> >What happened to the MISSING_FROM rule, which evidently used to exist?
>
> Did it ever exist??
>
> I did a search of my rather comprehensive, but not all inclusive, library
> of SA versions and did not find it:
I know I never saw a hit like that on 2.63. Which is why I wrote a version
of that. It is part of a meta for "empty message" in one of the SARE
rulesets.
Just checking missing from by itself isn't all that good. Its not too
uncommon to see that in automated replies from idiot webservers, and from
some mailing list mail.
Combine missing from with missing body check and you have a moderately good
spam detector. Add missing subject and you've got a pretty guaranteed way
to dump malformed spams.
Loren
