I frequently receive spam from these known spam sites: http://200.187.137.10 and http://200.187.137.3
The messages are never sent from these adresses but they all have in common that they only contain a html attachment that looks something like this: > <html><body><a href="http://200.187.137.10/microsoft/?8965812503690901"><img > border="0" src="http://200.187.137.10/microsoft/update.php"></body></html> Is is possible to filter on the content of the html part? -- Regards, Mogens Using The Bat! Version 2.00.6 under Windows XP 5.1 Build 2600 Service Pack 1. ________________________________________________ Current version is 2.00 | "Using TBUDL" information: http://www.silverstones.com/thebat/TBUDLInfo.html