Arvind Marathe: > :0 > * ^X-Spam-Level: ***** > possible-spam/ Bob Cox: > Won't that rule match anything with a 'X-Spam-Level:' header ? Yes, the asterisks in the rule are being treated as regular expression characters (match any of preceding character). You want: :0 * ^X-Spam-Level: \*\*\*\*\* possible-spam/ You may want to check the other rules, too. -- Jon Dowland