In the end this works:
deny condition = ${if match {$h_subject:}{\N\S{25}\N}{1}{0}}
message = irritating
The missing secret sauce was the \N before and after the \S{25}
Not exactly sure why?
A couple of comments - this is helping my spam filter do its job.
I would not have "message =" provide a clear reason ( as it helps the bad guys), yet some word so
you can find the reason later.
Thanks for your help John.
I'm using bogofilter with good results, but wonder if I should try adding spamassassin to the mix.
--
--------------------------------------------------------------------------------
Karl Schmidt EMail Karl@???
Transtronics, Inc. WEB http://xtronics.com
3209 West 9th Street Ph (785) 841-3089
Lawrence, KS 66049 FAX (785) 841-0434
Critical mass; it only takes three people to have a party in a closet. -kps
--------------------------------------------------------------------------------
