+header FROMABUSE from =~ /\babbuse\@/i
+describe FROMABUSE Message from abbuse@somedomain
+score FROMEABUSE 1.5
+
+header SUBJECTSPAM subject =~ /\*\*\s*spam\s*\*\*/i
+describe SUBJECTPSAM Subject contains **spam**, so it's probably spam
+score SUBJECTSPAM 3.5