header LYMBOO from =~ /\@lymboomail/
describe LYMBOO lymboomail learning spam
score LYMBOO 5
+
+# formorer 2015-05-14
+header LEARDINI from =~ /\@leardinigroup.com/
+describe LEARDINI Microbiologia (SIM) spam
+score LEARDINI 5
+
+# don 2015-10-28
+header INTERFAX from =~ /\@interfax.net/
+describe INTERFAX Interfax spam
+score INTERFAX 5
+
+# don 2015-10-28
+header FAX_SUBJECT subject =~ /fax/i
+describe FAX_SUBJECT Interfax spam subject
+score FAX_SUBJECT 1
+
+meta FAX_ATTACHMENT ZIPFILE && FAX_SUBJECT && INTERFAX
+describe FAX_ATTACHMENT Interfax fax attachment
+score FAX_ATTACHMENT 10
+