On Mon, 2018-06-18 at 14:26 +0100, RW wrote: > On Mon, 18 Jun 2018 14:11:16 +0100 > Martin Gregorie wrote: > > > > I normally use an awk script for this sort of job because they are > > short, easy to write and run fast. > > There's no point in the OP doing this, since sa-learn ignores these > headers. > Sure, but other external tools are often easier to write and/or work better if there's only the one set of SA headers in a message. Plus I find its easier to check the operation of a new or modified rule if the test message doesn't have SA headers in it.
That's why I clean SA headers out of my spam collection, but of course YMMV. Martin