Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (nike.apache.org: domain of mkettler_sa@verizon.net
 designates 206.46.173.11 as permitted sender)
Message-id: <4BA826CF.2040305@verizon.net>
Date: Mon, 22 Mar 2010 22:26:23 -0400
From: Matt Kettler <mkettler_sa@verizon.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.8)
 Gecko/20100227 Thunderbird/3.0.3
MIME-version: 1.0
To: users@spamassassin.apache.org
Subject: Re: Rules correct ?
References: <c33829391003220459y7b542a30lff23279aaf471b68@mail.gmail.com>
 <4BA75F68.2090505@unixmail.co.uk> <4BA76008.7090104@unixmail.co.uk>
 <0A0BF68B3C4D4FF2EB603EA1@sodor.cc.columbia.edu>
In-reply-to: <0A0BF68B3C4D4FF2EB603EA1@sodor.cc.columbia.edu>
Content-type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: 7bit

On 3/22/2010 9:11 AM, Joseph Brennan wrote:
>
>
>> header    __MY_FILTRAGE_TO_93      To =~ /\@exxent\.net/i
>
>
> This matches if @exxent.net is in the "To:" header line.  It doesn't
> match all mail sent to recipients at exxent.net-- only mail with their
> address in the "To:" header line.
>
> Of course this may be exactly what you want to do.
>
True, you could change it to ToCc =~ if you wanted to match both To: and
Cc: headers.

header    __MY_FILTRAGE_TO_93      ToCc =~ /\@exxent\.net/i

Not much you can do for BCC'ed mail (or mailing list mail) though.

Another thing which might be useful would to be to add the :addr
modifier. This will cause it to match the email address part of the
header, but not the descriptive text part. However, beware that the
:addr modifier limits you to only one address, so it makes ToCc
useless.  In: "joe@irs.gov"<badguy@example.com>, :addr will extract the
example.com address, not the irs.gov part. This might be overkill, but
there are situations where it is useful.


header    __MY_FILTRAGE_TO_93      To:addr =~ /\@exxent\.net/i