Received: from adriana (myhost.mydomain.com [XXX.XXX.XXX.XXX]) (authenticated bits=0) by mailserver.mydomain.com (8.12.10/8.12.10) with ESMTP id hASHXruC014504; Fri, 28 Nov 2003 14:33:53 -0300 (ART)
My rule would be: header MY_RULE Received =~ /authenticated/
are you *SURE* that this particular header is really in the message when SA sees it? Note that sometimes headers are added after SA..
Probably your best approach is to first do some tests of the rule with the command-line and an email in a file.. see if the rule works there. This way you can be certian that SA is in fact being fed the header in question.
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk