But what I'd really like to do is compare the X-Originating-Email header to the From header's email address (scoring a 2 or 2.5 if they don't match). Is this possible using spamassassin? Looking through the config/rule files, it doesn't appear as though you can extract and save substrings for comparison. Is this correct?
For that, you'd need to write a Mail::SpamAssassin::EvalTests function. Which isn't terribly hard, if you know Perl; looking at some of the other functions in there should make it pretty clear.
Then do a rule like:
header CHECK_ORIG_EMAIL_DOMAIN eval:check_orig_email_matches_from()
describe CHECK_ORIG_EMAIL_DOMAIN X-Originating-Email: header domain doesn't match From:.
score CHECK_ORIG_EMAIL_DOMAIN 1.5
--Kai MacTane ---------------------------------------------------------------------- "Fighting back the tears, mother reads the note again, Sixteen candles burn in her mind..." --Depeche Mode, "Blasphemous Rumours"
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk