Hi, I setup a Ruleset for MyDoom but users are still be notified: Ruleset below: Virus: default yes Virus: Bagle no Virus: MyDoom no Virus: NoVarg no FromOrTo: default yes Is my syntax and wording ok? Mailscanner 4.24-5/Redhat 9/sendmail Thanks Matthew