| Rule | Description | Points |
| CLOUDMARK | Cloudmark detected spam | 10.001 |
| MSG_SNIFFER | Message Sniffer detected spam: http://kb.armresearch.com/index.php?title=Message_Sniffer | 0.001 |
| MSG_SNIFFER_1 | Non-existent code | 0.001 |
| MSG_SNIFFER_10 | Non-existent code | 0.001 |
| MSG_SNIFFER_11 | Non-existent code | 0.001 |
| MSG_SNIFFER_12 | Non-existent code | 0.001 |
| MSG_SNIFFER_13 | Non-existent code | 0.001 |
| MSG_SNIFFER_14 | Non-existent code | 0.001 |
| MSG_SNIFFER_15 | Non-existent code | 0.001 |
| MSG_SNIFFER_16 | Non-existent code | 0.001 |
| MSG_SNIFFER_17 | Non-existent code | 0.001 |
| MSG_SNIFFER_18 | Non-existent code | 0.001 |
| MSG_SNIFFER_19 | Non-existent code | 0.001 |
| MSG_SNIFFER_2 | Non-existent code | 0.001 |
| MSG_SNIFFER_20 | Non-existent code | 0.001 |
| MSG_SNIFFER_21 | Non-existent code | 0.001 |
| MSG_SNIFFER_22 | Non-existent code | 0.001 |
| MSG_SNIFFER_23 | Non-existent code | 0.001 |
| MSG_SNIFFER_24 | Non-existent code | 0.001 |
| MSG_SNIFFER_25 | Non-existent code | 0.001 |
| MSG_SNIFFER_26 | Non-existent code | 0.001 |
| MSG_SNIFFER_27 | Non-existent code | 0.001 |
| MSG_SNIFFER_28 | Non-existent code | 0.001 |
| MSG_SNIFFER_29 | Non-existent code | 0.001 |
| MSG_SNIFFER_3 | Non-existent code | 0.001 |
| MSG_SNIFFER_30 | Non-existent code | 0.001 |
| MSG_SNIFFER_31 | Non-existent code | 0.001 |
| MSG_SNIFFER_32 | Non-existent code | 0.001 |
| MSG_SNIFFER_33 | Non-existent code | 0.001 |
| MSG_SNIFFER_34 | Non-existent code | 0.001 |
| MSG_SNIFFER_35 | Non-existent code | 0.001 |
| MSG_SNIFFER_36 | Non-existent code | 0.001 |
| MSG_SNIFFER_37 | Non-existent code | 0.001 |
| MSG_SNIFFER_38 | Non-existent code | 0.001 |
| MSG_SNIFFER_39 | Non-existent code | 0.001 |
| MSG_SNIFFER_4 | Non-existent code | 0.001 |
| MSG_SNIFFER_40 | Non-existent code | 0.001 |
| MSG_SNIFFER_41 | Non-existent code | 0.001 |
| MSG_SNIFFER_42 | Non-existent code | 0.001 |
| MSG_SNIFFER_43 | Non-existent code | 0.001 |
| MSG_SNIFFER_44 | Non-existent code | 0.001 |
| MSG_SNIFFER_45 | Non-existent code | 0.001 |
| MSG_SNIFFER_46 | Non-existent code | 0.001 |
| MSG_SNIFFER_47 | All kinds of travel / vacation spam | 10.001 |
| MSG_SNIFFER_48 | All kinds of insurance quotes & spam | 10.001 |
| MSG_SNIFFER_49 | Norton System Works and/or McAfee push spam + variations on the them | 10.001 |
| MSG_SNIFFER_5 | Non-existent code | 0.001 |
| MSG_SNIFFER_50 | Cable/Sattelite descramblers, copy any DVD, warez | 10.001 |
| MSG_SNIFFER_51 | Email marketing services, bullet proof hosting, email databases | 10.001 |
| MSG_SNIFFER_52 | Online pharmacies, hgh, viagra, weight loss, no prescription needed | 10.001 |
| MSG_SNIFFER_53 | Scam patterns - Nigerian and variants + others such as fake eBay account verification requests | 10.001 |
| MSG_SNIFFER_54 | Pornography, Dating, organ augmentation. | 10.001 |
| MSG_SNIFFER_55 | Malware & Scumware Greetings | 10.001 |
| MSG_SNIFFER_56 | Ink, toner, printing supplies | 10.001 |
| MSG_SNIFFER_57 | Business opportunities, work at home offers, mlm, get rich on eBay, etc. | 10.001 |
| MSG_SNIFFER_58 | Refinance, Get out of debt and credit offers | 10.001 |
| MSG_SNIFFER_59 | Casino & Gaming / Sportsbook domains/links/promos | 10.001 |
| MSG_SNIFFER_6 | Non-existent code | 0.001 |
| MSG_SNIFFER_60 | Rules that have not yet been categorized or that don't fit in a category | 10.001 |
| MSG_SNIFFER_61 | Abstract patterns for spam structures | 10.001 |
| MSG_SNIFFER_62 | Patterns for obfuscation techniques | 10.001 |
| MSG_SNIFFER_63 | Received IPs from spamtraps & research | 10.001 |
| MSG_SNIFFER_7 | Non-existent code | 0.001 |
| MSG_SNIFFER_8 | Non-existent code | 0.001 |
| MSG_SNIFFER_9 | Non-existent code | 0.001 |