# rule:[spam]
if anyof (header :contains "x-spam-flag" "YES", header :contains "x-spam" "Yes", header :contains "subject" "*** SPAM ***", header :contains "subject" "***SPAM***")
{
	discard;
	stop;
}