Here's a rule that's working pretty well for me: # /etc/mail/spamassassin/developmentgrou.cf body KP_DEVELOPMENTGROU /[EMAIL PROTECTED],20}\.ru/ describe KP_DEVELOPMENTGROU Requests email to Russian developmentgrou score KP_DEVELOPMENTGROU 1.0
I'll be bumping up the score today.
