spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From RW <rwmailli...@googlemail.com>
Subject Re: Two types of new spam
Date Fri, 03 Jan 2020 18:34:51 GMT
On Fri, 3 Jan 2020 10:09:21 -0800 (PST)
John Hardin wrote:

> On Fri, 3 Jan 2020, Pedro David Marco wrote:
> 
> > header __L_RECEIVED_SPF        exists:Received-SPF
> > tflags __L_RECEIVED_SPF        multiple maxhits=20
> >
> > meta L_RECEIVED_SPF            (__L_RECEIVED_SPF >= 10)
> > describe L_RECEIVED_SPF        Crazy numbers of Received-SFP headers
> > score L_RECEIVED_SPF            20.0
> >
> > but it never seems to match.  
> 
> "exists" is a boolean, it's reasonable that it only returns one hit 
> regardless of the number of instances present.
> 
> Try this instead, to actually match the header(s):
> 
>    header __L_RECEIVED_SPF       Received-SPF =~ /^./

That should be: 

header __L_RECEIVED_SPF       Received-SPF =~ /^./m

Mime
View raw message