Using SA with cpanel.
Based on the spam we're receiving, I set up an "all accounts" rule in cpanel that checks for "http://" in the body AND then performs about 20 "OR" checks for different phrases like: unsubscribe, opt out, to end emails, cease future notices, etc. The idea is that if the message was not originally flagged as ***SPAM*** by SA, then it checks to see if it contains an imbedded http:// link in it (which we seldom see in our expected emails) *AND* checks to see if the body contains one of approx. 20 phrases. If it matches BOTH of these checks, it sends the email to "spam <at> mydomain.com". This is actually working pretty well, but if we continue adding to the OR phrases and end up with say 30 or more of these, when does this become a bad idea processing wise???? (Or is it already). Thanks for any thoughts _________________________________________________________________ Express your personality in color! Preview and select themes for HotmailĀ®. http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TXT_MSGTX_WL_HM_express_032009#colortheme