# SARE Header Abuse Ruleset for SpamAssassin -- Revision History / Change Log # Version: 01.03.15 # Created: 2004-04-25 # Modified: 2005-08-06 # Usage instructions and documentation in 70_sare_header0.cf # Full Revision History / Change Log in 70_sare_header.log # 01.03.00: Added archival file to collection # Added English-specific file to collection # Added "Not for SA 2.64" and "Not for SA 3.0.x" files # Modified scores based on recent masschecks; moved rules from file to file # Deleted some rules that no longer work. # Merged rules from ratware.cf # Split regex SARE_HEAD_SPAM into multiple exists:$header rules # 01.03.01: Added some history # 01.03.02: Message-Id rules changed to MESSAGEID rules. # Moved an HTML rule to the HTML rule set # Minor score tweaks based on recent mass-checks # 01.03.03: Added to file 0: SARE_HEAD_SUBJ_RAND, SARE_RECV_IP_203177, SARE_RECV_IP_211216, SARE_RECV_IP_218085, SARE_RECV_ISWEST, # SARE_RECV_SKANOVA, SARE_RECV_TRADVALUES, SARE_RECV_VIRTUACOMBR, SARE_XMAIL_PSSMAILER, # SARE_MULT_VIA_CITIZNET, SARE_FROM_DLL # Added to file 1: SARE_HEAD_HDR_XIDKEY, SARE_RECV_IP_061187, SARE_RECV_IP_219128, SARE_RECV_BEZEQINT, SARE_BOUNDARY_MULTB # 01.03.04: Added to file 0: SARE_RECV_IP_200150, SARE_RECV_IP_195229 # Removed from 1: SARE_HEAD_HDR_XCOMMNT, for reworking # Minor score tweaks based on recent mass-checks # 01.03.05: Added to file 0: SARE_FROM_DVDCOPY # Added to file 1: SARE_HEAD_HDR_XENC, SARE_HEAD_XCOM_RFCMIN, SARE_BOUNDARY_QZSOFT # Moved newly obsolete rules to archive file # Minor score tweaks based on recent mass-checks # Moved rules from one file to another to reflect changing spam rates # 01.03.06: Added exception to SARE_FROM_FREE # Added to file 0: SARE_RECV_IP_083146 # Minor score tweaks based on recent mass-checks # Moved rules from one file to another to reflect changing spam rates # 01.03.07: Modified SARE_TOCC_MULT_BIGFT* family to provide only single score to headers # Replaced __RATWARE_0_TZ_DATE for __SARE_MULT_RATW_01B # Replaced __AOL_FROM for __SARE_FROM_AOL # Replaced __SARE_MSGID_ALL_CAPS with MSGID_SPAM_CAPS # Adjusted score for SARE_BOUNDARY_D12 to avoid over-scoring with MIME_BOUND_DIGITS_15 in 3.0 # Adjusted score for SARE_MSGID_SUSP2 to avoid over-scoring MSGID_SPAM_ALPHA_NUM # Added SARE_HEAD_MOZ_IDKEY, SARE_HEAD_MOZ_DRAFT to file 0. # Added SARE_FROM_DEBT, SARE_FROM_SPACE2 to file 1. # Minor score tweaks based on recent mass-checks # Moved rules from one file to another to reflect changing spam rates # 01.03.08: Removed bezeqint, traditionalvalues, and mediaways from SARE_RECV_SPAM_DOMN0a, virtua.com.br from SARE_RECV_SPAM_DOMN02 # Added file 0: SARE_RECV_BEZEQINT_B, SARE_TOCC_BCC_MANY, SARE_FROM_PAYPAL_INV, SARE_FREE_WEBM_COMWALL, SARE_FROM_SUPPORT_DIG, # SARE_FREE_WEBM_LAPOSTE, SARE_FREE_WEBM_LATINML, SARE_FREE_WEBM_NETCITY, SARE_RECV_FREESERVE, SARE_RECV_MDNETCOMBR, # SARE_RECV_PATMEDIA, SARE_RECV_RANDOM, SARE_RECV_XACTRIX, SARE_RECV_IP_061072, SARE_RECV_IP_066017, SARE_RECV_IP_066111, # SARE_RECV_IP_081019, SARE_RECV_IP_083028, SARE_RECV_IP_140117, SARE_RECV_IP_192116, SARE_RECV_IP_218216, # SARE_RECV_IP_222126, SARE_RECV_IP_220168, SARE_REPLY_XACTRIX, SARE_XMAIL_RLSP, SARE_RECV_IP_218088, SARE_RECV_IP_219248, # SARE_RECV_IP_064192, SARE_XMAIL_TTBOARD, SARE_HEAD_XMF_AUTHSNDR, SARE_FROM_AMERICA, SARE_FROM_PRINTER, SARE_RECV_VIPLIST, # SARE_XMAIL_RANDMAILER, SARE_HELO_YAHOO, SARE_RECV_FEP5 # Added file 1: SARE_FROM_QUOTE # Added file 2: SARE_RECV_IP_004078, SARE_RECV_IP_066114a, SARE_RECV_IP_066114b, SARE_RECV_IP_206131 # Replaced SARE_RECV_IP_218079 with SARE_RECV_IP_218078 # Modified SARE_RECV_SPAM_DOMN81 # Replaced SARE_HEAD_HDR_XCANITP with SARE_HEAD_XCANIT1 and added SARE_HEAD_XCANIT2 # Minor score tweaks based on recent mass-checks # Moved rules from one file to another to reflect changing spam rates # 01.03.09: Score tweaks based on recent mass-checks # Added to archive file for testing: SARE_HEAD_TOCC_LEN1 SARE_HEAD_TOCC_LEN2 # Added to archive file for testing: SARE_HEAD_XBEEN2 # Added to file 0: SARE_BOUNDARY_10 # Added to file 0: SARE_BOUNDARY_11 # Added to file 0: SARE_BOUNDARY_12 # Added to file 0: SARE_BOUNDARY_13 # Added to file 0: SARE_CONTENT_BITBITNUM # Added to file 0: SARE_FROM_SPAM_PL1 # Added to file 0: SARE_HEAD_8BIT_DATE SARE_HEAD_8BIT_RECV SARE_HEAD_8BIT_SPAM # Added to file 0: SARE_HEAD_DATE14 SARE_HEAD_DATE46 # Added to file 0: SARE_HEAD_LOC_INV1 # Added to file 0: SARE_MULT_SEXCLUB # Added to file 0: SARE_RECV_IP_222032 # Added to file 1: SARE_FREE_WEBM_USACOPS # Added to file 1: SARE_HEAD_DATE18 SARE_HEAD_DATE39 # Added to file 1: SARE_HEAD_ORG_PREFIXW # Added to file 1: SARE_HELO_EQ_CUST SARE_HELO_EQ_DSL_3 SARE_HELO_EQ_PPPOE # Added to file 1: SARE_XMAIL_DYNAMAILER # Added to file 1: SARE_XMAIL_GDI # Added to file 1: SARE_RECV_RND_NUMBER SARE_RECV_RND_DATE # Added to file 2: SARE_HEAD_XPRI_RNDNUM SARE_HEAD_MSMPR_RNDSTR SARE_HEAD_CONT_RNDCONT SARE_HEAD_DATE_RNDDATE SARE_HEAD_TOCC_DEFHNDL # Added to file 3: SARE_HEAD_DATE61 # Added to file 4: SARE_XMAIL_RANDMAILER2 # Archived from file 1: SARE_HEAD_HDR_XAUTOGN # Archived from file 1: SARE_HEAD_HDR_XCCDIAG # Archived from file 1: SARE_HEAD_HDR_XMLFILT # Archived from file 1: SARE_HELO_MAIL # Archived from file 2: SARE_HEAD_HDR_XACWGHT # Archived from file 2: SARE_HEAD_HDR_XMCAVTP # Archived from file 2: SARE_USERAG_Dig # Archived from file 3: SARE_HEAD_HDR_XUNOLOOK # Enhanced SARE_HEAD_MIME_PROD with contributions from Eric Fagan and Loren Wilton # Modified: SARE_XMAIL_SUSP3 # Moved from file 0 to 1: SARE_FREE_WEBM_Jpop # Moved from file 0 to 1: SARE_FREE_WEBM_NETCITY # Moved from file 0 to 1: SARE_FREE_WEBM_ZCom03 # Moved from file 0 to 1: SARE_FROM_DEBT # Moved from file 0 to 1: SARE_FROM_DVDCOPY # Moved from file 0 to 1: SARE_FROM_PRINTER # Moved from file 0 to 1: SARE_FROM_SPAM_CHAR0 # Moved from file 0 to 1: SARE_FROM_SUPPORT_DIG (after mod to remove ham) # Moved from file 0 to 1: SARE_HEAD_HDR_APPROV # Moved from file 0 to 1: SARE_HEAD_HDR_CONVWLS # Moved from file 0 to 1: SARE_HEAD_HDR_DISCREC # Moved from file 0 to 1: SARE_HEAD_HDR_XENC # Moved from file 0 to 1: SARE_HEAD_HDR_XENVID # Moved from file 0 to 1: SARE_HEAD_HDR_XMAILID # Moved from file 0 to 1: SARE_HEAD_HDR_XTID # Moved from file 0 to 1: SARE_HELO_YAHOO # Moved from file 0 to 1: SARE_MSGID_LONG # Moved from file 0 to 1: SARE_MULT_VIA_CITIZNET # Moved from file 0 to 1: SARE_RECV_IP_066111 # Moved from file 0 to 1: SARE_RECV_IP_081019 # Moved from file 0 to 1: SARE_RECV_IP_082154 # Moved from file 0 to 1: SARE_RECV_IP_195229 # Moved from file 0 to 1: SARE_RECV_IP_200150 # Moved from file 0 to 1: SARE_RECV_IP_218216 # Moved from file 0 to 1: SARE_RECV_IP_222000 # Moved from file 0 to 1: SARE_RECV_IP_222126 # Moved from file 0 to 1: SARE_RECV_SPAM_DOMN02 # Moved from file 0 to 1: SARE_RECV_SPAM_DOMN0a # Moved from file 0 to 1: SARE_RECV_VIRTUACOMBR # Moved from file 0 to 1: SARE_XMAIL_PSSMAILER # Moved from file 0 to 1: SARE_XMAIL_RLSP # Moved from file 0 to 3: SARE_TOCC_BCC_MANY # Moved from file 1 to 2: SARE_HEAD_HDR_EPATH # Moved from file 1 to 2: SARE_HEAD_HDR_XAR # Moved from file 1 to 2: SARE_HEAD_HDR_XNOSPAM # Moved from file 1 to 3: SARE_FROM_QUOTE # Moved from file 1 to 3: SARE_FROM_SPACE2 # Moved from file 1 to 3: SARE_MSGID_EMPTY # Moved from file 1 to 3: SARE_RECV_SPAM_DOMN81 # Moved from file 1 to 4: SARE_RECV_SPAM_NAME0 # Moved from file 2 to 0: SARE_FREE_WEBM_ZZa001 # Moved from file 2 to 0: SARE_FROM_VIRUS1 # Moved from file 2 to 0: SARE_RECV_IP_004078 # Moved from file 2 to 0: SARE_RECV_IP_038112147 # Moved from file 2 to 0: SARE_RECV_IP_066114a and 066114b # Moved from file 2 to 0: SARE_RECV_IP_206131 # Moved from file 2 to 1: SARE_FROM_SPAM_WORD2 # Moved from file 2 to 1: SARE_HEAD_HDR_AUTSUBD # Moved from file 2 to 1: SARE_HEAD_HDR_MSGTYPE # Moved from file 2 to 1: SARE_HEAD_HDR_XESINSR # Moved from file 2 to 1: SARE_HEAD_HDR_XRMDTXT # Moved from file 2 to 1: SARE_HEAD_ORIG_RECIP # Moved from file 2 to 1: SARE_MULT_VIA_FWCATS # Moved from file 2 to 1: SARE_RECV_IP_212164 # Moved from file 3 to 1: SARE_FROM_AMERICA (after minor modification) # Moved from file 3 to 2: SARE_FROM_SPAM_NAME0 # Moved from file 4 to 0: SARE_RECV_IP_062023 # Moved from file 4 to 0: SARE_RECV_IP_063111025 # Moved from file 4 to 0: SARE_RECV_IP_207182 # Moved from file 4 to 1: SARE_RECV_IP_065205157 # Moved from file 4 to 1: SARE_RECV_IP_142046 # Renamed SARE_FROM_UK2NET2 to SARE_RECV_UK2NET2 # Replaced file 1: SARE_MSGID_LONG35 with series of rules in files 1 and 0. # Returned to file 1 from archive: SARE_FREE_WEBM_Etapaal # Returned to file 1 from archive: SARE_FREE_WEBM_Hknet # Returned to file 1 from archive: SARE_HEAD_XORIP_IP # Temporarily archived for modification and testing: SARE_FROM_SPAM_WORD0 # Temporarily archived for modification and testing: SARE_MSGID_2Kdd # Temporarily archived for modification and testing: SARE_REPLY_SPAMWORD0 # Temporarily archived for modification and testing: SARE_TOCC_COMBO1 # 01.03.10: Mar 12 2005 # Added to file 0: SARE_XMAIL_GOMAIL # Added to file 0: SARE_HEAD_HDR_XRIPE # Moved from file 0 to 1: SARE_FREE_WEBM_NetSafe # Moved from file 0 to 1: SARE_FREE_WEBM_ZCom02 # Moved from file 0 to 1: SARE_RECV_SKANOVA # Moved from file 0 to 1: SARE_RECV_IP_061050 # Moved from file 0 to 1: SARE_RECV_IP_140117 # Moved from file 0 to 1: SARE_RECV_IP_211216 # Moved from file 0 to 1: SARE_TO_EMPTY # Moved from file 0 to 1: SARE_HEAD_8BIT_SPAM # Moved from file 1 to 0: SARE_HELO_SERVER # File 3: Renamed SARE_RECV_SPAM_DOMN3 to SARE_RECV_INFOSAT # 01.03.11: May 21 2005 # Minor score updates based on additional mass-check # Added file 1: SARE_RECV_IP_066248154 # Added file 1: SARE_RECV_IP_069060096 # Added file 1: SARE_RECV_IP_163125 # Added to file 0: SARE_FROM_DRUGS # Added to file 0: SARE_FROM_WEBM_ERESMAS # Added to file 0: SARE_HEAD_BAT_WEB # Added to file 0: SARE_HEAD_BDY_BOUNCES # Added to file 0: SARE_HEAD_HDR_XSPAMTST # Added to file 0: SARE_RECV_IP_063106130 # Added to file 0: SARE_RECV_IP_066165224 # Added to file 0: SARE_RECV_IP_070096177 # Added to file 0: SARE_RECV_IP_071004246 # Added to file 0: SARE_RECV_IP_072034096 # Added to file 0: SARE_RECV_IP_208048182 # Added to file 0: SARE_XMAIL_DIRUNIV # Added to file 0: SARE_XMAIL_PHPBulkEmai # Archived file 0: SARE_BOUNDARY_D8 # Archived file 0: SARE_HEAD_HDR_XCONTAC # Archived file 0: SARE_RECV_IP_066114b # Archived file 1: SARE_FREE_WEBM_Etapaal # Archived file 1: SARE_FREE_WEBM_Hknet # Archived file 1: SARE_FREE_WEBM_LbPlugg # Archived file 1: SARE_HEAD_HDR_XACTFRM # Archived file 1: SARE_HEAD_HDR_XENVID # Archived file 1: SARE_RECV_IP_064080 # Archived file 2: SARE_HEAD_HDR_XRELAIP # Archived file 3: SARE_FREE_WEBM_ZIt001 # Archived file 3: SARE_HEAD_HDR_XID # Archived file 3: SARE_HEAD_HDR_XMDSNTO # Archived file 3: SARE_HEAD_HDR_XREF # From archive to file 0: SARE_MSGID_HEX30 # From archive to file 1: SARE_HEAD_HDR_XCCDIAG # From archive to file 1: SARE_RECV_IP_211049 # From archive to file 3: SARE_HEAD_HDR_XUNOLOOK # From archive to file 3: SARE_XMAIL_BULK5 # From archive to file 4: SARE_RECV_IP_211104 # Moved from file 0 to 1: SARE_BOUNDARY_05 # Moved from file 0 to 1: SARE_BOUNDARY_06 # Moved from file 0 to 1: SARE_FREE_WEBM_ZZa001 # Moved from file 0 to 1: SARE_FROM_CAPS_MSN # Moved from file 0 to 1: SARE_FROM_NUM_9DIG # Moved from file 0 to 1: SARE_FROM_SPAM_DOMN0 # Moved from file 0 to 1: SARE_FROM_SPAM_PL1 # Moved from file 0 to 1: SARE_HEAD_8BIT_DATE # Moved from file 0 to 1: SARE_HEAD_8BIT_NOSPM # Moved from file 0 to 1: SARE_HEAD_DATE14 # Moved from file 0 to 1: SARE_HEAD_DATE_5L # Moved from file 0 to 1: SARE_HEAD_HDR_XLISTAD # Moved from file 0 to 1: SARE_HEAD_HDR_XRIPE # Moved from file 0 to 1: SARE_HEAD_HDR_XWTID # Moved from file 0 to 1: SARE_HEAD_HDR_XWTVERS # Moved from file 0 to 1: SARE_HELO_SERVER # Moved from file 0 to 1: SARE_MSGID_D1D1D2D16 # Moved from file 0 to 1: SARE_RECV_BEZEQINT_B # Moved from file 0 to 1: SARE_RECV_IP_061072 # Moved from file 0 to 1: SARE_RECV_IP_061190 # Moved from file 0 to 1: SARE_RECV_IP_061228 # Moved from file 0 to 1: SARE_RECV_IP_062023 # Moved from file 0 to 1: SARE_RECV_IP_192116 # Moved from file 0 to 1: SARE_RECV_IP_203177 # Moved from file 0 to 1: SARE_RECV_IP_218078 # Moved from file 0 to 1: SARE_RECV_IP_221124 # Moved from file 0 to 1: SARE_RECV_IP_222064 # Moved from file 0 to 1: SARE_RECV_ISWEST # Moved from file 0 to 1: SARE_RECV_PATMEDIA # Moved from file 0 to 2: SARE_BOUNDARY_NP2 # Moved from file 0 to 2: SARE_CONTENT_BITBITNUM # Moved from file 0 to 2: SARE_FROM_VIRUS1 # Moved from file 0 to 2: SARE_HEAD_HDR_JLH # Moved from file 0 to 2: SARE_HEAD_HDR_RTNPATH # Moved from file 0 to 2: SARE_MULT_RATW_03 # Moved from file 0 to 2: SARE_RECV_IP_064192191 # Moved from file 1 to 0: SARE_HEAD_HDR_XBBOUNC # Moved from file 1 to 0: SARE_HEAD_HDR_XGMAILA # Moved from file 1 to 0: SARE_HEAD_HDR_XMAILTH # Moved from file 1 to 0: SARE_HEAD_HDR_XMLRSRV # Moved from file 1 to 0: SARE_HEAD_HDR_XRMDTXT # Moved from file 1 to 0: SARE_HEAD_HDR_XRSPCID # Moved from file 1 to 0: SARE_HEAD_HDR_XRSPUSR # Moved from file 1 to 0: SARE_HEAD_HDR_XSMTPSV # Moved from file 1 to 0: SARE_HEAD_HDR_XUMAIL # Moved from file 1 to 0: SARE_HELO_MAILUSER # Moved from file 1 to 0: SARE_RECV_CHAR_CARAT # Moved from file 1 to 2: SARE_FROM_AST # Moved from file 1 to 2: SARE_HEAD_HDR_CONVWLS # Moved from file 1 to 2: SARE_HEAD_HDR_ROT # Moved from file 1 to 2: SARE_HEAD_HDR_XCNDINF # Moved from file 1 to 2: SARE_HEAD_HDR_XESINSR # Moved from file 1 to 2: SARE_HEAD_HDR_XMEBDOM # Moved from file 1 to 2: SARE_HEAD_HDR_XSUBID # Moved from file 1 to 2: SARE_HELO_AOLID # Moved from file 1 to 2: SARE_MSGID_H7H4H4 # Moved from file 1 to 2: SARE_RECV_CHAR_DSHDT # Moved from file 1 to 2: SARE_TOCC_SPAMWORD0 # Moved from file 1 to 2: SARE_XMAIL_GDI # Moved from file 1 to 3: SARE_FREE_WEBM_LAPOSTE # Moved from file 1 to 3: SARE_FROM_DEBT # Moved from file 1 to 3: SARE_FROM_DLL # Moved from file 1 to 3: SARE_FROM_NUM_8DIG # Moved from file 1 to 3: SARE_FROM_NUM_HOTML # Moved from file 1 to 3: SARE_FROM_SUPPORT_DIG # Moved from file 1 to 3: SARE_HEAD_HDR_XMSGID # Moved from file 1 to 3: SARE_HEAD_HDR_XRETURN # Moved from file 1 to 3: SARE_HEAD_HDR_XSYSTEM # Moved from file 1 to 3: SARE_HEAD_MOZ_DRAFT # Moved from file 1 to 3: SARE_HELO_EQ_CUST # Moved from file 1 to 3: SARE_MSGID_ALL_LC # Moved from file 1 to 3: SARE_MSGID_LONG # Moved from file 1 to 3: SARE_MSGID_LONG45 # Moved from file 1 to 3: SARE_MULT_LCASE_X2 # Moved from file 1 to 3: SARE_RECV_IP_064152200 # Moved from file 1 to 3: SARE_RECV_IP_080032 # Moved from file 1 to 3: SARE_RECV_IP_161053 # Moved from file 1 to 3: SARE_RECV_IP_222126 # Moved from file 1 to 3: SARE_RECV_MANYMX # Moved from file 1 to 3: SARE_XMAIL_LCDD # Moved from file 1 to 4: SARE_MSGID_RATWARE1 # Moved from file 1 to 4: SARE_XMAIL_SUSP1 # Moved from file 1 to 4: SARE_XMAIL_SUSP2 # Moved from file 1 to eng: SARE_CHARSET_W1251 # Moved from file 1 to eng: SARE_FROM_CHAR_W1251 # Moved from file 2 to 0: SARE_BOUNDARY_02 # Moved from file 2 to 0: SARE_HEAD_HDR_XBNCETR # Moved from file 2 to 0: SARE_HEAD_HDR_XWCMID # Moved from file 2 to 1: SARE_HEAD_DATE_RNDDATE # Moved from file 2 to 1: SARE_HEAD_HDR_X400RCV # Moved from file 2 to 1: SARE_HEAD_HDR_XEMGBMS # Moved from file 2 to 1: SARE_HEAD_MSMPR_RNDSTR # Moved from file 2 to 1: SARE_MSGID_SPAM_DOMN0 # Moved from file 2 to 4: SARE_BOUNDARY_D2 # Moved from file 3 to 1: SARE_MSGID_D5D7 # Moved from file 3 to 2: SARE_HEAD_HDR_XRBLTST # Moved from file 3 to 2: SARE_HEAD_HDR_XSAFMMI # Moved from file 3 to 4: SARE_FROM_SPACE2 # Moved from file 3 to 4: SARE_MSGID_EMPTY # Moved from file 3 to 4: SARE_RECV_SPAM_DOMN81 # Moved from file 4 to 0: SARE_RECV_IP_066063 # Replaced file 0: SARE_RECV_IP_071004200 replaces SARE_RECV_IP_071004246 # 01.03.12: May 27 2005 # correcting revision history. # Moved from file 0 to 1: SARE_RECV_IP_083028 # Moved from file 0 to 1: SARE_FROM_MULTI_DASH # 01.03.13: June 11 2005 # Minor score updates based on additional mass-check # Updated maintainer email address # Added file 0: SARE_HEAD_XM4 # Added file 0: SARE_HEAD_XUNSENT # Added file 0: SARE_HEAD_XWORD # Added file 0: SARE_MULT_FROM # Added file 0: SARE_MULT_SUBJ # Added file 0: SARE_RECVPORTHELO_1, _2, and _3 # Added file 0: SARE_RECV_IP_203210128 # Added file 0: SARE_RECV_IP_206248152 # Added file 0: SARE_RECV_IP_216055133 # Added file 0: SARE_RECV_LOCALHOST # Added file 1: SARE_FREE_WEBM_SERV # Added file 1: SARE_RECV_IP_216022 # Archived: SARE_FREE_WEBM_BRNNET # Archived: SARE_RECV_IP_064080 # Moved file 0 to file 1: SARE_BOUNDARY_D10 # Moved file 0 to file 1: SARE_HEAD_HDR_XMAILTH # Moved file 0 to file 1: SARE_HEAD_HDR_XMLRSRV # Moved file 0 to file 1: SARE_HEAD_HDR_XSMTPSV # Moved file 0 to file 1: SARE_HEAD_HDR_XUMAIL # Moved file 0 to file 1: SARE_MSGID_LONG50 # Moved file 0 to file 1: SARE_RECV_SPAM_DOMN04 # Moved file 0 to file 1: SARE_XMAIL_GOMAIL # Moved file 1 to file 3: SARE_FREE_WEBM_CZSEZNA # Moved file 1 to file 3: SARE_FROM_MULTI_DASH # Moved file 1 to file 3: SARE_HEAD_DATE18 # Moved file 1 to file 3: SARE_HEAD_DATE39 # Moved file 1 to file 3: SARE_HEAD_DATE39 # Moved file 1 to file 3: SARE_HEAD_DATE_ADDED # Moved file 1 to file 3: SARE_MSGID_LONG40 # Moved file 1 to file 3: SARE_MSGID_LONG55 # Moved file 1 to file 3: SARE_MULT_VIA_FWCATS # Moved file 1 to file 3: SARE_RECV_ISWEST # 01.03.14: July 2 2005 # Added file 0: SARE_HEAD_MIME_INVALID # Added file 0: SARE_RECV_IP_069050210 # Added file 1: SARE_HEAD_8BIT_SPAM # Added file 1: SARE_XMAIL_XMAIL # Modified SARE_FROM_DRUGS, Added SARE_FROM_DRUGS2 to file 1. %%% # Moved file 0 to file 1: SARE_HEAD_8BIT_RECV # Moved file 0 to file 1: SARE_RECV_FEP5 # Moved file 0 to file 1: SARE_RECV_IP_203210128 # Moved file 0 to file 1: SARE_RECV_SPAM_DOMN06 #@@# 01.03.15 August 6 2005 #@@# Minor score updates based on additional mass-check #@@# Added file 3: SARE_HEAD_HDR_XKRNL #@@# Added file 3: SARE_HEAD_HDR_XSEQ #@@# Added to file 0: SARE_HEAD_HDR_XSIDPRA #@@# Added to file 0: SARE_HEAD_HDR_XSIDRES #@@# Added to file 0: SARE_HEAD_THRD_ALNUM #@@# Added to file 0: SARE_RECV_IP_208053011 #@@# Added to file 0: SARE_XMAIL_FNORD #@@# Added to file 0: SARE_XMAIL_INTERMED #@@# Added to file 0: SARE_XMAIL_TOLMAIL #@@# Archived from file 3: SARE_HEAD_DATE18 #@@# Archived from file 3: SARE_RECV_IP_080028 #@@# Archived from file 3: SARE_RECV_IP_083146 #@@# Archived from file 3: SARE_RECV_IP_161053 #@@# Moved file 0 to file 1: SARE_FREE_WEBM_ZCom05 #@@# Moved file 0 to file 1: SARE_HEAD_XUNSENT #@@# Moved file 0 to file 1: SARE_RECV_IP_069050210 #@@# Moved file 0 to file 1: SARE_RECV_IP_206131 #@@# Moved file 0 to file 1: SARE_RECV_IP_206248152 #@@# Moved file 0 to file 1: SARE_RECV_PORTHELO_1, 2, 3 #@@# Moved file 0 to file 3: SARE_RECV_CHAR_CARAT #@@# Moved file 0 to file 3: SARE_RECV_SPAM_DOMN03 #@@# Moved file 1 to file 0: SARE_HEAD_HDR_XUOLSRV #@@# Moved file 1 to file 2: SARE_FROM_AMERICA #@@# Moved file 1 to file 2: SARE_HEAD_SUBJ_RAND #@@# Moved file 1 to file 2: SARE_HEAD_XORIP_IP #@@# Moved file 1 to file 2: SARE_MSGID_06D6 #@@# Moved file 1 to file 2: SARE_RECV_IP_142046 #@@# Moved file 1 to file 2: SARE_RECV_IP_212164 #@@# Moved file 1 to file 3: SARE_BOUNDARY_MULTB #@@# Moved file 1 to file 3: SARE_FROM_NUM_9DIG #@@# Moved file 1 to file 3: SARE_FROM_PRINTER #@@# Moved file 1 to file 3: SARE_HEAD_8BIT_NOSPM #@@# Moved file 1 to file 3: SARE_HEAD_8BIT_SPAM #@@# Moved file 1 to file 3: SARE_HEAD_HDR_XCCDIAG #@@# Moved file 1 to file 3: SARE_HEAD_HDR_XMAILTH #@@# Moved file 1 to file 3: SARE_HEAD_HDR_XSMTPSV #@@# Moved file 1 to file 3: SARE_HEAD_HDR_XUMAIL #@@# Moved file 1 to file 3: SARE_HELO_SERVER #@@# Moved file 1 to file 3: SARE_MSGID_LONG35 #@@# Moved file 1 to file 3: SARE_MSGID_LONG65 #@@# Moved file 1 to file 3: SARE_MSGID_LONG75 #@@# Moved file 1 to file 3: SARE_RECV_IP_066111 #@@# Moved file 1 to file 3: SARE_RECV_SPAM_DOMN03 #@@# Moved file 1 to file 3: SARE_RECV_SUSP_3 #@@# Moved file 1 to file 3: SARE_XMAIL_XMAIL #@@# Moved file 2 to file 1: SARE_BOUNDARY_NP2 #@@# Moved file 2 to file 1: SARE_FROM_SPAM_NAME0 #@@# Moved file 2 to file 1: SARE_HEAD_HDR_XMEBDOM #@@# Moved file 2 to file 1: SARE_HEAD_HDR_XSAFMMI #@@# Moved file 2 to file 1: SARE_HEAD_HDR_XSAFMMI #@@# Moved file 2 to file 1: SARE_XMAIL_GDI # License: Artistic - see http://www.rulesemporium.com/license.txt # Current Maintainer: Bob Menschel - RMSA@Menschel.net # Current Home: http://www.rulesemporium.com/rules/70_sare_header.log # EOF