Re: Re[2]: Rule Advice

[dennis]

On Jul 14, 2005, at 5:52 AM, Robert Menschel wrote: header FROM_STARTS_WITH_NUMS     From:addr =~ /^\d{6,}\S+\@/i The email address used in the From header begins with 6 (or more) digits. it's not hitting on 360SkinCare.com, but on the user part of the email address (doesn't even look at the domain name). The From line didn't start with numbers (unless I'm missing your point). It was the username. Are you referring to the Message-Id? It's the only line that seems to appear that way. dsc> dinged at least four times for the same issue. If the latter, can I dsc> improve something with the webmail configuration to avoid this since dsc> webmail is a very common tool? You can place the original/dial-up IP address only into the X-Originating-Ip that you are already using, and not a Received header. The first Received header should then show the email coming from your (not dynamic) webmail server instead. Good suggestion. Which rule will no longer get triggered by this change? Thank you for your excellent response.