On 12 Oct 2015, at 12:41, emailitis.com wrote:
Can a regex expert help me identify why that did not trigger one of
the
CGK_ZCSEND_x rules?
Not without seeing the headers of the message in question *as they are
seen by SA*. However, I can offer a few generic tips:
Header rules match against headers. Depending on how you have integrated
SA, the headers that SA sees may or may not include the envelope sender
in a header (such as the "Return-Path" header that Sendmail and Postfix
commonly add) and may or may not include a Received header added by the
local MTA in a format that SA can parse and will trust. You seem to be
using qmail, an antique piece of abandonware that creates idiosyncratic
Received headers which may require special SA config to be detected
properly.
Your "From" rule will only match against the From header, not against
any other header or the envelope sender, which may or may not be in any
header and in this case has a pattern that implies that it is unlikely
to be the same as the From header address.
Your "All" rule will only match a header named "All" which is unlikely
to exist. If you want it to match against all headers, you MUST use
'ALL' rather than 'All' or 'all' or any other capitalization pattern.
