On Wed, Mar 30, 2016 at 3:34 PM Alex <mysqlstud...@gmail.com> wrote: > > > I believe something like this would work in spamassassin: > > mimeheader DOC_ATTACHED Content-Type =~ /="[^"]+\.(?:docx?|rtf)"/i > score DOC_ATTACHED 12.5 > > > Thank you! I'll give this a try, but score it lower for testing.
Rod
