>It seems like that the HEADERS tag does not trigger on Recipients.
It checks the headers only -- which may or may not include the recipients,
depending on whether they were in the To:, Cc: or Bcc: (if in the Bcc:,
they won't be listed in the headers). Note that Declude JunkMail will scan
the headers that exist when Declude first sees the E-mail, so it will not
scan any headers that Declude JunkMail adds.
>The X-Note: Recipient(s): shows two emails (materials & material) that are
>listed in our filter file with scores of 10. This SPAM should have had at
>least a score of 20. But it seems like it did not see any of the addresses.
That is correct, it did not see any of the addresses.
>Is there anyway to detect the TO field in this case with HEADERS?
No, but it sounds like this would definitely be worth adding.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
