John Hardin wrote:
On Mon, 23 Nov 2009, LuKreme wrote:
On Nov 23, 2009, at 12:05, Philip Prindeville
<philipp_s...@redfish-solutions.com> wrote:
I want to block all messages that I'm getting that have:
To: undisclosed recipients: ;
undisclosed recipients is used for Bcc: mail
I used it all the time. And you WILL 'block' legitimate mail.
Granted, but in metas such a test can be useful:
http://ruleqa.spamassassin.org/?rule=%2FTO_NO&srcpath=jhardin
Speaking of tests, I saved out some messages that should have matched my
rule but didn't into files, and ran them against spamassassin as:
spamassassin -D < /tmp/emails/XXX.eml
and I saw:
[28655] dbg: rules: ran header rule __L_UNDISCLOSED2 ======> got hit: "negative
match"
for the ruleset:
header __L_UNDISCLOSED1 To:raw =~ /undisclosed-recipients: ;/
header __L_UNDISCLOSED2 Cc =~ /^$/
meta L_UNDISCLOSED (__L_UNDISCLOSED1 && __L_UNDISCLOSED2)
describe L_UNDISCLOSED To: list is meaningless and no Cc:
score L_UNDISCLOSED 10.0
but didn't see __L_UNDISCLOSED1 match. Also, what does "negative match"
mean? That it didn't match?
Lots of other rules (like __L_UNDISCLOSED1) didn't match, but I didn't
see debug for those...
Just how do I go about figuring out what the "To:raw" value is (for
example)?
Thanks,
-Philip
