On Wed, 09 Mar 2011 17:19:39 +0000 John Horne <john.ho...@plymouth.ac.uk> wrote:
> Hello, > > Using SA 3.3.1 can I ask how the 'header' command in a rule treats the > Received: headers? For example, if I have: > > header LOCAL_HDR_CHECK Received =~ / from \S+\.plymouth\.ac\.uk / > > Does SA concatenate all the Received headers together, and then check > the regex against that? > It checks until it finds a match on one of the received header. Usually it's better to check the metadata see the section "The 'X-Spam-Relays' Pseudo-headers" in http://wiki.apache.org/spamassassin/TrustedRelays
