Subject: RE: Spam with Re[2]: or Re[4]:
Using the following as a rule set, spam with the above subject line is still getting through - # Check for bad RE[ tag header BAD_RE_TAG Subject =~ /\b"Re"\[\b/i score BAD_RE_TAG 6.0 What am I doing wrong ? Probably severa things, starting with the quotation marks. Try the following, but give it a low score to start - I almost guarantee it will FP! header MY_BAD_RE Subject =~ /^\s{0,10}Re\s{0,5}\[\d+(?:\/\d+)?\]/i Loren (BTW, that is untested, so may have problems.)