I'd also strongly recommend adding boundaries: /\b(blah1|blah2|blah3)\b/i Otherwise, you might have a whole *pano*ply of words that will make legit mails marked a spam. You need to be super sure about poison pills rules, or in french - *pillu*le empoisonnée.
Good luck. On 18.06.24 13:35, Axb wrote: > You need to enclose in brackets > body LOCAL_BLAH /(blah1|blah2|blah3)/i > > On 6/18/24 13:05, Anders Gustafsson wrote: >> Sure: >> >> body LOCAL_PORN_RULE >> /kiimainen|naida|sexikäs|nussikas|nussia|pillu|pano|kinky|bdsm|pillua|x69-JOOGA/i >> score LOCAL_PORN_RULE 8 >> describe LOCAL_PORN_RULE This catches peter's porn spam >> >> Sorry again for mailing directly. No idea why it suggests the user and not >> users@ >> >