diff --git a/filters/exim.pcre b/filters/exim.pcre
index 22de6d6..98fcbea 100644
--- a/filters/exim.pcre
+++ b/filters/exim.pcre
@@ -1,11 +1,10 @@
+# set: defscore=10
 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from .*\[<HOST>\]
 SMTP protocol synchronization error \(next input sent too soon: pipelining was not advertised\): rejected .*\[<HOST>\]
-rejected EHLO from \[<HOST>\]: syntactically invalid argument
-rejected HELO from \[<HOST>\]: syntactically invalid argument
-Connection from \[<HOST>\] refused: too many connections from that IP address
-\[<HOST>\] .* host is listed in zen.spamhaus.org
-\[<HOST>\] .* host is listed in bl.spamcop.net
+rejected [HE][EH]HLO from \[<HOST>\]: syntactically invalid argument
+\[<HOST>\] .* host is listed in .+
 \[<HOST>\] .* relay not permitted
-\[<HOST>\] .* too many connections from that IP address
 \[<HOST>\] .* rejected after DATA: This message was detected as possible malware
+# set: defscore=5
+\[<HOST>\] .* too many connections from that IP address
 \[<HOST>\] .* temporarily rejected RCPT \<\S+\>: lowest numbered MX record points to local host