Forgive me if the newer versions of SA have this built in (I know there's something about defining your local IP addresses), but I had a user ask me today if I could set up our system to flag messages which have only been circulated around our campus.
It seems easy enough for to me hand-craft such a rule, looking for any Received: header that includes an address that isn't one of our own. But I'm curious if this is already included, at some negative score? I'd rather not write my own if it's already in there.
(and from that, I could programatically see which rules are in the report, and then add a header for those messages which were local only, or something)
