I'm getting excellent results! But this one has got me goofy. It simply skips some of my rules!! I'm not sure why. In the header you can see it hits MY_DSL which is a header rule. But I have a specific rawbody rule for "Stop Mailings here" and a rawbody rule for a Q without a U. This spam somehow skips about 7 more rules that should hit!
In general, I'd advise against using rawbody, unless you need to do HTML encoding specific checks. (ie: looking for tags).
Body is really what you want for text phrases. Try that and see if it works better.
Rawbody skips some parts of the decoding process, although theoretically it should have base64 decoding performed, I'd still not use it unless you have an absolute need to use rawbody instead of body.
------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk