<P>[quote user="castoffs"]Any ideas anyone?[/quote]</P> <P>There are over 2600 characters before the Subject: header - what value have you put in the CC number of bytes to search?</P>

<p>I couldn't get Content Control to work at all so tried this "catch all" test:</p><p>IF EXISTS "To" weight 51 tag "to exists" IF EXISTS "Subject" weight 51 tag "subject exists"</p><p> This message was trapped:</p><p>To: xxxxxl@xxxxxxx X-Priority: 1 Priority: urgent Importance: high Date: 23 May 2012 11:12:01 +0200 Subject: New Account Creation (community.pmail.com) Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 Message-ID: <BE492750.4FBCC60C.0597@mail.praktit.se> X-Originating-IP: 62.20.118.73 X-Original-To: xxxxx@xxxxxxx X-PM-PLACEHOLDER:                                          . X-UC-Weight: [##  ] 102 X-CC-Diagnostic: to exists (51), subject exists (51)  </p><p>This one wasn't:</p><p>Return-path: <xxxxxx@yahoo.com> Envelope-to: xxxxxx@xxxxxxxx Delivery-date: Wed, 23 May 2012 05:17:29 -0400 Received: from mailex.mailcore.me ([94.136.40.61]:47587)     by drive7000.station030.com with esmtp (Exim 4.77)     (envelope-from <xxxxxxx@yahoo.com>)     id 1SX7hB-00048n-CN     for xxxxxx@xxxxxxxxx; Wed, 23 May 2012 05:17:29 -0400 Received: from nm14.bullet.mail.ird.yahoo.com ([77.238.189.67])     by mail4.atlas.pipex.net with smtp (Exim 4.71)     (envelope-from <xxxxx@yahoo.com>)     id 1SX7gd-00072r-Df     for xx@xxxxxxxx.com; Wed, 23 May 2012 10:16:55 +0100 Received: from [77.238.189.49] by nm14.bullet.mail.ird.yahoo.com with NNFMP; 23 May 2012 09:17:29 -0000 Received: from [212.82.108.252] by tm2.bullet.mail.ird.yahoo.com with NNFMP; 23 May 2012 09:17:29 -0000 Received: from [127.0.0.1] by omp1017.mail.ird.yahoo.com with NNFMP; 23 May 2012 09:17:29 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 53169.12665.bm@omp1017.mail.ird.yahoo.com Received: (qmail 72959 invoked by uid 60001); 23 May 2012 09:17:28 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1337764648; bh=I0wBFHR4QKnCXqEEWZW1KuSGtCEn7lAbE06/guhHiSg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ILpCpK1r9/lghgspYSdRoQ7lN5E9JAH43PeflaWsqL2C2h77z1mLyNeQfFCiRUYLGk7tt1lXpuARcnZtzmOdq2kt5ZYVTWX3OxcPuNtYqm3TEk8xIAycIVa1ysWbI3iZlg4IvjTzAC6KGvfew7FhwfC37KhsxljGQQgUtyIk6+M= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;   s=s1024; d=yahoo.com;   h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;   b=GXs5nTTHlcCk21a3FLzL3Zw0Vb6tfOps7jrSVIwFgQp7Ge1HZ+DhhFp6z+fhzWY2ZKkImn0w8Va5lqXdIpQC8vJB90pQv+OqRGk86CCcwZFJblaNC+axsISj+4y5xfOqft2adn1htjzAEgLBmbDaIOAsfeqp4vNjJZLvLeTV7kg=; X-YMail-OSG: xUgcYpgVM1m50yw3MDdClHTywOMLywFA5dN1WQQZQ2qossS  4K1SHlhu.PxfRVtv8QYww3znJSjfbZNeEI_qpmGGgXSTNIw0h77frvf.XXB.  rDE1xfERR15BxCRh4ME0WVrAJe6YjhQfljgMK_ZbiISopzIix6_5P9Un6k33  pJ0HUy2WDiIlxAL7UWgGMKsT6b3Pxyio0WIVNLqVpf2GdcSHT3YzNSQ1L7lu  m3Nh4cEvsS1xj0dtSVnLunESxYX0J95WsL5HAqDjRK4SXcTs.x03attxQngg  IlL3ADs5.PjcfvHU0BMbiY5g8egJzxr0Gp2tv0_7JgmNGa47UHfc6ayxS1l.  83J3yY.1wEtBMhIxEXqLOoeA2Vf0ZWEVEvQpYplFBRZXgpmTIsJMCZT2OOst  wAT0g_.ou9yVZgcolzf647wsHEZo1C512cTz19S0- Received: from [195.177.82.11] by web171301.mail.ir2.yahoo.com via HTTP; Wed, 23 May 2012 10:17:28 BST X-Mailer: YahooMailWebService/0.8.118.349524 Message-ID: <1337764648.71911.YahooMailNeo@web171301.mail.ir2.yahoo.com> Date: Wed, 23 May 2012 10:17:28 +0100 (BST) From: xxxxxx xxxxxx <xxxxxxx@yahoo.com> Reply-To: xxxxxx xxxxxx <xxxxxxx@yahoo.com> Subject: Hello To: "xx@xxxxxx.com" <xx@xxxxxxx.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="862858767-998594931-1337764648=:71911" X-PMFLAGS: 570970496 0 1 PS3ZACAQ.CNM                        </p><p>Any ideas anyone?</p><p>Thanks </p>

Hard to tell after copy and paste but it looks like thee is a blank line inserted in header which is the marker to end header and begin body so below the blank line was not checked.

Maybe removing the X-PMFLAGS header would help?

			Michael
--
IERenderer's Homepage
PGP Key ID (RSA 2048): 0xC45D831B
S/MIME Fingerprint: 94C6B471 0C623088 A5B27701 742B8666 3B7E657C