+header SUBJECTSPAM subject =~ /\*\*\s*spam\s*\*\*/i
+describe SUBJECTPSAM Subject contains **spam**, so it's probably spam
+score SUBJECTSPAM 3.5
+
+header MESBLOCKED subject =~ /your message (?:is )?blocked/i
+describe MESBLOCKED That's great that our message was blocked
+score MESBLOCKED 2
+
+header FAILDELIVERY subject =~ /failed to deliver/i
+describe FAILDELIVERY Oh noes! You failed to deliver spam!
+score FAILDELIVERY 2