On Thu, 5 Feb 2004, Kevin A. McGrail wrote: [snip snip snip...] > body KAM_PHISH_12 /\bname=password/i [snip snip snip...] > I am having troubles getting the rules like name=password to match. Any > insight? You want rawbody, not body. man Mail::SpamAssassin::Conf to see the difference. Regards, David.