Bryan K. Walton wrote: > I'm running SA 3.2.0 and am trying to write a custom spamassassin rule > to deal with some recent spam I've been seeing that has 10 additional > spaces in the "To:" header. For example: > > To: <[EMAIL PROTECTED]> > > So, I would like to write a rule that looks for at least two > contiguous spaces before the email address brackets in the To: header. > Accordingly, it seems that the following should work: > > header LOCAL_XTRA_SPACES_IN_TO To =~ /\s\s+/ > score LOCAL_XTRA_SPACES_IN_TO 0.1 0.1 0.1 0.1 > > However, when I test this rule, I don't get a hit. Can anybody please tell > me what I'm doing wrong?
The leading spaces are probably getting stripped. Try it this way: header LOCAL_XTRA_SPACES_IN_TO /To:\s\s/ -kgd
