# blarson 2007-07-27
header MIXEDBDN Content-Type =~ /multipart\/mixed\;.*boundary\=\"\-{4,}\d{4,}\"/
describe MIXEDBDN more pdf spam
-score MIXEDBDN 3
+score MIXEDBDN 1
# blarson 2007-07-28
header DOTZIP subject =~ /\d\.zip\b/
describe XMSATT more pdf spam
score XMSATT 2
+# blarson 2007-10-27
+body ICQ /^icq\:/i
+describe ICQ icq:
+score ICQ 2
+# blarson 2007-11-02
+header XJ2ID X-J2Id =~ /\d+/
+describe XJ2ID fax bounce
+score XJ2ID 4
+
+# blarson 2007-11-15
+header LONGWORD subject =~ /\b[\w\d]{30,}/i
+describe LONGWORD long word in subject
+score LONGWORD 2