points if the message arrives between, say, 1:00 and 6:00 (I should set it from 21:00 to 8:00 since this is an office and I don't think someone is going to send anything work-related at this time, but just to be careful... ). Do you know how can this be done? Do you think it could give too many false positives?

I would be nervous about such a rule with any appreciable score, but you might be able to get away with adding a couple of points for receipt at an odd time of day.

While I'm not sitting in an office at the moment (left there an hour ago) I do deal in a sideline business with people literally all over the world. So it isn't the slightest unusual to get mail at 4AM from the UK or the middle of the night from China.

Actually writing the rule is likely to be a bit messy unless you do it as a plugin. A normal regex can only test for equality. So you would have to write a regex that would match a selection of times in the top received header, which is presumably supplied by your system and has the correct local time.

       Loren

Reply via email to