Luis Hernán Otegui wrote:
[snip]how about something like header NONFQHELO_DYN1 X-Spam-Relays-Untrusted =~ /^[^\]]+ rdns=\S*[^a-z]{9}\S+ helo=[^\.\s]+ /i score NONFQHELO_DYN1 3.0 describe NONFQHELO_DYN1 non fqdn helo from dynamic client ?I'll go with this, and tomorrow we'll see. Thanks a LOT to everybody for their suggestions. They've gone right into my documentation folder ;-)
beware. that was a question, not a suggestion! I only ran it on very few messages, so it's completely untested.