Hi John, > It would be better if you could post a few spamples to something like > pastebin or a webserver you control and send the URLs to the list so > that we can see the complete raw messages.
here are 3 examples: http://sandberg.nl/sp/ 1 and 2 have the pattern I described before, 3 is another one I didn't see such an obvious pattern, but I don't know how to tackle that one neither ... thanks, Jan-kees
