SpamAssassin question

[John W Mickevich]

Hello,   I am relatively new to SpamAssassin and I hope I am asking this question via the appropriate channel.  If not, please let me know. I have been receiving spam email that is not getting caught by SpamAssassin and want to add a rule to catch it.  These particular spam emails have the same URL which shows up in the body of the email many times - I have seen it repeated as many as 12 times.  For example: <http://www.thelevelgroup.net/9Lc591820lkc972ov63Ij142YOjd16uwEU102KFMp> <http://www.thelevelgroup.net/9Lc591820lkc972ov63Ij142YOjd16uwEU102KFMp> <http://www.thelevelgroup.net/9Lc591820lkc972ov63Ij142YOjd16uwEU102KFMp> For this example, I know I can use a URI rule to check for thelevelgroup.net.  But, what if the URL changes?  I want to add a rule which will add points if any url shows up in the body of the email more than a certain number of times.  I assume I need to set a variable then count the occurrences, but I do now know how to do this, or if it is even possible.  I am currently using SpamAssassin v2.64. Thanks! John W Mickevich IBM eServer Certified Specialist – i5 iSeries Technical Solution Designer V5R3 IBM eServer Certified Specialist – iSeries Solution Sales V5R3 Computer Management Technologies “An Employee Owned Company” Phone: (989) 791-4860 ext 109 Email: [EMAIL PROTECTED]