Suggested killfile rules for recent attack

I believe either of the following rules will filter out the
recent attack of 653 messages pretending to be from Francois
Grieu. If you can filter on the "and" of the two, so much the
better.

1. The field NNTP-Posting-Date: contains "11 Jul 2007 04:0".
2. The field X-Trace: contains "1184119".

Rule 1 kills only 10 minutes of submissions, which is unlikely to
eliminate even a single honest message.

--
To email me, substitute nowhere->spamcop, invalid->net.
.