# This is not spam - this is Bacn
# http://en.wikipedia.org/wiki/Bacn

# Bacn URI rules
uri		BACN_URI_001	/\/link\.php\?/
describe	BACN_URI_001	Bulk fingerprint
tflags		BACN_URI_001	nopublish

uri		BACN_URI_002	/\/tr\/index\.aspx\?id/
describe	BACN_URI_002	Bulk fingerprint
tflags		BACN_URI_002	nopublish

uri		BACN_URI_003	/\/u\.php\?p\=/
describe	BACN_URI_003	Bulk fingerprint
tflags		BACN_URI_003	nopublish


# Bacn header rules
header		BACN_X_001	exists:X-Mandrill-User
describe	BACN_X_001	Bulk fingerprint
tflags		BACN_X_001	nopublish

header		BACN_X_002	exists:X-Spread-CampaignId
describe	BACN_X_002	Bulk fingerprint
tflags		BACN_X_002	nopublish