Bryan K. Walton wrote:
I'm running SA 3.2.0 and am trying to write a custom spamassassin rule
to deal with some recent spam I've been seeing that has 10 additional
spaces in the "To:" header. For example:
To: <[EMAIL PROTECTED]>
So, I would like to write a rule that looks for at least two
contiguous spaces before the email address brackets in the To: header.
Accordingly, it seems that the following should work:
header LOCAL_XTRA_SPACES_IN_TO To =~ /\s\s+/
score LOCAL_XTRA_SPACES_IN_TO 0.1 0.1 0.1 0.1
However, when I test this rule, I don't get a hit. Can anybody please tell
me what I'm doing wrong?
You'll have to use To:raw =~ to prevent the extra whitespace from
being removed and even that might not work. I think we fixed it so that
it does though.
Daryl