If you look back a whopping 2 days in the list archive, there are some rules that are very good at catching this .rtf spam.
- word doc spam Jean-Paul Natola
- Re: word doc spam John Hardin
- RE: word doc spam Jean-Paul Natola
- RE: word doc spam John Hardin
- Re: word doc spam Dave Walker
- Re: word doc spam Matt Garretson
- Re: word doc spam John Hardin
- RE: word doc spam Jean-Paul Natola
- RE: word doc spam John Hardin
- Re: word doc spam John Hardin
- Re: word doc spam Charles Gregory
- Re: word doc spam John Hardin
- Re: word doc spam Charles Gregory
- Re: word doc spam McDonald, Dan
- Re: word doc spam Matus UHLAR - fantomas
- Controlling spamd logging from spamc Martin Gregorie