On 2022-05-10 at 20:20:14 UTC-0400 (Tue, 10 May 2022 18:20:14 -0600)
Philip Prindeville <philipp_s...@redfish-solutions.com>
is rumored to have said:
On May 10, 2022, at 5:57 PM, Martin Gregorie <mar...@gregorie.org>
wrote:
On Tue, 2022-05-10 at 17:29 -0600, Philip Prindeville wrote:
You're correct that they're different in every message received.
So write a rule that fires on any header name that *doesn't* match
anything in the list of legit headers as defined in the relevant
RFCs.
See my original message.
I can't think of a single way to match each header, and then test for
any of them not matching the pattern...
As documented in the POD in Mail::SpamAssassin::Conf, a header rule
checking "ALL:raw" actually matches against the pristine header section,
in which you could check for lines that do not begin with the 'standard'
headers.
Unfortunately, as noted elsewhere in the thread, this pattern uses
one-time header names AND there is nothing wrong about using random
words as header names without a leading 'X-' so it's likely a low-yield
approach.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
