> Is that something that is within a HTML tag, like "<input>"? If so, > you need to use a rawbody test instead of body. HTML tags are removed > before matching a body test.
Thanks to you and David who pointed my error out ASAP. Rawbody did the trick. The beta rule to try and catch phishing emails is up now in http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf Feedback appreciated and it has a low score of 1.0 until I confirm more about FPs. Regards, KAM _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
