I am trying to create a rule that scores TLD's in received headers if they are not certain TLD's. What I have so far:
header __GC_TLD_com Received !~ /\.com\b/i header __GC_TLD_net Received !~ /\.net\b/i header __GC_TLD_org Received !~ /\.org\b/i header __GC_TLD_edu Received !~ /\.edu\b/i header __GC_TLD_uk Received !~ /\.uk\b/i describe GC_TLD Not common TLD meta GC_TLD (( __GC_TLD_com + __GC_TLD_net + __GC_TLD_org + __GC_TLD_edu + __GC_TLD_uk) > 0) score GC_TLD 2 The problem I am having is each rule tests all received headers so if the email passes through a .com and a .net TLD then the rule is triggered. So what I think I need to do is have 1 rule that checks each received header for all TLD's at once instead of each received header for each TLD. So I'm thinking I need an or operator if it exists, so something like this?: header GC_TLD Received !~ /\.com\b/I || Received !~ /\.net\b/I || Received !~ /\.org\b/I || Received !~ /\.edu\b/I || Received !~ /\.uk\b/I describe GC_TLD Not common TLD score GC_TLD 2 Can someone help me out or point me in the right direction? Thanks, Dave Grolen Communications da...@grolen.com<mailto:da...@grolen.com> http://www.grolen.com/ Like Grolen on Facebook! 603-645-0101 Option 7, x304
