I have one that I've been using for some time that activates if the body contains a LINK to a .BIZ domain:
body BIZ_SITE /.*\.biz/i score BIZ_SITE 2.00
Might I suggest revising that from a body rule to a URI rule.. at the very least.
I'd also suggest using \S* instead of .* after all, leading a regex off with .* really doesn't do anything. It requires there to be zero or more characters which aren't a newline. That rule would in fact match the string "if the body contains a LINK to a .BIZ domain" quite nicely.
A further suggestion would be to require a dot, some non-whitespace characters, a dot, and biz.
like this: uri BIZ_SITE /\.\S*\.biz/i score BIZ_SITE 0.5
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
