As for Excel files, email attachments are always converted to a series of alphanumeric characters. Presumably the letters SEX appear somewhere in the way the test file was encoded.
Most likely, what this rule is finding is:
Content-type: application/msexcel
If you *really* want to block every single mention of sex, including comments about "the fair sex" or "Sex: M / F" on surveys or profiles, or news articles, then you should use /\bsex\b/i - the \b indicates a word boundary like a space or period. But I'd recommend against it.
Same here. The inflexibility of filters that use rules like "block every mention of the word FOO" is one of the reasons I use SA instead -- it's not that silly.
--Kai MacTane ---------------------------------------------------------------------- "Death and money make their point once more, In the shape of philosophical assassins..." --Shriekback, "Gunning for the Buddha"
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk