Because I don't want to trigger your SA, a V-drug rule has been replaced with 'Pinopin' in this question:
I get a message that includes the text,
P*ino*pinPain Killers
It is not broken up by HTML code, nor is it BASE64'ed....
I have a rule that reads: body LOC_PINOPINBO /(?!pinopin)p[_\W]?[i1l\|[EMAIL PROTECTED]|][_\W]?n/i
Didn't match. Any suggestions????????
It matches just fine on my system when I insert it into an ordinary text/plain message.
I'd venture to guess the original message has some weird mime tricks that are confusing SA's mime parser.
