pts rule name              description
---- ---------------------- --------------------------------------------------
 0.4 X_PRIORITY_HIGH        Sent with 'X-Priority' set to high
 2.3 X_IP                   Message has X-IP header
 4.5 MIME_BOUND_DD_DIGITS   Spam tool pattern in MIME boundary
 4.4 MSGID_SPAM_CAPS        Spam tool Message-Id: (caps variant)
-0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
 4.1 FROM_ILLEGAL_CHARS     From: has too many raw illegal characters
-0.0 SPF_PASS               SPF: sender matches SPF record
 4.3 SUBJ_ILLEGAL_CHARS     Subject: has too many raw illegal characters
 2.4 DATE_IN_FUTURE_96_XX   Date: is 96 hours or more after Received: date
 1.6 HEAD_ILLEGAL_CHARS     Headers have too many raw illegal characters
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
 0.5 HTML_40_50             BODY: Message is 40% to 50% HTML
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.2 DNS_FROM_RFC_ABUSE     RBL: Envelope sender in abuse.rfc-ignorant.org
 1.4 DNS_FROM_RFC_WHOIS     RBL: Envelope sender in whois.rfc-ignorant.org
 0.7 RCVD_IN_NJABL_PROXY    RBL: NJABL: sender is an open proxy
                            [85.25.66.92 listed in combined.njabl.org]
 1.5 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is a abuseable web server
                            [85.25.66.92 listed in dnsbl.sorbs.net]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [71.140.58.58 listed in dnsbl.sorbs.net]
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                 [Blocked - see <http://www.spamcop.net/bl.shtml?85.25.66.92>]
 3.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: av-hot.net jojo521.com]
 4.5 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: jojo521.com]
 4.1 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: jojo521.com iii666.net]
 3.0 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: av-hot.net jojo521.com iii666.net]
 3.7 RCVD_DOUBLE_IP_SPAM    Bulk email fingerprint (double IP) found
 2.7 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
 1.1 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
 2.5 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
 0.0 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME parts
 1.6 MISSING_MIMEOLE        Message has X-MSMail-Priority, but no X-MimeOLE
 2.1 REPTO_QUOTE_YAHOO      Yahoo! doesn't do quoting like this
 3.7 FORGED_MSGID_YAHOO     Message-ID is forged, (yahoo.com)
 0.8 MANY_EXCLAMATIONS      Subject has many exclamations
 4.1 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook