Hi, You just need to modify a bit the regexp:
ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: (hello)*\1\b/i That would match both cases. If you want to include another words apart from "hello" do it with (word1|word2|etc). Ruben > -----Mensaje original----- > De: Irina [mailto:[EMAIL PROTECTED] > Enviado el: viernes, 10 de febrero de 2006 16:30 > Para: Loren Wilton; users@spamassassin.apache.org > Asunto: Re: Little custom rule > > Hello Loren, > > First thank you for this rule - it helped a lot with catching this kind of > spam. > > There is another one, similar to this, but with a word in between Fw: and > name. It looks like this > Subject: Fw: hello aallena > > Your rule filters for > Subject: Fw: aallena > > where aallena is a recipient ([EMAIL PROTECTED] let's say) > > I am sorry but I am not sure where hello would go to when I write another > rule. Could you help if you don't mind? > > Thank you for your help in advance. > > Irina > =========================== > > ----- Original Message ----- > From: "Loren Wilton" <[EMAIL PROTECTED]> > To: "Ruben Cardenal" <[EMAIL PROTECTED]>; <users@spamassassin.apache.org> > Sent: Monday, February 06, 2006 3:52 PM > Subject: RE: Little custom rule > > > > >It seems it doesn't want to work, it just didn't match this: > > > > > >From: "rkfexklqc" <[EMAIL PROTECTED]> > > >To: [EMAIL PROTECTED] > > >Subject: Fw: oscarbru > > > > Ah, ok. As I said, it would match names in <> characters, and not one > of > the dozen or so other valid formats. You have one of those other formats. > Try this instead (also untested): > > > > header __LW_BLAH1 ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: > > \1\b/i > > > > Loren > > > > >