Re: Counting number of instances of a particular header

2021-05-03 Thread RW
On Mon, 03 May 2021 13:17:59 -0400 Bill Cole wrote: > On 3 May 2021, at 11:18, Dave Funk wrote: > > > > I first crafted a rule: > > header L_MY_HEADER X-My-Header !~ /^UNSET$/ [if-unset: UNSET] > > > > But that would always fire 10 times if there were any instances of > > 'X-My-Header' (eve

Re: Counting number of instances of a particular header

2021-05-03 Thread Bill Cole
On 3 May 2021, at 11:18, Dave Funk wrote: I'm trying to create a rule to count the number of instances of a particular header. IE in email messages there could be zero or more instances of a particular header and I want to know how many there are so I can use that info in a meta to detect a sp

Re: Counting number of instances of a particular header

2021-05-03 Thread RW
On Mon, 3 May 2021 10:18:51 -0500 (CDT) Dave Funk wrote: > I'm trying to create a rule to count the number of instances of a > particular header. ... > What am I doing wrong? How should I craft a rule to count the number > of instances of that header? It's important to understand that when header

Re: Counting number of instances of a particular header

2021-05-03 Thread Henrik K
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/WritingRulesAdvanced You need m-modifier, matched string is all the header values separated by newline, so you want to match all of the line starts. header L_MY_HEADER X-My-Header =~ /^/m tflags L_MY_HEADER multiple On Mon, May 03, 202

Counting number of instances of a particular header

2021-05-03 Thread Dave Funk
I'm trying to create a rule to count the number of instances of a particular header. IE in email messages there could be zero or more instances of a particular header and I want to know how many there are so I can use that info in a meta to detect a spam sign. I first crafted a rule: header L_