I have in one of my filter files the following line: BODY 5 STARTSWITH <
Yet, it is not catching the following: Received: from kirjastot.fi [213.37.211.14] by mail.localdomain.moc (SMTPD32-8.04) id A6AA5D600B4; Sun, 23 Nov 2003 14:12:42 -0500 Message-ID: <[EMAIL PROTECTED]> From: "Darlene A. Campos" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Date: Mon, 24 Nov 2003 10:29:48 +0000 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Content-Type: text/html Content-Transfer-Encoding: 8bit X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 213.37.211.14 with no reverse DNS entry. X-RBL-Warning: BASICFILTER: Message failed BASICFILTER test (1) X-RBL-Warning: SPAMCHECK: Message failed SPAMCHECK: 14. X-Declude-Sender: [EMAIL PROTECTED] [213.37.211.14] X-Declude-Spoolname: D06aa05d600b43c07.SMD X-RBL-Warning: Total weight: 34 X-Tests-Failed: IPNOTINMX, REVDNS, NOLEGITCONTENT, BASICFILTER, SPAMCHECK, WEIGHTRANGE30-34 X-Note: This E-mail was sent from [No Reverse DNS] ([213.37.211.14]). <gptnkipczdas><font color="white">cganfdbgnicqis<guhqziynlxqc> sclzinxihegaca <gvzejqcdrqthrlb>umxgkectivibpb <gkqlgwndrsujke>ixluehcwwwzkj qlbbfvcjfeyolb xrahsgbxesl<grethyvbzyty></font><gxcqvtjbdnovg><br><gnthmxmdbhtejdc> <font color="white">rrywumqurzerbq <gwotsslslxf>tusorpeisik <gqkdiqictmfdfub>josibzcmwi<ggjfrcncdibxgud> xvhsnxdrtdednc<gewkbiqtgwqctc> jxektecxqn <gcvdbrofavhodl>qlpmzibyzklna</font><gsqljltbohycak><br><gcwxswuouqtrpd> <b><gwrtuwvdkzi>LO<gwqrpfjbroyi>SE<guvlfocchwbvlb> <gaxqphicikvaa>WE<geiujqibyypgycq>IG<gyzibjubmgvdpzd>HT <gwxicixdjoxmlqi>TH<gffvsooczjo>E <gqgkwindoynfjbb>E<grtlkbbdbwtv>ASI<gyhhwzpolgei>ER W<gvgaixrdfkdp>AY<gldppsebsqythfc></b><gwddpzybspnyj><br> <gksdwmlccxsyz><i>"I<gyverjtbwzj>T'S<gnqsgvswoyeuibt> N<gpnbsvxdmyx>OT<gdlzzutcrzzw> A<gqlrtgychyms> <gdwkphqwxmnmbj>DI<gkttlixddjgl>ET<gymzrjzcklne> .<gmoqtcrbkgdjxt>..<gfscknibkksogf>. <gqzriiidczwtb>IT<ggtubfzcsrb>'S<gcxhfjsbhobqx> A<ghncgopcgled> PA<gxuhsodcrpcpco>TC<gqgsvnykhlxxecl>H"<br></i> <br> TRUNCATED John Tolmachoff Engineer/Consultant/Owner eServices For You John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.