Hi, in order to separate backscatter from "real" bounces, I would like to write rules that match only the headers within attachments > Content-Description: Undelivered Message > Content-Type: message/rfc822
body rules appear not to catch them ... can this be done in SA 3.2.3 and/or SA 3.1.8? If I am not mistaken, full rules will also match the headers of the bounce that contains the attachment and are therefore no option either, apparently. Regards, wolfgang