#testrules
header SMF_BRACKETS_TO To:raw =~ /<<[^<>]+>>/
describe SMF_BRACKETS_TO Double-brackets around To header address
score SMF_BRACKETS_TO 0.01

rawbody SMF_HIDDEN_TEXT /<font color="white">[^<]{50,}<\/font>/i
describe SMF_HIDDEN_TEXT Text hidden inside <font> tag
score SMF_HIDDEN_TEXT 0.01

rawbody SMF_SPAMSIG_1 /<br><center><a href="http:\/\/\S+\/(\S+)\.htm"><img src="http:\/\/\S+\/images\/(\1)\.gif" border="0"><\/a><\/center>/i
describe SMF_SPAMSIG_1 Signature seen in mainsleze spam
score SMF_SPAMSIG_1 0.01