After a brief look at it, it looks like no, you would have to do more than just modify the few pieces. I say that because what you have is similar to http://msdn.microsoft.com/library/en-us/cdosys/html/_cdosys_envelopefields_c ode_example_smtp_.asp which keys off the envelopefields. You want to get into the body similar to how the event sink for appending/prepending a message gets into the body, read the body and search for keywords if I understand correctly. Not as simple as changing those three fields you mentioned. As a side note, most newer anti-virus products that are Exchange-aware (server side) offer a mechanism to content filter. If you have such a thing already in place, it would be a good thing to put it to use that way. The event sinks that are shown that would get into the messages the way you want likely have a performance hit (according to msdn they do) so taking advantage of something that has been developed and optimized that you are likely already using may also be the most cost-effective solution. al -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, October 30, 2003 4:15 PM To: [ExchangeList] Subject: [exchangelist] RE: Event Sinks to search Body http://www.MSExchange.org/ This is a multi-part message in MIME format.