Bryan K. Walton wrote:
I'm running SA 3.2.0 and am trying to write a custom spamassassin rule
to deal with some recent spam I've been seeing that has 10 additional
spaces in the "To:" header.  For example:

To:           <[EMAIL PROTECTED]>

So, I would like to write a rule that looks for at least two
contiguous spaces before the email address brackets in the To: header.
Accordingly, it seems that the following should work:

header LOCAL_XTRA_SPACES_IN_TO To =~ /\s\s+/
score LOCAL_XTRA_SPACES_IN_TO 0.1 0.1 0.1 0.1
However, when I test this rule, I don't get a hit.  Can anybody please tell
me what I'm doing wrong?

You'll have to use To:raw =~ to prevent the extra whitespace from being removed and even that might not work. I think we fixed it so that it does though.

Daryl

Reply via email to