Currently the rule is: uri REMOVE_PAGE /^https?:\/\/[^\/]+\/remove/
However, the "remove" might not come at the beginning of the file portion of the URI. For instance, http://www.chippynet.com/pharmacy/remove.html The most general rule would be (also making it case insensitive): uri REMOVE_PAGE /^https?:\/\/[^\/]+\/.*remove/i But that might be too agressive. Less agressive would be: uri REMOVE_PAGE /^https?:\/\/[^\/]+\/(?:.+\/)?remove/i which would only match either directories or filenames which start with "remove". But then a spammer could name the file/directory "please-remove" or something to not trigger the rule. -- Visit http://dmoz.org, the world's | Give a man a match, and he'll be warm largest human edited web directory. | for a minute, but set him on fire, and | he'll be warm for the rest of his life. [EMAIL PROTECTED] ICQ: 132152059 | _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk