I'm running SA 3.2.0 and am trying to write a custom spamassassin rule to deal with some recent spam I've been seeing that has 10 additional spaces in the "To:" header. For example:
To: <[EMAIL PROTECTED]> So, I would like to write a rule that looks for at least two contiguous spaces before the email address brackets in the To: header. Accordingly, it seems that the following should work: header LOCAL_XTRA_SPACES_IN_TO To =~ /\s\s+/ score LOCAL_XTRA_SPACES_IN_TO 0.1 0.1 0.1 0.1 However, when I test this rule, I don't get a hit. Can anybody please tell me what I'm doing wrong? Thanks, Bryan
