> Just as a matter of interest where did you get the idea that "$" > was a wildcard character?
The way its written in the manual it just looked like it would be a wildcard. You can't have a $ sign in a valid domain name or an email address so I just assumed thats what it was. On closer examination of the explanitory text, seeing the "$domain" and "$success$@" within quotes should have clued me in. [quote] HELO 8 CONTAINS $domain SUBJECT 3 CONTAINS enlarge MAILFROM 3 STARTSWITH $success$@ BODY 3 CONTAINS To unsubscribe, click here The first one would look for HELO/EHLO text that contains "$domain" in it (and if it does, a weight of 8 will be added to the weight of the E-mail), the second one would look for an E-mail that contains "enlarge" in it and add 3 to the weight of the E-mail, and the last one would look for a return address beginning with "$success$@" (and add 3 to the weight of the E-mail if there is a match). [/quote] >For the odc.ca rule, what are you looking to block? We've been getting messages like this: From: Pay Advance <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Need Extra Dough? Get it now! MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" X-Declude-Sender: [EMAIL PROTECTED] [207.158.45.51] With the sending username containing odc.ca we could block these no problem. But if I don't cut it off before the @ it'll drop all our internal email too. Rob Salmond Ontario Die Company (519)-576-8950 ext. 132 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
