> # Hotmail messages have Originating-IP, except mail from abuse/policy. > :0 Hf > * ^From:.*@hotmail\.com\> > * ! ^From:.*\<(postmaster|abuse|policy)@hotmail\.com\> > * ! ^X-Originating-IP: \[[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\] > | formail -b -f -A "$trash_header ordinary hotmail invalid no-orig-ip" > > Is it even possible to do a test like that one from > my .spamassassin.cf file?
You could always leave that rule in procmail above spamassassin and then add a ~/.spamassassin.cf rule. Assuming you expand out $trash_header to be the real header, X-Trash or something. header FAKED_HOTMAIL $trash_header =~ /ordinary hotmail invalid no-orig-ip/ describe FAKED_HOTMAIL A forged From: hotmail.com header was found score FAKED_HOTMAIL 3.5 SA really needs to be an adaptive multinode engine. Then it could see these things itself. But it does an amazingly good job with only a one node categorizing engine. Bob _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
