On 06 Nov, Frank de Bruijn <antispam@xxxxxxxxxx> wrote: > In article <4e81a22d52Jeremy@xxxxxxxxxxxxxxxx>, > Jeremy C B Nicoll <Jeremy@xxxxxxxxxxxxxxxx> wrote: > > Also (to Frank) are you setting thing up so that regex tests look at > > the pure incoming headers, or those that have already been folded to > > all upper or all lower case? > The original header, with the header keyword and leading and trailing > whitespace removed. In some cases the extraordinarily large number of spaces at the start or end of a subject line actually is the marker for a spam. -- Steve Pampling