Is there a gotcha in filter text files when the message is in HTML format? The following line works if I send myself a message from HotMail, but didn't on an actual piece of spam I just received, whose relevant bit of text I'll reproduce here with an underscore inserted to get around my own filter:
#Dec-02-2002 AC Very common in Chinese hosted spamvertisement "unsubscribe" footers BODY 0 CONTAINS btamail.net.cn And the verbatim snippet: <FONT face=verdana color=#800000 size=3><STRONG>Unsubscribe at: [EMAIL PROTECTED]</STRONG></FONT> ******</BODY></HTML> If it makes any difference, the header defines the e-mail format as: MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" I have already checked the Declude log (MED) to make sure there was no error reported in accessing the filter text file... No problem reported. Andrew 8) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.