The current NEW_DOMAIN_EXTENSIONS didn't catch the last bit of doamin 
registry spam I got.

body NEW_DOMAIN_EXTENSIONS     /new\s*domain\s*extension/i

The word "Internet" was inserted between "new" and "domain", so the rule 
wasn't triggered.  This rule catches both variants:

body NEW_DOMAIN_EXTENSIONS      /new (?:Internet )?domain extension/i

-- 
Visit http://dmoz.org, the world's   | Give a man a match, and he'll be warm
largest human edited web directory.  | for a minute, but set him on fire, and
                                     | he'll be warm for the rest of his life.
[EMAIL PROTECTED]  ICQ: 132152059 |

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to