golden hour

/var/lib/spamassassin/3.004006/updates_spamassassin_org

File/Folder	Size	Actions
10_default_prefs.cf	8.56 KB
10_hasbase.cf	2.39 KB
20_advance_fee.cf	7.43 KB
20_aux_tlds.cf	44.85 KB
20_body_tests.cf	7.01 KB
20_compensate.cf	1.89 KB
20_dnsbl_tests.cf	10.3 KB
20_drugs.cf	15.16 KB
20_dynrdns.cf	11.15 KB
20_fake_helo_tests.cf	9.42 KB
20_freemail.cf	2.99 KB
20_freemail_domains.cf	40.53 KB
20_freemail_mailcom_domains.cf	4.32 KB
20_head_tests.cf	26.83 KB
20_html_tests.cf	10.79 KB
20_imageinfo.cf	5.18 KB
20_mailspike.cf	2.86 KB
20_meta_tests.cf	3.42 KB
20_net_tests.cf	1.84 KB
20_pdfinfo.cf	15.53 KB
20_phrases.cf	7.96 KB
20_porn.cf	2.01 KB
20_ratware.cf	16.48 KB
20_uri_tests.cf	5.9 KB
20_vbounce.cf	20.28 KB
23_bayes.cf	2.94 KB
25_accessdb.cf	1.51 KB
25_antivirus.cf	1.5 KB
25_arc.cf	1.76 KB
25_asn.cf	1.93 KB
25_dcc.cf	2.89 KB
25_dkim.cf	5.12 KB
25_dmarc.cf	2.46 KB
25_dnswl.cf	2.99 KB
25_pyzor.cf	1.49 KB
25_razor2.cf	3.09 KB
25_replace.cf	25.66 KB
25_spf.cf	4.3 KB
25_textcat.cf	1.73 KB
25_uribl.cf	19.53 KB
25_url_redirectors.cf	6.33 KB
25_url_shortener.cf	11.28 KB
30_text_de.cf	25.69 KB
30_text_fr.cf	19.34 KB
30_text_it.cf	1.82 KB
30_text_nl.cf	20.15 KB
30_text_pl.cf	16.85 KB
30_text_pt_br.cf	41.93 KB
50_scores.cf	37.27 KB
60_adsp_override_dkim.cf	9.12 KB
60_awl.cf	1.48 KB
60_bayes_stopwords.cf	14.73 KB
60_shortcircuit.cf	2.36 KB
60_txrep.cf	1.31 KB
60_welcomelist.cf	11.34 KB
60_welcomelist_auth.cf	74.76 KB
60_welcomelist_dkim.cf	10.83 KB
60_welcomelist_spf.cf	6.1 KB
60_welcomelist_subject.cf	3.82 KB
72_active.cf	523.43 KB
72_scores.cf	31.17 KB
73_sandbox_manual_scores.cf	4.26 KB
MIRRORED.BY	1.05 KB
STATISTICS-set0-72_scores.cf.txt	1.46 KB
STATISTICS-set1-72_scores.cf.txt	1.46 KB
STATISTICS-set2-72_scores.cf.txt	0 B
STATISTICS-set3-72_scores.cf.txt	0 B
languages	130.47 KB
local.cf	3.14 KB
regression_tests.cf	2.71 KB
sa-update-pubkey.txt	4.67 KB
user_prefs.template	1.87 KB

Edit: 20_mailspike.cf

# MailSpike is included in SpamAssassin 3.4+
if (version >= 3.004000)
ifplugin Mail::SpamAssassin::Plugin::DNSEval
## Spam sources
header __RCVD_IN_MSPIKE_B	eval:check_rbl('mspikeb-lastexternal', 'bl.mailspike.net.')
tflags __RCVD_IN_MSPIKE_B	net
reuse  __RCVD_IN_MSPIKE_B

## Ham sources
header __RCVD_IN_MSPIKE_L	eval:check_rbl('mspikeg-firsttrusted', 'wl.mailspike.net.')
tflags __RCVD_IN_MSPIKE_L	net
reuse  __RCVD_IN_MSPIKE_L

##### Reputation compensations
# Definitions - Bad senders
header __RCVD_IN_MSPIKE_Z	eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.2')
describe __RCVD_IN_MSPIKE_Z	Spam wave participant
tflags __RCVD_IN_MSPIKE_Z	net
reuse __RCVD_IN_MSPIKE_Z

header RCVD_IN_MSPIKE_L5	eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.10')
describe RCVD_IN_MSPIKE_L5	Very bad reputation (-5)
tflags RCVD_IN_MSPIKE_L5	net
reuse RCVD_IN_MSPIKE_L5

header RCVD_IN_MSPIKE_L4	eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.11')
describe RCVD_IN_MSPIKE_L4	Bad reputation (-4)
tflags RCVD_IN_MSPIKE_L4	net
reuse RCVD_IN_MSPIKE_L4

header RCVD_IN_MSPIKE_L3	eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.12')
describe RCVD_IN_MSPIKE_L3	Low reputation (-3)
tflags RCVD_IN_MSPIKE_L3	net
reuse RCVD_IN_MSPIKE_L3

header RCVD_IN_MSPIKE_L2	eval:check_rbl_sub('mspikeb-lastexternal', '127.0.0.13')
describe RCVD_IN_MSPIKE_L2	Suspicious reputation (-2)
tflags RCVD_IN_MSPIKE_L2	net
reuse RCVD_IN_MSPIKE_L2

# Definitions - Good senders
header RCVD_IN_MSPIKE_H5	eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.20')
describe RCVD_IN_MSPIKE_H5	Excellent reputation (+5)
tflags RCVD_IN_MSPIKE_H5	nice net
reuse RCVD_IN_MSPIKE_H5

header RCVD_IN_MSPIKE_H4	eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.19')
describe RCVD_IN_MSPIKE_H4	Very Good reputation (+4)
tflags RCVD_IN_MSPIKE_H4	nice net
reuse RCVD_IN_MSPIKE_H4

header RCVD_IN_MSPIKE_H3	eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.18')
describe RCVD_IN_MSPIKE_H3	Good reputation (+3)
tflags RCVD_IN_MSPIKE_H3	nice net
reuse RCVD_IN_MSPIKE_H3

header RCVD_IN_MSPIKE_H2	eval:check_rbl_sub('mspikeg-firsttrusted', '127.0.0.17')
describe RCVD_IN_MSPIKE_H2	Average reputation (+2)
tflags RCVD_IN_MSPIKE_H2	nice net
reuse RCVD_IN_MSPIKE_H2

# *_L and *_Z may overlap each other, so account for that
meta __RCVD_IN_MSPIKE_LOW	RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3
tflags __RCVD_IN_MSPIKE_LOW	net

meta RCVD_IN_MSPIKE_ZBI		__RCVD_IN_MSPIKE_Z && !__RCVD_IN_MSPIKE_LOW
tflags RCVD_IN_MSPIKE_ZBI	net

## Meta rules for aggregating good and bad senders
# Bad
meta RCVD_IN_MSPIKE_BL		RCVD_IN_MSPIKE_L5 || RCVD_IN_MSPIKE_L4 || RCVD_IN_MSPIKE_L3 || __RCVD_IN_MSPIKE_Z
describe RCVD_IN_MSPIKE_BL	Mailspike blocklisted
tflags RCVD_IN_MSPIKE_BL	net

# Good
meta RCVD_IN_MSPIKE_WL		RCVD_IN_MSPIKE_H5 || RCVD_IN_MSPIKE_H4 || RCVD_IN_MSPIKE_H3
describe RCVD_IN_MSPIKE_WL	Mailspike good senders
tflags RCVD_IN_MSPIKE_WL	nice net

endif
endif