> -----Original Message-----
> From: Leonardo Rodrigues Magalhães [mailto:[EMAIL PROTECTED]
> Sent: Monday, June 16, 2008 2:52 AM
> To: ML spamassassin
> Subject: Re: rule based on time
>
>
>
> John Hardin escreveu:
> >
> > Yes. Write a regex that checks the time from of the Received: header
> > that your MTA adds.
> >
> > Post a sample Received: header from your MTA and I'll take a shot at
> it.
> >
> >
>
> Received line added by my MTA, which is a postfix, would be
> something like:
>
>
> Received: from smtp2.mailcluster.com.br (smtp2.mailcluster.com.br
> [209.85.59.204])
> by correio.mydomain.com.br (Postfix) with SMTP id 22CA4138002
> for <[EMAIL PROTECTED]>; Sun, 15 Jun 2008 21:35:50 -0300
> (BRT)
Try the following, then:
header NIGTHMARE Received =~ m'by correio\.mydomain\.
com\.br\s.*\s(?:2[1-3]|0[0-6])(?::[0-9]{2}){2}'
describe NIGHTMARE Bad things you get during night
score NIGHTMARE 1.000
Ciao,
Giampaolo
>
>
> There's another Received line, which is inserted by the second port
> of postfix, which receives the message AFTER passing amavis ..... but
> as
> it's added after SA rules, it cant be used. So the Received line that
> could be used to match my needs if the one above.
>
> If you could help me with the regex, i would be very glad :)
>
> --
>
>
> Atenciosamente / Sincerily,
> Leonardo Rodrigues
> Solutti Tecnologia
> http://www.solutti.com.br
>
> Minha armadilha de SPAM, NÃO mandem email
> [EMAIL PROTECTED]
> My SPAMTRAP, do not email it
>
>
