On Tue, Mar 31, 2015 at 08:21:21AM -0500, Randy Saeks wrote: > Thank you, everyone. I added in the space to have the filter be formatted: > > /^Received: from foo.domain/
Do escape the period as "\." and add a space after the domain. > and that has been working. I also added in the other two just to be safe in > case the first didn't catch it. Do NOT use three rules here, two of them are not sufficiently precise. Use *just* the version I posted: > Try (switching to reserved the .example TLD): > > /^Received:\s+from\s+domain\.example\s+/ ... > > because there will always be more text after the domain, e.g. > the final newline if nothing else. -- Viktor.