-header FAX_ATTACHMENT subject =~ /you have received fax/i
-describe FAX_ATTACHMENT Interfax spam subject
-score FAX_ATTACHMENT 4
+header FAX_SUBJECT subject =~ /fax/i
+describe FAX_SUBJECT Interfax spam subject
+score FAX_SUBJECT 1
+
+meta FAX_ATTACHMENT ZIPFILE && FAX_SUBJECT && INTERFAX
+describe FAX_ATTACHMENT Interfax fax attachment
+score FAX_ATTACHMENT 10
+