X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fmisc_spam;h=b4df540f850e4ccc4e33d08aa91568d848eede01;hp=d6b80e659280ce98e9c894aa8e1fd1a29c75f3d9;hb=e9d517ac93e26ef8e16ae3083d961d1659818615;hpb=0f33974d7c9dbc4af1f5de396ad603bfd2575d9d

diff --git a/common/misc_spam b/common/misc_spam
index d6b80e6..b4df540 100644
--- a/common/misc_spam
+++ b/common/misc_spam
@@ -460,7 +460,7 @@ describe DOTNET		   .NET Spam
 score DOTNET 		   3
 
 # blarson 2010-02-02
-body REMBOX		/\b(?:rembox|disappear|stopping|delrem|remfiles?|exit)\s?\@/
+body REMBOX		/\b(?:rembo[xt]|disappear|stopping|delrem|remfiles?|exit|takemeoff|offthelist|purgefile)\s?\@/
 describe REMBOX		rembox
 score REMBOX		3
 
@@ -485,14 +485,14 @@ describe FROMCASINO	from casino
 score FROMCASINO	3
 
 # don 2010-06-10
-header CTOCTET_STREAM	ContentType =~ /octet-stream/i
+header CTOCTET_STREAM	Content-Type =~ /octet-stream/i
 describe CTOCTET_STREAM	Content type is octet-stream
 score CTOCTET_STREAM	0.5
 
-header RTF_ATTACH	ContentType =~ /name=.+\.rtf/i
+header RTF_ATTACH	Content-Type =~ /name=.+\.rtf/i
 describe RTF_ATTACH	Contains an RTF Attachment
 score RTF_ATTACH	0.5
 
 meta RTF_SPAM		CTOCTET_STREAM && RTF_ATTACH
 describe RTF_SPAM	Content type is octet-stream and has an RTF Attachment
-score RTF_SPAM		3
\ No newline at end of file
+score RTF_SPAM		3