<RULES version="3" ><RULE enabled="1" action="deletesender" sendnote="0" note="default" repeatnotificationdelay="7" edited="yes" name="Drugs" explain="This rule detects and deletes messages referencing various well-known drugs that may have been disguised" anyCondition="1"><SUBJECT><ITEM>(word)meds</ITEM><ITEM>(word)mds</ITEM><ITEM>(seq)vicodin</ITEM><ITEM>(regex)(?i)[v|w][l|1|i|\||!]c[o|0]d[l|1|i|\||!]?n</ITEM><ITEM>(seq)valium</ITEM><ITEM>(regex)(?i)[v|w][a|@][l|1|i|\||!]{1,}um</ITEM><ITEM>(seq)xanax</ITEM><ITEM>(seq)phentermine</ITEM><ITEM>(seq)cialis</ITEM><ITEM>(regex)(?i)c[l|1|i|\||!][a|@]l[l|1|i|\||!]s</ITEM><ITEM>(seq)viagra</ITEM><ITEM>(regex)(?i)[v|w][l|1|i|\||!][a|@]gr[a|@]</ITEM><ITEM>(regex)(?i)hydr[o|0]c[0|o]d[0|o]ne</ITEM><ITEM>(seq)levitra</ITEM><ITEM>(regex)(?i)lev[l|1|i|\||!]tr[a|@]</ITEM><ITEM>(seq)prescription</ITEM><ITEM>(regex)(?i)prescr[l|1|i|\||!]pt[l|1|i|\||!][0|o]n</ITEM><ITEM>(seq)pharmacy</ITEM><ITEM>(seq)medication</ITEM><ITEM>(regex)(?i)med[l|1|i|\||!]cat[l|1|i|\||!][o|0]n</ITEM></SUBJECT><BODY><ITEM>(word)meds</ITEM><ITEM>(word)mds</ITEM><ITEM>(seq)vicodin</ITEM><ITEM>(regex)(?i)[v|w][l|1|i|\||!]c[o|0]d[l|1|i|\||!]?n</ITEM><ITEM>(seq)valium</ITEM><ITEM>(regex)(?i)[v|w][a|@][l|1|i|\||!]{1,}um</ITEM><ITEM>(seq)xanax</ITEM><ITEM>(seq)phentermine</ITEM><ITEM>(seq)cialis</ITEM><ITEM>(regex)(?i)c[l|1|i|\||!][a|@]l[l|1|i|\||!]s</ITEM><ITEM>(seq)viagra</ITEM><ITEM>(regex)(?i)[v|w][l|1|i|\||!][a|@]gr[a|@]</ITEM><ITEM>(regex)(?i)hydr[o|0]c[0|o]d[0|o]ne</ITEM><ITEM>(seq)levitra</ITEM><ITEM>(regex)(?i)lev[l|1|i|\||!]tr[a|@]</ITEM><ITEM>(seq)prescription</ITEM><ITEM>(regex)(?i)prescr[l|1|i|\||!]pt[l|1|i|\||!][0|o]n</ITEM><ITEM>(seq)pharmacy</ITEM><ITEM>(seq)medication</ITEM><ITEM>(regex)(?i)med[l|1|i|\||!]cat[l|1|i|\||!][o|0]n</ITEM></BODY></RULE></RULES>
