From: =?utf-8?q?Hubert Lfa?= <[EMAIL PROTECTED]> To: =?utf-8?q?Eustace Oiw?= <[EMAIL PROTECTED]> Subject: =?utf-8?q?Economize 65 % or mo?= =?utf-8?q?re on our prescript?= =?utf-8?q?ions?=
I tried adding rules (SA 2.63) to match "utf-8" in these fields, but they don't work--apparently SA is decoding them before applying the rules. There's no "rawheader" tag, and "full" seems to only include the body.
1) upgrade to 2.64 or higher as soon as practical. 2.63 is vulnerable to a DoS attack if fed a malformed message. While a DoS isn't a huge security risk, it can be a gigantic pain.
Upgrading to 2.64 should be pretty trivial, as the codebase is mostly the same and the requirements are the same.
3.0.1 might be a steeper curve, but adds a lot of nice features if you want/need them.
2) use the following syntax to force raw processing of headers:
header LOCAL_RAW_FROM From:raw =~ /Rawtext/
This syntax is documented in 3.0, but does appear to be supported in SA 2.64.
