>I haven't played with header checks yet, so think about this before blindly >trying it, but: aren't header checks case insensitive?
negatory >In which case that >rule matches and rejects all the messages coming through recently with >"advise" somewhere in the subject. If its purpose is to block subjects >starting with "ADV:", maybe replace the ".*" between subject and adv with >"[[:space]]*" or "\s*" (posix/pcre), or check for "adv:", or at least >exclude "advi". > >But then again, I've never seen a piece of spam that actually bothered >starting with "ADV:" it exists!! I even saw one the other day like this: Subject: [spam] blah blah :)) >, so I'd question the effectiveness of the rule in the >first place. it's effective, do it. /^Subject:.*( |\.\.\.\.\.\.|\. \. \. \.|-\-\-\-\-|_____)/ REJECT /^Subject:.*(a d v|adv\:|adv\])/ REJECT /^Subject:.*(teensex|suck|clit|hgh|viagra|penis|cum |Phentermine|Viagra)/ REJECT Len
