Hello, this is my first post to this group, so my suggestion may completly "out of sync" or an "old issue" or what else...but may be it is an minor improvement ... so why to give only ONE spam the chance not to be catched ? ;O)
In the file 20_body_tests.cf there is a rule, which says the following: <cite_rule> body THIS_AINT_SPAM /This.{0,30}is not (?:a )?spam/is describe THIS_AINT_SPAM Claims "This is not spam" body THIS_AINT_JUNK /This.{0,30}is not (?:a )?junk (?:email)?/is describe THIS_AINT_JUNK Claims "This is not junk email" </cite_rule> Since I got more than one spam, claiming "This is no spam", I think the rules would catch those also if they are as: <suggestion> body THIS_AINT_SPAM /This.{0,30}is not? (?:a )?spam/is describe THIS_AINT_SPAM Claims "This is not spam" body THIS_AINT_JUNK /This.{0,30}is not? (?:a )?junk (?:email)?/is describe THIS_AINT_JUNK Claims "This is not junk email" </suggestion> Keep hacking! Meino ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk