06/08/14 16:28, Quanah Gibson-Mount wrote: Would you be willing to share your full finalized ruleset? This spam is really obnoxious. Sure...
A little adjustment as I noticed the brackets around the first number match was wrong: header __LOC_DIGITS_FROM From:name =~ /\.\d{7,8}$/ body __LOC_DIGITS_CONFUSER / (\d{7,8}) .{1,250} ([0-9a-f]{32}) .{1,250}[\g1|\g2] .{1,250}[\g1|\g2]/ Something like... meta LOC_DIGITS_SPAM ( __LOC_DIGITS_FROM && __LOC_DIGITS_CONFUSER) score LOC_DIGITS_SPAM 0.001 should work -- Paul Stead Systems Engineer Zen Internet