uri AXB_URI_CDGB /\/\?cid\=gib/ describe AXB_URI_CDGB Do not mistake with CBGB header AXB_X_FF_SEZ_S X-Forefront-Antispam-Report =~ /\bSFV\:SPM\b/ describe AXB_X_FF_SEZ_S Forefront sez this is spam rawbody AXB_RBDY_TENANDTEN /\&\#1088\;\&\#1092\;/ describe AXB_RBDY_TENANDTEN Ten & Ten # 2012-09-27 header __AXB_XM_OL_2600 X-Mailer =~ /Microsoft\ Outlook\ Express\ 6\.00\.2600\.0000/ header __AXB_MO_OL_2600 X-MimeOLE =~ /Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2600\.0000/ meta AXB_XM_FORGED_OL2600 (__AXB_XM_OL_2600 && !__AXB_MO_OL_2600 ) describe AXB_XM_FORGED_OL2600 Forged OE v. 6.2600 # 2012-01-04 header AXB_X_AOL_SEZ_S x-aol-global-disposition =~ /^S$/ describe AXB_X_AOL_SEZ_S AOL said this is S*