That should get caught. Does the "BODY 0 CONTAINS bta_mail.net.cn" line contain any spaces/tabs at the end of it? Could the E-mail that was caught have been sent using base64 encoding perhaps?BODY 0 CONTAINS bta_mail.net.cn<FONT face=verdana color=#800000 size=3><STRONG>Unsubscribe at: [EMAIL PROTECTED]</STRONG></FONT> ******</BODY></HTML>
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
