Re: Matching on missing To field?

2022-07-21 Thread Matus UHLAR - fantomas
I have a number of rules that match on the To field, but what to do if the >To field is missing? 10_hasbase.cf:header__HAS_TOexists:To define: metaMISSING_TO !__HAS_TO >Received: from test.com (wsip-72-214-24-18.sd.sd.cox.net [72.214.24.18]) >by

Re: Matching on missing To field?

2022-07-21 Thread Loren Wilton
> The problem I'm having is that my To header rules aren't matching because > there is no To header, > and I'm otherwise unsure what to match on. The only occurrence of the > recipient in the entire email > is in that Received header. > > It does match on "ALL", but I think I need to be more

Re: Matching on missing To field?

2022-07-20 Thread Alex
Hi, >I have a number of rules that match on the To field, but what to do if the > >To field is missing? > > 10_hasbase.cf:header__HAS_TOexists:To > > define: > > metaMISSING_TO !__HAS_TO > > >Received: from test.com (wsip-72-214-24-18.sd.sd.cox.net [72.214.24.18]) > >

Re: Matching on missing To field?

2022-07-20 Thread John Hardin
On Wed, 20 Jul 2022, Loren Wilton wrote: header __HDRS_MISSP ALL:raw =~ /^(?:Subject|From|To|Reply-To):\S/ism That rule just says: look at all the raw header data and match if there's none of Subject, From, To, Reply-To entries. IE a really malformed message. Hum. As I read it, that

Re: Matching on missing To field?

2022-07-20 Thread Bill Cole
On 2022-07-20 at 12:07:04 UTC-0400 (Wed, 20 Jul 2022 09:07:04 -0700) Loren Wilton is rumored to have said: >>> >>> header __HDRS_MISSP ALL:raw =~ /^(?:Subject|From|To|Reply-To):\S/ism >> >> That rule just says: look at all the raw header data and match if there's >> none >> of Subject, From,

Re: Matching on missing To field?

2022-07-20 Thread Loren Wilton
header __HDRS_MISSP ALL:raw =~ /^(?:Subject|From|To|Reply-To):\S/ism That rule just says: look at all the raw header data and match if there's none of Subject, From, To, Reply-To entries. IE a really malformed message. Hum. As I read it, that is "headers misspelled" (not "headers missing")

Re: Matching on missing To field?

2022-07-20 Thread Dave Funk
On Wed, 20 Jul 2022, Alex wrote: Hi, I have a number of rules that match on the To field, but what to do if the To field is missing? Received: from test.com (wsip-72-214-24-18.sd.sd.cox.net [72.214.24.18])         by mail01.example.com (Postfix) with SMTP id 12425B9B         for ; Fri, 15

Re: Matching on missing To field?

2022-07-20 Thread Matus UHLAR - fantomas
On 20.07.22 09:29, Alex wrote: I have a number of rules that match on the To field, but what to do if the To field is missing? 10_hasbase.cf:header__HAS_TOexists:To define: metaMISSING_TO !__HAS_TO Received: from test.com (wsip-72-214-24-18.sd.sd.cox.net

Matching on missing To field?

2022-07-20 Thread Alex
Hi, I have a number of rules that match on the To field, but what to do if the To field is missing? Received: from test.com (wsip-72-214-24-18.sd.sd.cox.net [72.214.24.18]) by mail01.example.com (Postfix) with SMTP id 12425B9B for ; Fri, 15 Jul 2022 18:50:34 -0400 (EDT) I