Hello!

I'm running SA 2.63 on FreeBSD 4.8. During the recent days, some spam 
messages have come through with quite a low score, but they all seem to 
have one thing in common - empty X-Mailer: header.

I hoped to check for this in a similar way to the standard TO_EMPTY and 
REPLY_TO_EMPTY rules in 20_head_tests.cf. So I added the following to 
local.cf:

header MY_XMAILER_BLANK X-Mailer =~ /^\s*$/
describe MY_XMAILER_BLANK X-Mailer: is empty
score MY_XMAILER_BLANK 5.001

However, this seems to also match these messages where X-Mailer: is not 
present at all - which was not my intention.

How can I check for an empty, but existing header?

TIA,
--
Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/
* Nostalgia isn't what it used to be...

Reply via email to