# Add your own customisations to this file.  See 'man Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
# 

required_hits		5

subject_tag	[SPAM]
report_header 1
use_terse_report 0
defang_mime 0

ok_languages fr en es de

whitelist_from  *@securityfocus.com
whitelist_from  infolist@digitalbusiness.fr
whitelist_from  *@hermes.sun.com
whitelist_from info@fuckedcompany.com
whitelist_from infosecurity@reedexpo.co.uk
whitelist_from *bitpipe.com*
whitelist_from *@xmr3.com

score FORGED_GW05_RCVD               3.000
score FORGED_AOL_RCVD                4.000
score FORGED_JUNO_RCVD               3.000
score FORGED_RCVD_TRAIL              3.000
score FORGED_HOTMAIL_RCVD            3.000
score FORGED_RCVD_FOUND              3.000
score FORGED_EBAY_RCVD               3.000
score FORGED_YAHOO_RCVD				 3.000
score MISSING_OUTLOOK_NAME           3.000

score NIGERIAN_TRANSACTION_2         1.250
score NIGERIAN_TRANSACTION_1         1.000
score KOREAN_UCE_SUBJECT             2.084
score ONLY_COST                      1.211
score FROM_ENDS_IN_NUMS              1.893
score HTTP_USERNAME_USED			 3.000
score MISSING_HEADERS				 2.500
score HTML_FONT_COLOR_RED            2.315
score CALL_FREE                      2.202
score PLING_PLING                    1.763
score CASHCASHCASH                   2.994
score SUBJ_FREE_CAP					 2.000
score WEB_BUGS                       4.000
score BASE64_ENC_TEXT                3.000

body N419SCAM_1         /Abacha/i
describe N419SCAM_1     Mentions Abacha, likely to be a Nigerian 419 scam
score N419SCAM_1        2

body N419SCAM_2         /BUSINESS PROPOSAL/i
describe N419SCAM_2     Mentions BUSINESS PROPOSAL, likely a Nigerian 419 scam
score N419SCAM_2        1.333

body N419SCAM_3         /URGENT BUSINESS RELATIONSHIP/i
describe N419SCAM_3     Mentions URGENT BUSINESS RELATIONSHIP, likely a 419
score N419SCAM_3        1.333

body N419SCAM_4         /Works and Housing/i
describe N419SCAM_4     Mentions Works and Housing, likely a Nigerian 419 scam
score N419SCAM_4        2

body N419SCAM_5         /IMMEDIATE ASSISTANCE/i
describe N419SCAM_5     Mentions IMMEDIATE ASSISTANCE, likely a 419 scam
score N419SCAM_5        1.333

body N419SCAM_6         /(?:Laurent|Joseph) Kabila/i
describe N419SCAM_6     Mentions Kabila, likely to be a Nigerian 419 scam
score N419SCAM_6        2

body N419SCAM_7         /NNPC/
describe N419SCAM_7     Mentions NNPC, likely to be a Nigerian 419 scam
score N419SCAM_7        2

body N419SCAM_8         /CONFIDENTIAL/i
describe N419SCAM_8     Mentions CONFIDENTIAL, likely a Nigerian 419 scam
score N419SCAM_8        1.333

body N419SCAM_9         /URGENT AND CONFIDENTIAL/i
describe N419SCAM_9     Mentions URGENT AND CONFIDENTIAL, likely a 419 scam
score N419SCAM_9        1.333

body N419SCAM_10         /URGENT ASSISTANCE/i
describe N419SCAM_10     Mentions URGENT ASSISTANCE, likely a 419 scam
score N419SCAM_10        3.333

body N419SCAM_11         /LAGOS NIGERIA/i
describe N419SCAM_11     Mentions LAGOS NIGERIA, likely a 419 scam
score N419SCAM_11        3.333

body N419SCAM_12		 /President Robert Mugabe/i
describe N419SCAM_12	 Mentions President Robert Mugabe, likely a 419 scam
score N419SCAM_12        3.333

header N419SCAM_13		 Subject =~ /business assistance/i
describe N419SCAM_13	 Mentions 'business assistance' in the subject
score N419SCAM_13		 2.0

header SUBJ_GIVE_AWAY	 Subject =~ /Give Away/i
describe SUBJ_GIVE_AWAY	 Mentions 'Give Away' in the subject
score SUBJ_GIVE_AWAY	 2.5

header SUBJ_WE_OWN_YOU_MONEY	Subject =~ /We own you money/i
describe SUBJ_WE_OWN_YOU_MONEY	Mentions 'We own you money' in the subject
score SUBJ_WE_OWN_YOU_MONEY		2.5

header CHARSET_CHINESE		Content-Type =~ /charset="GB2312"/i
describe CHARSET_CHINESE	Message uses character set 'GB2312' (Chinese)
score CHARSET_CHINESE		2.500