header __CN_PHISH1_SUB Subject =~ /^Confirm your email identity/i body __CN_PHISH1_BODY /Confirm your email identity below/i body __CN_PHISH1_CODE /Warning Code:[a-zA-Z0-9]+/ body __CN_PHISH1_CODE2 /network system with error code [a-zA-Z0-9]+/ meta CN_PHISH1 (__CN_PHISH1_SUB && __CN_PHISH1_BODY && __CN_PHISH1_CODE && __CN_PHISH1_CODE2) score CN_PHISH1 10.0 describe CN_PHISH1 CARNet-Debian phish signature 1 header __CN_PHISH2_SUB Subject =~ /^Message from/i body __CN_PHISH2_BODY /account update our account/i body __CN_PHISH2_BODY2 /authomatically spam free/i body __CN_PHISH2_CODE /error code [a-zA-Z0-9]+/i meta CN_PHISH2 (__CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE) score CN_PHISH2 10.0 describe CN_PHISH2 CARNet-Debian phish signature 2