>header MS_PATCH_UPDATE Subject =~ /network security/i >describe MS_PATCH_UPDATE Subject: Fake email from MS >score MS_PATCH_UPDATE 10.0
That rule should work. Did you run a spamassassin --lint to check for typos? did you restart spamd (if you use spamd)?
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
