promotions validated
git-svn-id: https://svn.apache.org/repos/asf/spamassassin/trunk@1917634 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/rules/active.list b/rules/active.list
index ff895fe..aca8ca2 100644
--- a/rules/active.list
+++ b/rules/active.list
@@ -191,7 +191,7 @@
# tflags publish
BITCOIN_IMGUR
-# tflags publish
+# tflags net
BITCOIN_MALWARE
# tflags publish
@@ -260,7 +260,7 @@
# good enough
BODY_SINGLE_URI
-# tflags publish
+# tflags net
BODY_URI_ONLY
# tflags publish
@@ -485,10 +485,10 @@
# tflags net
FORGED_SPF_HELO
-# tflags publish
+# tflags net
FORM_FRAUD
-# tflags publish
+# tflags net
FORM_FRAUD_3
# tflags publish
@@ -564,6 +564,9 @@
FROM_MISSP_MSFT
# good enough
+FROM_MISSP_PHISH
+
+# tflags net
FROM_MISSP_REPLYTO
# tflags net
@@ -773,6 +776,9 @@
# tflags publish
HAS_X_OUTGOING_SPAM_STAT
+# tflags net
+HDRS_LCASE
+
# good enough
HDRS_LCASE_IMGONLY
@@ -903,6 +909,9 @@
JH_SPAMMY_PATTERN02
# tflags net
+KHOP_FAKE_EBAY
+
+# tflags net
KHOP_HELO_FCRDNS
# tflags publish
@@ -950,6 +959,9 @@
# tflags publish
MALW_ATTACH
+# tflags net
+MANY_HDRS_LCASE
+
# tflags publish
MANY_SPAN_IN_TEXT
@@ -1142,6 +1154,9 @@
# good enough
PDS_FRNOM_TODOM_NAKED_TO
+# tflags net
+PDS_FROM_2_EMAILS
+
# good enough
PDS_FROM_NAME_TO_DOMAIN
@@ -1158,10 +1173,10 @@
PDS_OTHER_BAD_TLD
# good enough
-PDS_SHORT_SPOOFED_URL
+PDS_PRO_TLD
# good enough
-PDS_X_PHP_WELLKNOWN
+PDS_SHORT_SPOOFED_URL
# tflags publish
PHISH_ATTACH
@@ -1647,6 +1662,9 @@
SUBJ_BRKN_WORDNUMS
# tflags net
+SUBJ_UNNEEDED_HTML
+
+# tflags net
SURBL_BLOCKED
# good enough
@@ -1688,7 +1706,7 @@
# tflags publish
TO_EQ_FM_DIRECT_MX
-# good enough
+# tflags net
TO_EQ_FM_DOM_HTML_IMG
# tflags net
@@ -1736,9 +1754,12 @@
# good enough
TVD_SPACE_ENCODED
-# tflags net
+# good enough
TVD_SPACE_RATIO_MINFP
+# tflags net
+TVD_SUBJ_NUM_OBFU_MINFP
+
# tflags publish
TW_GIBBERISH_MANY
@@ -1913,7 +1934,7 @@
# good enough
URI_ONLY_LOW_CONTRAST
-# tflags publish
+# tflags net
URI_ONLY_MSGID_MALF
# tflags publish
@@ -1940,7 +1961,7 @@
# tflags publish
URI_WP_DIRINDEX
-# tflags publish
+# tflags net
URI_WP_HACKED
# tflags publish
