On Thu, Jan 24, 2002 at 06:18:43PM -0500 I heard the voice of Brian Clark, and lo! it spake thus: > > :0: > * ^From.*pc-html-user@domain\.com > /dev/null
Actually, I've found that this: if(/^Content-Type: text\/html/) to $MBOXDIR/crap catches more of my spam than any other of my off-the-cuff heuristics (I mean, like at factor of 2 more, and seemingly more than the rest combined). I read through my 'crap' mailbox every few days, and pretty much end up just hitting 'ddddddddd....' (granted, for about 5 minutes, but better 5 minutes every few days than a few seconds a few hundred times EVERY day, eh?). The only false positive I've had it get was a payment confirmation from the telco's online bill payment (in the rare case that it actually works). Note (for those of you not familiar with maildrop) that it's only doing a header search, so in the case of a HTML attachment or a multipart/alternative, this doesn't trigger; only when the sole part of the body is in text/html. -- Matthew Fuller (MF4839) | [EMAIL PROTECTED] Unix Systems Administrator | [EMAIL PROTECTED] Specializing in FreeBSD | http://www.over-yonder.net/ "The only reason I'm burning my candle at both ends, is because I haven't figured out how to light the middle yet"