On 23 Jan 2007 Martin wrote: > If you have suffered from the recent splurge of Spams with subjects > like... > > Subject: Looking for Regional Representative Ref: 4370 > Subject: Have a vacancy for you Id: 763 > Subject: Transaction Manager position ref: 819 > > then I have found the following test seems to delete them without any > other problems... > > Delete Subject: RegEx \i {8}(ref|id): \d{3,4} > > which looks for 8 blanks, followed by 'ref' or 'id' in any case, followed > by ': ', followed by 3 or 4 numeric digits. Thanks. That should be useful. Do you need to test for 4 numerics as anything with four digits will also match three digits, or have I missed something? I must admit that I'd have taken the easy option and had separate tests for "= * id: " and the same with ref:. At the moment I tend not to bother with anything that's being picked up by SpamStamp because it's easier to bounce everything in the Spam folder than to divert and forward in AntiSpam. When I get fed up with sending spam to the despamchecker I'll no doubt try to catch everything with AntiSpam. One thing AntiSpam doesn't let you do (feature request!) is mark a message as spam and accept it so that MPro can filter it into the Spam folder. Using divert and accept requires manual intervention. -- _ |_|. _ Richard Porter http://www.minijem.plus.com/ |\_||_ mailto:ricp@xxxxxxxxxxxxxxxx