Matthew.van.Eerde@hbinc.com wrote:
Just a missing . maybe? /(?:\bgoogle\b).*&btnI=/i ^ here
Yes, of course, or better still .+ Thanks for pointing that out.
uri local_GOOGLE_LUCKY /(?:\bgoogle\b).+(?:&btnI=)/i
This doesn't seem to be a very common tactic yet anyway - the rule hasn't hit anything at all, spam or ham, (apart from a test message of my own) since I added it yesterday.
John.