On Fri, 21 Oct 2011 12:21:35 -0400 Bowie Bailey wrote: > On 10/21/2011 12:16 PM, Bret Miller wrote: > > You could say > > header __LOCAL_MAILENGINE ALL =~ /mailengine.+\.com/i > > > > to match anything between mailengine and .com. > > The problem there is that this would match something like > "mailengineblah.aol.com".
And using ALL means that you would match your own thread: Subject: all spam emails from mailengine1.com servers I'd suggest you use the X-Spam-Relays-Untrusted pseudo header as previously mentioned.
