ASSP development mailing list <[email protected]> writes: > >Does ASSP not also check the FROM: line?
It should. But if you put the mail in question into the Analyze-box, you will see, that the from-line is not detected. That is a (very old) bug in the code which comes into play when the from-line is not the first of the lines to check: from|sender|reply-to|errors-to|list-\w+|ReturnReceipt|Return-Receipt-To|Disposition-Notification-To; Should be fixed now in 04. ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2dcopy2 _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
