PKG-SNF-CS-WIN/plusORF/snf-groups.cf

## Basic rules for detecting Message Sniffer header emissions
## so that they can be given scores in subsequent SpamAssassin
## scanning. Modify the scores and headers as needed for your
## system.

score    SNF_IPTRUNCATE     10
describe SNF_IPTRUNCATE     IP Source consistently sends spam
header   SNF_IPTRUNCATE     X-MessageSniffer-Scan-Result =~ /20/

score    SNF_IPCAUTION      3
describe SNF_IPCAUTION      New IP source mixed scan results
header   SNF_IPCAUTION      X-MessageSniffer-Scan-Result =~ /40/

score    SNF_IPBLACK        4
describe SNF_IPBLACK        Static IP rules and GBUdb Black
header   SNF_IPBLACK        X-MessageSniffer-Scan-Result =~ /63/

score    SNF_OBFUSCATION    5
describe SNF_OBFUSCATION    Obfuscation detection
header   SNF_OBFUSCATION    X-MessageSniffer-Scan-Result =~ /62/

score    SNF_ABSTRACT       5
describe SNF_ABSTRACT       Abstracted spam patterns
header   SNF_ABSTRACT       X-MessageSniffer-Scan-Result =~ /61/

score    SNF_GENERAL        5
describe SNF_GENERAL        General spam content - unclassified
header   SNF_GENERAL        X-MessageSniffer-Scan-Result =~ /60/

score    SNF_GAMBLE         5
describe SNF_GAMBLE         Gambling and Casino spam patterns
header   SNF_GAMBLE         X-MessageSniffer-Scan-Result =~ /59/

score    SNF_DEBT           5
describe SNF_DEBT           Debt and Credit offer spam patterns
header   SNF_DEBT           X-MessageSniffer-Scan-Result =~ /58/

score    SNF_GETRICH        5
describe SNF_GETRICH        Home Biz, Stock Push, get rich quick
header   SNF_GETRICH        X-MessageSniffer-Scan-Result =~ /57/

score    SNF_TONER          5
describe SNF_TONER          Ink and Toner offer spam patterns
header   SNF_TONER          X-MessageSniffer-Scan-Result =~ /56/

score    SNF_MALWARE        5
describe SNF_MALWARE        Virus, worm, and exploit patterns
header   SNF_MALWARE        X-MessageSniffer-Scan-Result =~ /55/

score    SNF_ADULT          5
describe SNF_ADULT          Porn and Adult spam patterns
header   SNF_ADULT          X-MessageSniffer-Scan-Result =~ /54/

score    SNF_SCAM           5
describe SNF_SCAM           Phishing, 419, and other scam patterns
header   SNF_SCAM           X-MessageSniffer-Scan-Result =~ /53/

score    SNF_SNAKEOIL       5
describe SNF_SNAKEOIL       Drugs, diet aids, health scams
header   SNF_SNAKEOIL       X-MessageSniffer-Scan-Result =~ /52/

score    SNF_SPAMWARE       5
describe SNF_SPAMWARE       Spamming tools and spam hosting offers
header   SNF_SPAMWARE       X-MessageSniffer-Scan-Result =~ /51/

score    SNF_DATATHEFT      5
describe SNF_DATATHEFT      Movies, software, unlimited downloads
header   SNF_DATATHEFT      X-MessageSniffer-Scan-Result =~ /50/

score    SNF_AVPUSH         5
describe SNF_AVPUSH         Antivirus software push
header   SNF_AVPUSH         X-MessageSniffer-Scan-Result =~ /49/

score    SNF_INSURANCE      5
describe SNF_INSURANCE      Insurance offer patterns
header   SNF_INSURANCE      X-MessageSniffer-Scan-Result =~ /48/

score    SNF_TRAVEL         5
describe SNF_TRAVEL         Travel offer patterns
header   SNF_TRAVEL         X-MessageSniffer-Scan-Result =~ /47/