Kevin Gagel wrote: > Based on the following header info, is my rule built correctly? > > Received: from (127.0.0.1) by MAIL3041.flowgo.com (PowerMTA(TM) > v1.5); Mon, 22 Jul 2002 17:19:56 -0700 > (envelope-from <[EMAIL PROTECTED]>) > > I want to make a rule that will tag it bassed on the flowgo.com in > the recieved line. If I'm understanding the rules correctly I'd do > this: > > header REC_HEADER Recieved header =~ /flowgo\.com/ > describe REC_HEADER Recieved header contais a flowgo.com server > score REC_HEADER 5
Close. First up, you've misspelled Received. Secondly, you don't need that second "header" in the first line. Change it to: header REC_HEADER Received =~ /flowgo\.com/ describe REC_HEADER Received header contains a flowgo.com server score REC_HEADER 5 And you should be all set. rOD. -- "Come back! I'm a god to you! Worship me or fear my wrath! Oh, please fear my wrath! Please. Call me." >> Doing the blogging thang again at http://www.groovymother.com/ << ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
