They've already worked around these rules apparently. I just received the following as part of an HTML-only email:
<P><FONT SIZE=3D2>blah blah www . ????28 . = net<BR> I've replaced "shop" with "????" - but you can see the line continuation char to unwrap that "net" back onto the previous line. Is there an existing SA function to "normalize" HTML content before doing matches? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1