promotions validated
git-svn-id: https://svn.apache.org/repos/asf/spamassassin/trunk@1920971 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/rules/active.list b/rules/active.list
index 6731b45..eb550fb 100644
--- a/rules/active.list
+++ b/rules/active.list
@@ -194,7 +194,7 @@
# tflags publish
BITCOIN_IMGUR
-# tflags publish
+# tflags net
BITCOIN_MALWARE
# tflags publish
@@ -488,7 +488,7 @@
# tflags publish
FORM_FRAUD
-# tflags publish
+# tflags net
FORM_FRAUD_3
# tflags publish
@@ -572,13 +572,16 @@
# good enough
FROM_MISSP_PHISH
-# good enough
+# tflags net
FROM_MISSP_REPLYTO
# tflags net
FROM_MISSP_SPF_FAIL
# good enough
+FROM_MISSP_TO_UNDISC
+
+# good enough
FROM_MISSP_USER
# tflags net
@@ -735,9 +738,6 @@
GB_HASHBL_BTC
# tflags publish
-GB_STORAGE_GOOGLE_EMAIL
-
-# tflags publish
GOOGLE_DOCS_PHISH
# tflags publish
@@ -785,6 +785,9 @@
# tflags publish
HAS_X_OUTGOING_SPAM_STAT
+# tflags net
+HDRS_LCASE
+
# tflags publish
HDRS_MISSP
@@ -881,7 +884,7 @@
# tflags publish
HTML_SHRT_CMNT_OBFU_MANY
-# tflags publish
+# tflags net
HTML_SINGLET_MANY
# tflags net
@@ -903,7 +906,7 @@
JH_SPAMMY_PATTERN02
# tflags net
-KHOP_HELO_FCRDNS
+KHOP_FAKE_EBAY
# tflags publish
LINKEDIN_IMG_NOT_RCVD_LNKN
@@ -950,6 +953,9 @@
# tflags publish
MALW_ATTACH
+# tflags net
+MANY_HDRS_LCASE
+
# tflags publish
MANY_SPAN_IN_TEXT
@@ -1109,12 +1115,6 @@
# good enough
PDS_BTC_MSGID
-# good enough
-PDS_FRNOM_TODOM_NAKED_TO
-
-# good enough
-PDS_FROM_NAME_TO_DOMAIN
-
# tflags net
PDS_HELO_SPF_FAIL
@@ -1566,6 +1566,9 @@
SUBJ_LACKS_WORDS
# tflags net
+SUBJ_UNNEEDED_HTML
+
+# tflags net
SURBL_BLOCKED
# good enough
@@ -1608,9 +1611,18 @@
TO_EQ_FM_DIRECT_MX
# tflags net
+TO_EQ_FM_DOM_HTML_IMG
+
+# tflags net
+TO_EQ_FM_DOM_HTML_ONLY
+
+# tflags net
TO_EQ_FM_DOM_SPF_FAIL
# tflags net
+TO_EQ_FM_HTML_ONLY
+
+# tflags net
TO_EQ_FM_SPF_FAIL
# tflags publish
@@ -1628,7 +1640,7 @@
# tflags publish
TO_NO_BRKTS_HTML_ONLY
-# good enough
+# tflags net
TO_NO_BRKTS_MSFT
# tflags publish
@@ -1652,9 +1664,12 @@
# good enough
TVD_SPACE_ENCODED
-# good enough
+# tflags net
TVD_SPACE_RATIO_MINFP
+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
# tflags publish
TW_GIBBERISH_MANY
@@ -1847,10 +1862,7 @@
# tflags userconf
URI_NOVOWEL
-# good enough
-URI_ONLY_LOW_CONTRAST
-
-# tflags publish
+# tflags net
URI_ONLY_MSGID_MALF
# tflags publish
