Loss of connectivity hurts us all. Spam hurts us all even more.
#------------------------------------------------------------------------------
# Format is /regexp/flags or /regexp/flags!/regexp/flags where regexp
# is a POSIX 1003.2 regular expression and flags are
# i: toggle ignore case (REG_ICASE - default is to ignore case)
# x: toggle extended expression (REG_EXTENDED - default is extended)
# m: toggle multiline mode (REG_NEWLINE - default is non-multiline mode)
#
# In order for a line to match, the first regexp must match, and the
# second (if present) must not match.
# The first matching line wins, terminating processing of the ruleset.
#------------------------------------------------------------------------------
#------------------------------------------------------------------------------
# NOTE: This file is a copy, the master is on 'magic'
#------------------------------------------------------------------------------
# 2000/05/04 the `ILOVEYOU' viruses and friends
/^Subject:.*ILOVEYOU/ REJECT
/^Subject:.*fwd: Joke/ REJECT
/^Subject:.*Important Message From/ REJECT
/^Subject:.*Mother\'s Day Order Confirmation/ REJECT
/^Subject:.*virus alert.*/ REJECT
/^Subject:.*dangerous Virus Warning/ REJECT
/^Subject:.*Susitikim.*/ REJECT
# 2000/07/23 Long Date: lines trigger a bug in MS OutLook
#/^Date:.{60,}$/ REJECT
# 2001/02/06 Snowhite spam
/^Subject:.*Snowhite and the Seven Dwarfs.*/ REJECT
# 2007/02/12 ??
/^Subject: Fwd: MHII.*/ REJECT
# 2001/07/27 'date' header without capital: SirCam virus
# illegal Content-Disposition: SirCam virus
#/^date:.*$/i REJECT
/^Content-Disposition: Multipart message/i REJECT
# 2001/09/27
/^Subject:.*Peace BeTweeN AmeriCa and IsLaM!.*/ REJECT
# 2001/10/05
/^Subject:.*URGENT ASSISTANCE.*/ REJECT
# 2001/11/29 BadTrans
/^From: .*<_[^@]*\@.*>$/ REJECT
#/====_ABC1234567890DEF_====/ REJECT
/^From: [1234567890]*@yahoo.com.*$/ REJECT
/^From: .*@.*dannybproductions.com.*$/ REJECT
/^From: .*@boss.com.*$/ REJECT
/^Subject:.*Norton SystemWorks.*/ REJECT
/^From: .*@sevenlasvegas.com.*$/ REJECT
/^content-(type|disposition):.*name[[:space:]]*=.*\.(exe|com|vbs|vbe|dll|ocx|cmd|bat|pif|lnk|hlp|msi|msp|reg|cpl|inf|asd|cab|shs|shb|scr|sct|chm|wsf|wsh|wsc|hta|vcd|nws)/ REJECT Bad attachment file name extension: $2
/name="?.*\.(vbs|vbx|vbe|bat|pif|lnk|shs|scr|com|exe)"?$/ REJECT Dangerous file extension in mail
