+
+# formorer 2011-01-07
+header NYPOSTCARD subject =~ /New Year postcard/i
+describe NYPOSTCARD Enough New Year cards for 2011
+score NYPOSTCARD 4
+
+
+# don 2011-01-24
+header BIZZBOOSTER from =~ /bizzbooster/i
+describe BIZZBOOSTER From bizzbooster
+score BIZZBOOSTER 5
+
+# don 2011-09-22
+header QUOTAEXP subject =~ /mail\s+account(.+)quot[ae]\s+limit/
+describe QUOTAEXP Exceeded quota limit
+score QUOTAEXP 4
+
+# don 2011-09-22
+body SEOBODY /search\s+engine\s+traffic/
+describe SEOBODY Body contains SEO terms
+score SEOBODY 1
+
+header SEOSUBJECT subject =~ /\bseo\b/i
+describe SEOSUBJECT Subject contains SEO terms
+score SEOSUBJECT 1
+
+meta SEOMETA (SEOBODY && SEOSUBJECT)
+describe SEOMETA Matches both SEOBODY and SEOSUBJECT
+score SEOMETA 3
+
+body WEBINAR /webinar/i
+describe WEBINAR Contains webinar
+score WEBINAR 2
+
+
+header TRIALVERSION subject =~ /trial\s*version/i
+describe TRIALVERSION Trial version in subject
+score TRIALVERSION 3
+
+header SHARESPAM subject =~ /shared photos with you/i
+describe SHARESPAM shares photos
+score SHARESPAM 3
+
+header MYNAMEIS subject =~ /hello(.*)my name is/i
+describe MYNAMEIS Name spam
+score MYNAMEIS 2.5
+
+# formorer 2012-02-28
+header VOTREANN Subject =~ /(votre|Petites) annonce/i
+describe VOTREANN Votre annonce
+score VOTREANN 4
+
+# formorer 2010-01-23
+header LEXCHANGE subject =~ /(?:for|4)\s+L[i1]nks?\s+E?xcha?nge/i
+describe LEXCHANGE ask for link exchange
+score LEXCHANGE 4
+