> I would also like to be able to pick out those from "Microsoft Support" > which are not from microsoft.com and other typical phishing mails.
Now there you are on easier ground. SARE has several rules to catch phish
that are based on this sort of thing.
Loren
