dns_available yes # Autoconfigured by cPanel - comment out this line or set to no to avoid future updates

required_score 5

# DaveC March 11th 2008.
use_bayes 0
#bayes_auto_expire 1
bayes_auto_expire 1
bayes_auto_learn 1
#bayes_expiry_days 14
#bayes_expiry_min_db_size 15000
bayes_expiry_max_db_size 150000
#bayes_expiry_scan_count 5000
bayes_ignore_header X-HostGator
bayes_journal_max_size 102400
bayes_learn_during_report 1
bayes_min_ham_num 200
bayes_min_spam_num 200
bayes_use_hapaxes 1
#lock_method type
#allow_user_rules 0
rbl_timeout 1
#dcc_timeout 5
#bayes_file_mode 0700
#auto_whitelist_file_mode 0700

# Raise RBL scores  - DavidN 3/20
score RCVD_IN_SBL 5
score RCVD_BY_IP 2
score DNS_FROM_AHBL_RHSBL 0
score RCVD_IN_SORBS_WEB 3
score RCVD_IN_SORBS_SMTP 3
score RCVD_IN_XBL 5
score RCVD_IN_SORBS_DUL 3
score URIBL_SBL 5
score RCVD_IN_PBL 5

#Disable njabl
score __RCVD_IN_NJABL 0
score RCVD_IN_NJABL_DUL 0
score RCVD_IN_NJABL_SPAM 0
score RCVD_IN_NJABL_MULTI 0
score RCVD_IN_NJABL_CGI 0
score RCVD_IN_NJABL_PROXY 0

#From ASO
score RCVD_IN_RP_CERTIFIED -0.5
score RCVD_IN_RP_SAFE -0.5
score BAD_CREDIT 1.5
score BAYES_00 -0.5
score BAYES_05 0
score BAYES_20 0
score BAYES_40 0.5
score BAYES_50 0.5
score BAYES_60 1.0
score BAYES_80 1.5
score BAYES_95 1.5
score BAYES_99 2.0
score BAYES_999 1.0
score DATE_IN_FUTURE_06_12 1.5
score DATE_IN_FUTURE_12_24 2.0
score DATE_IN_FUTURE_24_48 2.5
score DATE_IN_FUTURE_48_96 3.0
score DATE_IN_FUTURE_96_XX 3.0
score DATE_IN_PAST_06_12 1.5
score DATE_IN_PAST_12_24 2.0
score DATE_IN_PAST_24_48 2.5
score DATE_IN_PAST_96_XX 3.0
score DIET_1 1.5
score FORGED_MUA_OUTLOOK 3.0
score FREEMAIL_ENVFROM_END_DIGIT 0.5
score FREEMAIL_FROM 0.5
score FREEMAIL_REPLYTO_END_DIGIT 0.5
score FREEMAIL_FORGED_REPLYTO 1.0
score HK_RANDOM_ENVFROM 1.5
score HTML_SHORT_LINK_IMG_1 1.0
score HTML_IMAGE_ONLY_16 0.5
score LOTS_OF_MONEY 1.0
score MIME_BASE64_BLANKS 1.5
score RCVD_IN_BL_SPAMCOP_NET 3.0
score RCVD_IN_BRBL_LASTEXT 3.0
score RCVD_IN_DNSWL_HI -2.0
score RCVD_IN_DNSWL_LOW -0.5
score RCVD_IN_DNSWL_MED -1.0
score RCVD_IN_DNSWL_NONE 0.5
score RCVD_IN_MSPIKE_H5 -1.5
score RCVD_IN_MSPIKE_H4 -1.0
score RCVD_IN_MSPIKE_H3 -0.75
score RCVD_IN_MSPIKE_H2 -0.50
score RCVD_IN_MSPIKE_WL -0.75
score RCVD_IN_PSBL 3.0
score RCVD_IN_RP_RNBL 3.0
score RCVD_IN_SORBS_BLOCK 2.5
score RCVD_IN_SORBS_HTTP 2.5
score RCVD_IN_SORBS_SOCKS 2.5
score RCVD_IN_SORBS_ZOMBIE 2.5
score RDNS_NONE 3.0
score SPF_FAIL 0.5
score SPF_PASS -0.5
score SUBJ_ALL_CAPS 1.5
score SUBJECT_DIET 1.5
score SUBJECT_FUZZY_TION 2.0
score T_FILL_THIS_FORM_SHORT 1.0
score T_HTML_ATTACH 0.5
score TO_NO_BRKTS_NORDNS 2.5
score TVD_RCVD_IP 1.0
score TVD_APPROVED 1.5
score URIBL_AB_SURBL 3.0
score URIBL_BLACK 4.0
score URIBL_DBL_SPAM 3.0
score URIBL_GREY 1.0
score URIBL_RED 3.0
score URIBL_RHS_ABUSE 3.0
score URIBL_RHS_BOGUSMX 3.0
score URIBL_RHS_DOB 3.0
score URIBL_RHS_DSN 3.0
score URIBL_RHS_POST 3.0
score URIBL_RHS_TLD_WHOIS 3.0
score URIBL_RHS_WHOIS 3.0
score URIBL_SBL_A 3.0
score URIBL_SC_SURBL 3.0
score UNPARSEABLE_RELAY 0.5
score RAZOR2_CHECK 2.5
score DRUGS_ERECTILE 3.0

use_pyzor 0
# use_pyzor 1
# pyzor_options --homedir /etc/mail/spamassassin
# pyzor_timeout 10
# score PYZOR_CHECK 2.5

#loadplugin Mail::SpamAssassin::Plugin::ResourceLimits
#resource_limit_mem 268435456

score FH_DATE_PAST_20XX 0.0
use_razor2 0

ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
if can(Mail::SpamAssassin::Plugin::URIDNSBL::has_tflags_domains_only)

urirhsbl       URIBL_BESO    rblurl.websitewelcome.com. A
body           URIBL_BESO    eval:check_uridnsbl('URIBL_BESO')
describe       URIBL_BESO    Contains an URL listed in the URIBL blacklist
tflags         URIBL_BESO    net domains_only
score          URIBL_BESO    3.0

endif # if can
endif # ifplugin


header LOCAL_BAD_FROM From =~ /\.diet>?$|\.click>?$|\.download>?$|\.review>?$|\.work>?$|\.top>?$|\.xyz>?$/i
score LOCAL_BAD_FROM  3.0

## Odd capitalization ###
header          FROM_UPPER_LOWER       FROM =~ /[[:upper:]][[:lower:]][[:upper:]][[:lower:]][[:upper:]]/
score           FROM_UPPER_LOWER       2.5
describe        FROM_UPPER_LOWER       From Spam

header          FROM_LOWER_UPPER       FROM =~ /[[:lower:]][[:upper:]][[:lower:]][[:upper:]][[:lower:]]/
score           FROM_LOWER_UPPER       2.5
describe        FROM_LOWER_UPPER       From Spam

header          DOMAIN_UPPERCASE       FROM =~ /\@([[:upper:]]{3})/
score           DOMAIN_UPPERCASE       2.5
describe        DOMAIN_UPPERCASE       Domain caps

### Odd symbols and punctuation ###
header          FROM_PERCENT           FROM =~ /\%/i
score           FROM_PERCENT           1.5
describe        FROM_PERCENT           From Percent Spam

header          __FROM_QUESTION        FROM =~ /\?/
header          __FROM_EXCLAMATION     FROM =~ /\!/
header          __FROM_DOLLARSIGN      FROM =~ /\$/
meta            FROM_PUNCTUATION       ( __FROM_QUESTION || __FROM_EXCLAMATION || __FROM_DOLLARSIGN )
score           FROM_PUNCTUATION       2.5
describe        FROM_PUNCTUATION       From Punctuation

header          FROM_NUMBERS           FROM =~ /\d\s/
score           FROM_NUMBERS           1.5
describe        FROM_NUMBERS           Numbers in From Field

header          FROM_SPLAT             FROM =~ /\S+\*\S+/i
score           FROM_SPLAT             2.5
describe        FROM_SPLAT             has * in FROM

header          CHAR_PERIODS           FROM =~ /\w+\.\w+\.\w+\.\w+/i
score           CHAR_PERIODS           2.0
describe        CHAR_PERIODS           Too Many Periods

## Score known bad sender regions ##
header          RELAYCOUNTRY_CN X-Relay-Countries =~ /CN/
describe        RELAYCOUNTRY_CN Relayed through China
score           RELAYCOUNTRY_CN 4.0

header          RELAYCOUNTRY_RU X-Relay-Countries =~ /RU/
describe        RELAYCOUNTRY_RU Relayed through Russian Federation
score           RELAYCOUNTRY_RU 3.5

header          RELAYCOUNTRY_UA X-Relay-Countries =~ /UA/
describe        RELAYCOUNTRY_UA Relayed through Ukraine
score           RELAYCOUNTRY_UA 3.5

## Score known bad X-Mailer's ##
header          DP_PHPMAILER X-Mailer =~ /PHPMailer/
describe        DP_PHPMAILER "Sent with PHPMailer"
score           DP_PHPMAILER 2.5

# dns_available yes # Autoconfigured by cPanel - comment out this line or set to no to avoid future updates