I'm trying to block all the annoying SoBig viruses - so I have the following:
body SO_BIG_VIRUS /Please see the attached zip file for details\./ score SO_BIG_VIRUS 6.0 header SO_BIG_ATTACHMENT ALL =~ /your_details\.zip/ score SO_BIG_ATTACHMENT 3.0 The first rule works, the 2nd doesn't - how can I query on attachment title, etc? Thanks, Geoff ------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk