From and Subject header content. For example:
Subject: NOTIFICATION OF BEQUEST From: BROWN WALTER ASSOCIATES <[EMAIL PROTECTED]>This scored on SUBJ_ALL_CAPS but I'm wondering if anyone's gotten good results from a rule that would implement FROM_ALL_CAPS?