Here's the rule: body GATEWAY_001 /tripod\.com/i score 5 describe match tripod.com
Here's the result: Nov 9 13:42:03 gateway spamd[17880]: spamd: result: . -2 -ALL_TRUSTED,AWL,BAYES_00,GATEWAY_001 scantime=0.6,size=1213,user=spamfilter,uid=1004,required_score=3.4,rhost=localhost,raddr=127.0.0.1,rport=/var/spool/spamfilter/spamd,mid=<[EMAIL PROTECTED]>,bayes=0,autolearn=ham Did I totally miss something? Thanks! James