Re: uribl lastminute.com listed in uribl whte and is now used for nordea phisting mails (SOLVED)

[Benny Pedersen]

Den 2012-03-02 18:15, Jeremy McSpadden skrev:

Leap Year

sure ?

#
# Copyright 2012 Nordea
#
body __COPYRIGHT_NORDEA /Copyright\ 201.\ Nordea/i
meta PHISHMAIL_NORDEA (__COPYRIGHT_NORDEA && !SPF_PASS)
describe PHISHMAIL_NORDEA Meta: __COPYRIGHT_NORDEA && !SPF_PASS
score PHISHMAIL_NORDEA 3.0

if senders begin using spf we need another rule