Steffen, >> if header >> :matches
SK> Do you use regex's, if not :contains or :is may work, too, with less SK> ressources. >> ["To", "Cc", "Bcc", "Reply-To", "In-Reply-To"] >> ["[EMAIL PROTECTED]"] { >> discard; >> stop; >> } >> SK> Do you have the headers of a mail, that got discarded, and and those, that SK> did not? I think I managed to solve the problem, thanks to Steffen. It turned out that "[EMAIL PROTECTED]" :matches "[EMAIL PROTECTED]" but "<[EMAIL PROTECTED]>" does not. In my tests, I always sent messages to [EMAIL PROTECTED] address. But spammers used to use angle brackets so it fooled the script. Now the sieve script looks as follows and it works: if address :is :all ["To", "Cc", "Bcc", "Reply-To"] ["[EMAIL PROTECTED]"] { discard; } -- Eugene Gladchenko EVG15-RIPE