Hello Loren, First thank you for this rule - it helped a lot with catching this kind of spam.
There is another one, similar to this, but with a word in between Fw: and name. It looks like this Subject: Fw: hello aallena Your rule filters for Subject: Fw: aallena where aallena is a recipient ([EMAIL PROTECTED] let's say) I am sorry but I am not sure where hello would go to when I write another rule. Could you help if you don't mind? Thank you for your help in advance. Irina =========================== ----- Original Message ----- From: "Loren Wilton" <[EMAIL PROTECTED]> To: "Ruben Cardenal" <[EMAIL PROTECTED]>; <users@spamassassin.apache.org> Sent: Monday, February 06, 2006 3:52 PM Subject: RE: Little custom rule > >It seems it doesn't want to work, it just didn't match this: > > > >From: "rkfexklqc" <[EMAIL PROTECTED]> > >To: [EMAIL PROTECTED] > >Subject: Fw: oscarbru > > Ah, ok. As I said, it would match names in <> characters, and not one of the dozen or so other valid formats. You have one of those other formats. Try this instead (also untested): > > header __LW_BLAH1 ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: > \1\b/i > > Loren > >