>a ten digit number followed by @mms.alltel.com, so I created the
>following rule in local.cf:
>
>header Alltel_Pics From =~ /[EMAIL PROTECTED]/
>describe Alltel_Pics Fixing Alltel's Picture Mail
>score Alltel_Pics -100
>
>However, they are still getting whacked. I hesitate to use
>whitelist_from [EMAIL PROTECTED], because then any address there will
>work and I'll be open to a lot of spam. At least if they have to hit
>a ten digit number, it will be less.
>
>What am I doing wrong with the rule? Thanks in advance everyone!
I can't see anything wrong with the rule, so there must be something else
going on here. Maybe the host part isn't all lower-case? A /i on the end
of the regex would cure that.
Since we don't have the email to play with, there isn't much we can do but
offer suggestions.
My suggestion is to put the problematic email into a text file (including
the headers) and then manually feed it to SA:
spamassassin -t <bogus-mail.txt
If you do this you will see the score output, and you can try whittling on
your rule(s) until they do what you want.
Loren