Ken,
I was thinking something more on the lines of this.
[a-z0-9-]+(.[a-z0-9-]+)*@earthlink.net
I just don't know if this syntax is correct. I know that, as a filter, it does not work.
Again, I want to catch spam that was sent to a bunch of @earthlink.net email addresses. The filter must be in two lines. One for the first expression and the second for the second expression. I will check for me@earthlink.net AND [a-z0-9-]+(.[a-z0-9-]+)*@earthlink.net. If I test true, I will transfer the email message to a spam folder.