The current ADVERT_CODE rule doesn't catch subjects that use the code [ADV] instead of ADV:. Here's the current rule:
header ADVERT_CODE Subject =~ /(^\s*|\s+)ADV:/i describe ADVERT_CODE Subject: contains advertising tag and my suggested modification: header ADVERT_CODE Subject =~ /(?:^\s*|\s+|\[)(?:ADV|cc)[:\]]/i describe ADVERT_CODE Subject: contains advertising tag This would also catch the "cc:" that many spam subjects start with. I see more of these than ADV: these days. -- michael moncur mgm at starlingtech.com http://www.starlingtech.com/ "You live and learn. At any rate, you live." -- Douglas Adams _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
