I have discovered that the headers of legit emails contain a line: Status: R whereas spam contain: Status: (no value) What is the safest way to filter on a variable (Status) which has no value? I thought of: * ^Status: but I don't want _all_ messages with Status to go to my spam box, only spam. Thanks. Scott