# # 2010 Victor Ustugov # # https://www.emarsys.net/ # http://www.mce-ama.com/ ######################################## # http://www.verticalresponse.com/ - VerticalResponse - Email Marketing for Small Businesses # шлют с полем List-Unsubscribe тем, кто на лист не подписывался header VRESP_FROM From =~ /^\s*".+" <.+\@mail\.vresp\.com>$/ describe VRESP_FROM VerticalResponse header From score VRESP_FROM 2.0 header VRESP_REPLY_TO Reply-To =~ /^\s*".+" $/ describe VRESP_REPLY_TO VerticalResponse header Reply-To score VRESP_REPLY_TO 2.0 header VRESP_MSGID Message-ID =~ /^\s*<[\da-f]{10}-\S+=(\S+\.)+\S+\@mail\.vresp\.com>$/ describe VRESP_MSGID VerticalResponse header Message-ID score VRESP_MSGID 2.0 header VRESP_List_Unsubscribe List-Unsubscribe =~ /^\s*$/ describe VRESP_List_Unsubscribe VerticalResponse header List-Unsubscribe score VRESP_List_Unsubscribe 2.0 header VRESP_CONTENT_TYPE Content-Type =~ /^\s*multipart\/alternative;[\r\n\s]+boundary="__________MIMEboundary__________";[\r\n\s]+charset="UTF-8"$/ describe VRESP_CONTENT_TYPE Suspicious non-unique boundary in header Content-Type score VRESP_CONTENT_TYPE 2.5 # http://www.cooleremail.com/ - CoolerEmail 2.0 - E-mail Marketing Services (info@sitedesigner.com.ua) header CT_SUSP_BOUNDARY_CoolerEmail Content-Type =~ /boundary="============_?CoolerEmail_?============"/ describe CT_SUSP_BOUNDARY_CoolerEmail Suspicious non-unique boundary (DSPAM_autolearn) score CT_SUSP_BOUNDARY_CoolerEmail 2.5 tflags CT_SUSP_BOUNDARY_CoolerEmail mandatory_learn # http://www.flexmail.be - E-mail Marketing Services header FLEXMAIL_MSGID Message-ID =~ /\@flexmail\.be>/ describe FLEXMAIL_MSGID flexmail.be Message-ID score FLEXMAIL_MSGID 1.2 header FLEXMAIL_SENDER Return-path =~ /^\s*$/ describe FLEXMAIL_SENDER flexmail.be Return-Path score FLEXMAIL_SENDER 1.2 header FLEXMAIL_X_ENVELOPE_FROM X-Envelope-From =~ /^\s*$/ describe FLEXMAIL_X_ENVELOPE_FROM flexmail.be X-Envelope-From score FLEXMAIL_X_ENVELOPE_FROM 1.2 header FLEXMAIL_X_MAILER X-Mailer =~ /^\s*Flexmail/ describe FLEXMAIL_X_MAILER flexmail.be X-Mailer score FLEXMAIL_X_MAILER 1.2 header FLEXMAIL_X_Flexmail_ID X-Flexmail-ID =~ /./ describe FLEXMAIL_X_Flexmail_ID flexmail.be X-Flexmail-ID score FLEXMAIL_X_Flexmail_ID 1.2 # newsletter.si - E-mail marketing service header __NEWSLETTER_SI_Return_path Return-path =~ /^\s*$/ header __NEWSLETTER_SI_X_Envelope_From X-Envelope-From =~ /^\s*$/ meta NEWSLETTER_SI_Sender __NEWSLETTER_SI_Return_path || __NEWSLETTER_SI_X_Envelope_From describe NEWSLETTER_SI_Sender Message from newsletter.si score NEWSLETTER_SI_Sender 2.0 header NEWSLETTER_SI_RCVD Received =~ /from out\.newsletter\.si/ describe NEWSLETTER_SI_RCVD Message from out.newsletter.si score NEWSLETTER_SI_RCVD 2.0 header FROM_PROMOTION_MYPERSONAL From =~ /$/ describe FROM_PROMOTION_MYPERSONAL promotion@mypersonal.com.ua (DSPAM_autolearn) score FROM_PROMOTION_MYPERSONAL 5.0 tflags FROM_PROMOTION_MYPERSONAL mandatory_learn header FROM_OFFICE_MYPERSONAL From =~ /$/ describe FROM_OFFICE_MYPERSONAL office@mypersonal.com.ua (DSPAM_autolearn) score FROM_OFFICE_MYPERSONAL 5.0 tflags FROM_OFFICE_MYPERSONAL mandatory_learn # http://www.mailup.it/ # http://www.mailupnet.com/ - MailUp: professional e-mail marketing system for newsletter management # (www.emailsp.com) header MAILUP_X_Abuse X-Abuse =~ /^\s*Please report abuse here: http:\/\/postmaster\.mailup\.it$/ describe MAILUP_X_Abuse MailUp X-Abuse score MAILUP_X_Abuse 0.5 header MAILUP_List_Id List-Id =~ /^\s*<\d+\.\d+\.mailupid\.com>$/ describe MAILUP_List_Id MailUp List-Id score MAILUP_List_Id 0.5 header MAILUP_X_MailUp_Bounce X-MailUp-Bounce =~ /^\s*\d+:\d+:\d+:\d+:/ describe MAILUP_X_MailUp_Bounce MailUp X-MailUp-Bounce score MAILUP_X_MailUp_Bounce 0.5 header MAILUP_List_Unsubscribe List-Unsubscribe =~ /^\s*/ describe MAILUP_List_Unsubscribe MailUp List-Unsubscribe score MAILUP_List_Unsubscribe 0.5 header MAILUP_Message_ID Message-ID =~ /^\s*<(19[789]\d|20\d\d)(0\d|1[012])([012]\d|3[01])([0-5]\d)([0-5]\d)([0-5]\d)\d\d\d\d\.\d+\.\d+\.\d+\.\d+\@SQL5\.mailupid\.com>$/ describe MAILUP_Message_ID MailUp Message-ID score MAILUP_Message_ID 0.5