I've got a rule that lookes similar to:
body HAS_XX /^(?:>\s{0,3}){0,4}XX$/ describe HAS_XX There looks like a XX here. score HAS_XX -1.0
Which is supposed to match things like:
> > > XX
you need to make that a rawbody rule and it should work.
Body rules are run on a copy of the message with all line-breaks removed, so the ^ and $ are preventing it from matching, as there is no start or end of line surrounding it.