I'm no expert so I may be off-base here, but shouldn't the rule have ()? body RULE_NAME /(bannedc|banned c)/i
I think that without them you're scanning for one of the following strings: "bannedcanned c" or "bannedbanned c".
And personally, I'd just do: body RULE_NAME /banned ?c/i
Although some people have already posted much better regexes for matching various ways to obfuscate "banned CD". In all truth, I'd go with one of those, instead.
--Kai MacTane ---------------------------------------------------------------------- "I looked Death in the face last night,/I saw him in a mirror, And he simply smiled,/He told me not to worry: He told me just to take my time." --Oingo Boingo, "We Close Our Eyes"
------------------------------------------------------- This SF.net email is sponsored by Dice.com. Did you know that Dice has over 25,000 tech jobs available today? From careers in IT to Engineering to Tech Sales, Dice has tech jobs from the best hiring companies. http://www.dice.com/index.epl?rel_code=104 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk