describe FROMSPAMCOP Message from spamcop@somedomain
score FROMSPAMCOP 3.5
-header SUBJECTSPAM subject =~ /\*\*\s*spam\s*\*\*/i
-describe SUBJECTSPAM Subject contains **spam**, so it's probably spam
+header SUBJECTSPAM subject =~ /(?:\*\*|\[)\s*spam\s*(?:\*\*|\])/i
+describe SUBJECTSPAM Subject contains **spam** or [spam], so it's probably spam
score SUBJECTSPAM 3.5
header MESBLOCKED subject =~ /your message (?:is )?blocked/i