:0:
* ^Subject:[ 	]*\[PMX:SPAM]
/u/flaps/spam

:0
* ^Subject:[ 	]*\[PMX:VIRUS]
/dev/null