Everytime I think I'm starting to understand this thing... GRRRRR. Could come kind person tell me what I'm doing wrong? As near as I can figure, this rule -
body IPURL /http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/i describe IPURL Received has URL link to IP address score IPURL 6 Should stop a message containing http://123.456.789.101 but it doesn't seem to. (Yes, my threshold is below 6). Thanks! Mike- If you're not confused, you're not trying hard enough. ---------------------------------------------------- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments. ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk