To catch an email address in an *.info domain, try this rule: uri LOCAL_EMAILDOTINFO /[EMAIL PROTECTED],50}\.info$/
Afaik, using uri instead of body has the advantage that it will only parse URIs, not the entire body ... thus info is anchored at the end of the regex. Correct me if I am wrong, experts. Regards, wolfgang
