On Thu, 17 Aug 2006, Daryl C. W. O'Shea wrote: > John Rudd wrote: > > > Is there a way to make that trigger only on the _first_ (most recent) > > received header? > > Modify the regex so that you can test against the format provided in the > X-Spam-Relays-Untrusted or X-Spam-Relays-External pseudo headers and > anchor it to the beginning. > > Daryl
I thought that X-Spam-Relays-Untrusted has a list of all untrusted relays not just the 'closest'. I think that what Jon (and I) are looking for is the textural equivalent of what "notfirsthop" will do for RBL lookups. IE we want a way to detect, using a regex, "dynamic" or "pool" type hosts that connect directly to our MXs but not hit them if they're using their ISP's smtp gateway. -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{