ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
mimeheader	AXB_MH_APPHTML	Content-Type =~ /^application\/html/
describe	AXB_MH_APPHTML	Mime header fingerprint
tflags		AXB_MH_APPHTML	publish
endif

header		__AXB_HAS_AMAVISD_PORT	Received =~ /\(amavisd-new\, port\b/
header		__AXB_BY_8B8		Received =~ /\bby [a-f0-9]{8}\./
meta		AXB_XRCVD_8B8	(__AXB_HAS_AMAVISD_PORT && __AXB_BY_8B8)
describe	AXB_XRCVD_8B8	8x8 is better than 4x4

header		AXB_XM_DMAILER		X-Mailer =~ /^DietMailer\b/
describe	AXB_XM_DMAILER		Fingerprint

header		AXB_XSA_PXYEX		X-Source-Args =~ /\/usr\/sbin\/proxyexec/
describe	AXB_XSA_PXYEX		Fingerprint

uri		AXB_URI_CDGB		/\/\?cid\=gib/
describe	AXB_URI_CDGB		Do not mistake with CBGB

header		AXB_XM_SMSMTP		X-Mailer =~ /^SayMailSMTP\b/
describe	AXB_XM_SMSMTP		Fingerprint

header		AXB_RCVD_NS1GOO		Received =~ /from ns1\.google\.com\b/
describe	AXB_RCVD_NS1GOO		Fingerprint

header		AXB_RCVD_NS1HUS		Received =~ /from ns1\.hushmail\.com\b/
describe	AXB_RCVD_NS1HUS		Fingerprint

header          AXB_X_FF_SEZ_S		X-Forefront-Antispam-Report =~ /\bSFV\:SPM\b/
describe        AXB_X_FF_SEZ_S		Forefront sez this is spam

rawbody		AXB_RBDY_TENANDTEN	/\&\#1088\;\&\#1092\;/
describe	AXB_RBDY_TENANDTEN	Ten & Ten

# 2012-09-27
header          __AXB_XM_OL_2600  X-Mailer =~ /Microsoft\ Outlook\ Express\ 6\.00\.2600\.0000/
header          __AXB_MO_OL_2600  X-MimeOLE =~ /Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2600\.0000/
meta            AXB_XM_FORGED_OL2600    (__AXB_XM_OL_2600  && !__AXB_MO_OL_2600 )
describe        AXB_XM_FORGED_OL2600     Forged OE v. 6.2600


# 2012-01-04
header          AXB_X_AOL_SEZ_S         x-aol-global-disposition =~ /^S$/
describe        AXB_X_AOL_SEZ_S         AOL said this is S*


header          AXB_HELO_HOME_UN        X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\w+\.(lan|home) /i
describe        AXB_HELO_HOME_UN        HELO from home  - untrusted