I just created a rule for the most common spams that have been making it through SA, but for some reason, it's not showing up in the tests:
body SEE_ATTACH /See attachment message.html/i describe SEE_ATTACH body contains See attachment message.html score SEE_ATTACH 5.0 --lint shows no problems.... James Smallacombe PlantageNet, Inc. CEO and Janitor [EMAIL PROTECTED] http://3.am =========================================================================
