Here's what I've recently done: rawbody GWW_PUNCT /([a-z][:punct:]+[a-z])|( [A-Z][:punct:]+[a-z])/i score GWW_PUNCT 2.0
It's not perfect, but it does the job. As well, I've noticed a lot of these include the domain 'doctor45.com', so I've been giving a good high score for that one. Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk