Doesn't SA (v2.63) have a rule for the "To:" header where it doesn't contain the user? I want to bump that score up. (And I presume it looks at all the "To" headers just as there are multiple sender headers such as Envelope-Sende, Resent-Sender, X-Envelope-From and From, right?)
Or would this be more appropriately handled with some kind of whitelist_to [EMAIL PROTECTED] Or would it be better still to just do it in procmail, something like :0 : * !^(To|Cc|Resent-To):[EMAIL PROTECTED] $MAILDIR/Likelyspam TIA =-=-=-=-=-=-=-=-=-=- generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-= David Stern University of Maryland Institute for Advanced Computer Studies