tflags RCVD_IN_NIX1 net
score RCVD_IN_NIX1 1.5
+
+# blarson 2007-09-14
+uridnsbl URIBL_CNKR cn-kr.blackholes.us. A
+body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR')
+describe URIBL_CNKR china or korea hosted web site
+tflags URIBL_CNKR net
+score URIBL_CNKR 2.5
+
+# blarson 2007-09-14
+uridnsbl_skip_domain debian.org debian.net yahoo.com google.com
+
+# blarson 2007-09-14
+uridnsbl URIBL_SBL sbl.spamhaus.org. A
+body URIBL_SBL eval:check_uridnsbl('URIBL_SBL')
+describe URIBL_SBL Contains an URL listed in the SBL blocklist
+tflags URIBL_SBL net
+#reuse URIBL_SBL
+score URIBL_SBL 3.5
+
+# don 2008-03-24
+uridnsbl URIBL_SURBL multi.surbl.org. A
+body URIBL_SURBL eval:check_uridnsbl('URIBL_SURBL')
+describe URIBL_SURBL Contains an URL listed in the mutli surbl blocklist
+score URIBL_SURBL 3.5
+
describe FROMAD more penis spam
score FROMAD 4
-# blarson 2007-09-14
-uridnsbl URIBL_CNKR cn-kr.blackholes.us. A
-body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR')
-describe URIBL_CNKR china or korea hosted web site
-tflags URIBL_CNKR net
-score URIBL_CNKR 2.5
-
-# blarson 2007-09-14
-uridnsbl_skip_domain debian.org debian.net yahoo.com google.com
-
-# blarson 2007-09-14
-uridnsbl URIBL_SBL sbl.spamhaus.org. A
-body URIBL_SBL eval:check_uridnsbl('URIBL_SBL')
-describe URIBL_SBL Contains an URL listed in the SBL blocklist
-tflags URIBL_SBL net
-#reuse URIBL_SBL
-score URIBL_SBL 3.5
-
# blarson 2007-09-17
body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
describe MYCHEAP software spam