Yet Another Ninja wrote:
> On 12/12/2008 11:54 AM, R.Smits wrote:
>> Hello,
>>
>> Can someone please tell me if this is possible ?
>>
>> header __RULE1_01 From =~ /domain\.com/i
>> header __RULE2_02 Reply-To !~ /domain\.com/i
>> meta RULE03 (__RULE1_01 && __RULE2_02)
>> score RULE03 0.01
>>
>> So can the : !~ be used in a header rule ?
>
> afaik, nope
Sure you can use !~ in header rules. There's even examples of this in
the stock ruleset:
header INVALID_DATE Date !~
/^\s*(?:(?i:Mon|Tue|Wed|Thu|Fri|Sat|Sun),\s)?\s*(?:[12]\d|3[01]|0?[1-9])\s+(?i:Jan|Feb|Ma[ry]|Apr|Ju[nl]|Aug|Sep|Oct|Nov|Dec)\s+(?:19[7-
9]\d|2\d{3})\s+(?:[01]?\d|2[0-3])\:[0-5]\d(?::(?:[0-5]\d|60))?\s+(?:[AP]M\s+)?(?:[+-][0-9]{4}|UT|[A-Z]{2,3}T)(?:\s+\(.*\))?\s*$/
[if-unset: Wed, 31 Jul 2002 16:41:57 +0200]
However, it will only match if a Reply-To header exists. (ie: an absent
header is not a positive).
>
>> I have never tried it before ....
>
> header __RULE1_01 From =~ /domain\.com/i
> header __RULE2_02 Reply-To =~ /domain\.com/i
> meta RULE03 (__RULE1_01 && !__RULE2_02)
> score RULE03 0.01
This works too, but it changes the semantics. It will fire on a message
with no reply-to header.
