On Sun, Oct 08, 2006 at 02:13:19AM -0700, John Rudd wrote: > > Is there a way to have spam assassin look at the first received header only? > > I want to check certain characteristics of the first received header > (for the current relay), like whether or not it looks like a dynamic > hostname, etc., and boost the score based on that. Can I do that with > regular rules, or do I need to do that with a plug-in, or what? (or, > has someone else already done that?)
This is closely related to the question I was asking a few days ago, and Justin Mason pointed me to the answer: <http://wiki.apache.org/spamassassin/TrustedRelays> To check the first received header, you need to make sure that you have TrustedNetworks correctly configured, and write your regex to only look at the first entry within the 'X-Spam-Relays-Untrusted' pseudoheader. Also, IIRC there's already a set of rules closely related to what you're asking, so you can base it off those. Try looking for the definition of HELO_DYNAMIC_IPADDR and related rules. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services
