Well you could make a header rule to look for a time in the date field between 20-24 or 0-6 and give them some points. But I would score it small and see how it pans out. I might try it for kicks this week.
I wouldn't use the Date: field; that can easily be forged. Instead, I'd probably write an eval function to check the Received: headers, to see when this host or this mail network *actually* got the mail.
--Kai MacTane ---------------------------------------------------------------------- "...and she sighed/And she died/In his arms/And he cried: `Eleanor!'" --Concrete Blonde, "The Sky is a Poisonous Garden"
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk