The values can change from day to day, but the current values (as of TRUSIGN_TRUMAIN_12_URL_20110317004249_FULL) are:
contains viagra: 3
Invalid MailFrom (Forged Routing Domain): 25
Forged "From:" email address: 6
Identical "To" and "From" Address: 8
Cool, thanks for the info. I've seen readmes (at times) for the various TRUSIGN releases - is there a human readable version of the various settings in a TRU update available?