CC +READY_TO_SHIP # tflags publish REPTO_419_FRAUD @@ -1595,6 +1541,9 @@ REPTO_419_FRAUD_YJ # tflags publish REPTO_419_FRAUD_YN +# good enough +RISK_FREE + # tflags publish SCC_ISEMM_LID_1 @@ -1619,9 +1568,6 @@ SHOPIFY_IMG_NOT_RCVD_SFY # tflags publish SHORTENER_SHORT_IMG -# good enough -SHORT_HELO_AND_INLINE_IMAGE - # tflags publish SHORT_IMG_SUSP_NTLD @@ -1686,9 +1632,6 @@ STATIC_XPRIO_OLE STOCK_TIP # good enough -STOX_REPLY_TYPE_WITHOUT_QUOTES - -# good enough STY_INVIS_DIRECT # tflags userconf @@ -1700,11 +1643,8 @@ SUBJECT_IN_WELCOMELIST # tflags net SUBJ_BRKN_WORDNUMS -# good enough -SUBJ_OBFU_LOW_CNTRST - -# good enough -SUBJ_ODD_CASE +# tflags net +SUBJ_UNNEEDED_HTML # tflags net SURBL_BLOCKED @@ -1712,12 +1652,6 @@ SURBL_BLOCKED # good enough SUSP_UTF8_WORD_FROM -# good enough -SUSP_UTF8_WORD_MANY - -# good enough -SUSP_UTF8_WORD_SUBJ - # tflags publish SYSADMIN @@ -1727,7 +1661,7 @@ TAGSTAT_IMG_NOT_RCVD_TGST # tflags publish TARINGANET_IMG_NOT_RCVD_TN -# tflags publish +# tflags net TEQF_USR_IMAGE # tflags publish @@ -1752,9 +1686,6 @@ TONLINE_FAKE_DKIM TO_EQ_FM_DIRECT_MX # good enough -TO_EQ_FM_DOM_HTML_IMG - -# good enough TO_EQ_FM_DOM_HTML_ONLY # tflags net @@ -1787,7 +1718,7 @@ TO_NO_BRKTS_HTML_IMG # tflags publish TO_NO_BRKTS_HTML_ONLY -# tflags net +# good enough TO_NO_BRKTS_MSFT # tflags publish @@ -1800,18 +1731,15 @@ TO_NO_BRKTS_PCNT TO_TOO_MANY_WFH_01 # good enough -TVD_PH_SEC - -# good enough -TVD_PH_SUBJ_META1 +TVD_DOLLARS_US # good enough TVD_SPACE_ENCODED -# good enough +# tflags net TVD_SPACE_RATIO_MINFP -# good enough +# tflags net TVD_SUBJ_NUM_OBFU_MINFP # tflags publish @@ -1940,9 +1868,6 @@ URI_ADOBESPARK # tflags publish URI_AZURE_CLOUDAPP -# good enough -URI_BUFFLY - # tflags publish URI_CLOUDFLAREIPFS @@ -2024,7 +1949,7 @@ URI_MALWARE_SCMS # tflags userconf URI_NOVOWEL -# tflags publish +# tflags net URI_ONLY_MSGID_MALF # tflags publish @@ -2057,7 +1982,7 @@ URI_WP_DIRINDEX # tflags net URI_WP_HACKED -# tflags publish +# tflags net URI_WP_HACKED_2 # tflags publish