# The following rules were borrowed from an older version of SA.
rawbody  __PGP_BEGIN		/^-----BEGIN PGP SIGNATURE-----$/
rawbody  __PGP_MIDDLE		/^[0-9A-Za-z+\/]{64}$/
rawbody  __PGP_END		/^-----END PGP SIGNATURE-----$/
meta     __PGP_SIGNATURE	(__PGP_BEGIN && __PGP_MIDDLE && __PGP_END)

# Prevent hits with Double forwards, or messages with attachments not parsed out.
rawbody  __FVGT_rb_ATTACHMENT	/Content-Disposition: attachment/i

# Core obfu rules, these are generated from multiple US dictionary files.
body  __FVGT_b_OBFU_J		/j[bcfgw]/i
body  __FVGT_b_OBFU_OTHER	/(vj|vk|xj|xk|yy|zf|zj)/i
body  __FVGT_b_OBFU_Q0		/[jkpqtvwz]q/i
body  __FVGT_b_OBFU_Q1		/q[afhjkmnsy]/i
body  __FVGT_b_OBFU_V		/[fgqw]v/i
body  __FVGT_b_OBFU_X		/[cgjkqsvz]x/i
body  __FVGT_b_OBFU_Z		/[fjkpqx]z/i

# Multiple occurances will lead to more points, idea taken from Jennifer (popcorn & backhair)
meta  __FVGT_m_MULTI_ODD2 ((__FVGT_b_OBFU_J + __FVGT_b_OBFU_OTHER + __FVGT_b_OBFU_Q0 + __FVGT_b_OBFU_Q1 + __FVGT_b_OBFU_V + __FVGT_b_OBFU_X + __FVGT_b_OBFU_Z) > 1)
meta  __FVGT_m_MULTI_ODD3 ((__FVGT_b_OBFU_J + __FVGT_b_OBFU_OTHER + __FVGT_b_OBFU_Q0 + __FVGT_b_OBFU_Q1 + __FVGT_b_OBFU_V + __FVGT_b_OBFU_X + __FVGT_b_OBFU_Z) > 2)
meta  __FVGT_m_MULTI_ODD4 ((__FVGT_b_OBFU_J + __FVGT_b_OBFU_OTHER + __FVGT_b_OBFU_Q0 + __FVGT_b_OBFU_Q1 + __FVGT_b_OBFU_V + __FVGT_b_OBFU_X + __FVGT_b_OBFU_Z) > 3)
meta  __FVGT_m_MULTI_ODD5 ((__FVGT_b_OBFU_J + __FVGT_b_OBFU_OTHER + __FVGT_b_OBFU_Q0 + __FVGT_b_OBFU_Q1 + __FVGT_b_OBFU_V + __FVGT_b_OBFU_X + __FVGT_b_OBFU_Z) > 4)

# Core meta rules, these combine multiple variations of above rules, with exceptions for Attachments and PGP sig's.
meta		FVGT_m_MULTI_ODD2	(__FVGT_m_MULTI_ODD2 && !__FVGT_rb_ATTACHMENT && !__PGP_SIGNATURE)
describe	FVGT_m_MULTI_ODD2	Contains multiple odd letter combinations
meta		FVGT_m_MULTI_ODD3	(__FVGT_m_MULTI_ODD3 && !__FVGT_rb_ATTACHMENT && !__PGP_SIGNATURE)
describe	FVGT_m_MULTI_ODD3	Contains multiple odd letter combinations
meta		FVGT_m_MULTI_ODD4	(__FVGT_m_MULTI_ODD4 && !__FVGT_rb_ATTACHMENT && !__PGP_SIGNATURE)
describe	FVGT_m_MULTI_ODD4	Contains multiple odd letter combinations
meta		FVGT_m_MULTI_ODD5	(__FVGT_m_MULTI_ODD5 && !__FVGT_rb_ATTACHMENT && !__PGP_SIGNATURE)
describe	FVGT_m_MULTI_ODD5	Contains multiple odd letter combinations

score  FVGT_m_MULTI_ODD2 1.1
score  FVGT_m_MULTI_ODD3 0.5
score  FVGT_m_MULTI_ODD4 0.5
score  FVGT_m_MULTI_ODD5 0.7


# SUBJECT RULES:
header		FVGT_s_OBFU_J		Subject =~ /j[bcfgw]/i
describe	FVGT_s_OBFU_J		FVGT - subject contains odd letter combination with J
header		FVGT_s_OBFU_OTHER	Subject =~ /(vj|vk|xj|xk|yy|zf|zj)/i
describe	FVGT_s_OBFU_OTHER	FVGT - subject contains odd letter combinations
header		FVGT_s_OBFU_Q0		Subject =~ /[jkpqtvwz]q/i
describe	FVGT_s_OBFU_Q0		FVGT - subject contains odd letter combination with Q
header		FVGT_s_OBFU_Q1		Subject =~ /q[afhjkmnsy]/i
describe	FVGT_s_OBFU_Q1		FVGT - subject contains odd letter combination with Q (2)
header		FVGT_s_OBFU_V		Subject =~ /[fgqw]v/i
describe	FVGT_s_OBFU_V		FVGT - subject contains odd letter combination with V
header		FVGT_s_OBFU_X		Subject =~ /[cgjkqsvz]x/i
describe	FVGT_s_OBFU_X		FVGT - subject contains odd letter combination with X
header		FVGT_s_OBFU_Z		Subject =~ /[fjkpqx]z/i
describe	FVGT_s_OBFU_Z		FVGT - subject contains odd letter combination with Z

score	FVGT_s_OBFU_J		0.3
score	FVGT_s_OBFU_OTHER	0.6
score	FVGT_s_OBFU_Q0		0.4
score	FVGT_s_OBFU_Q1		0.4
score	FVGT_s_OBFU_V		0.4
score	FVGT_s_OBFU_X		0.4
score	FVGT_s_OBFU_Z		0.4