Hello Nick,

--lint is your friend.  Use
> spamassassin --lint
to see problems in your rules syntax.

Thursday, June 3, 2004, 5:52:46 AM, you wrote:

NG> A couple of people on this list have suggested rules such as the
NG> following, but they don't seem to match any incoming messages. Can 
NG> anyone see why these rules don't work? (I've attached a zip of some 
NG> sample bounces messages I've received).

NG> body   __NICK_FAKE_BOUNCE_SUB1  /From\:\s.{0,30}\s*<[EMAIL PROTECTED]>/i

"From" is not part of the body. This will only match if the bounce you're
checking has text matching this pattern.

NG> header __NICK_BOUNCE_FROM From /[EMAIL PROTECTED]/i
The proper syntax for this would be
>   header __NICK_BOUNCE_FROM  From =~ /postmaster\@/i
                                    ^^
Bob Menschel



Reply via email to