Many people write test rules w/ small negative scores like this:
header SUBJ_FOO_BAR_TEST Subject =~ /foo.*bar/ describe SUBJ_FOO_BAR_TEST Subject contains both "foo" and "bar" in that order score SUBJ_FOO_BAR_TEST -0.001 The logs will then show when SUBJ_FOO_BAR_TEST is hit. I want to go one step further and log what's between the "foo" and the "bar" in the subject. If I do this: header SUBJ_FOO_BAR_TEST Subject =~ /foo(.*)bar/ describe SUBJ_FOO_BAR_TEST Subject contains both "foo" and "bar" in that order score SUBJ_FOO_BAR_TEST -0.001 will the parentheses capture and log the $1 match above? If not, how can I log the string a given rule matches? Can I log the psuedo-headers X-Spam-Relays-Trusted and X-Spam-Relays-Untrusted? If not, can I make SpamAssassin add these headers to the email before its delivered? I'm running on a production system, so I can't do anything too risky-- I just want to test a rule and see what regexps it's matching. -- We're just a Bunch Of Regular Guys, a collective group that's trying to understand and assimilate technology. We feel that resistance to new ideas and technology is unwise and ultimately futile.