Hello Nick,
--lint is your friend. Use
> spamassassin --lint
to see problems in your rules syntax.
Thursday, June 3, 2004, 5:52:46 AM, you wrote:
NG> A couple of people on this list have suggested rules such as the
NG> following, but they don't seem to match any incoming messages. Can
NG> anyone see why these rules don't work? (I've attached a zip of some
NG> sample bounces messages I've received).
NG> body __NICK_FAKE_BOUNCE_SUB1 /From\:\s.{0,30}\s*<[EMAIL PROTECTED]>/i
"From" is not part of the body. This will only match if the bounce you're
checking has text matching this pattern.
NG> header __NICK_BOUNCE_FROM From /[EMAIL PROTECTED]/i
The proper syntax for this would be
> header __NICK_BOUNCE_FROM From =~ /postmaster\@/i
^^
Bob Menschel