$BillCole++ ; # :-) Thanks Bill.. that was my concern and what i was suspecting... ----------Pedro.D On Saturday, December 8, 2018, 3:59:12 AM GMT+1, Bill Cole <sausers-20150...@billmail.scconsult.com> wrote: On 6 Dec 2018, at 15:25, Pedro David Marco wrote:
> Thanks Bill and John... > Your words make sense to me. It seems that ALL means that SA puts all > headers into a Perl string (including \n chars) and tries the regex... > As John Hardin correctly states, a dot does not match the \n but > this is changed with the "s" regex flag. > In fact it works like a charm if i try a rule like this: > header TESTRULE2 ALL =~ > /From=.*pedro.* To=.*pedro.*/ism > This is a mistery... :-? No mystery: misunderstanding. I thought you were expecting multiple hits, but now I realize that you are just asking about the debug message. This is entirely a debug message artifact. In fact, '/.+/' will match the entire header block, however the 'dbg()' function won't print all of that, apparently due to an expansion artifact in Mail::SpamAssassin::Logger -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Available For Hire: https://linkedin.com/in/billcole