Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: users

SA Rule help question

 

 

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded


brose at med

Oct 30, 2009, 12:24 PM

Post #1 of 2 (138 views)
Permalink
SA Rule help question

Does anyone know how a rule can be written to compare two header markers for similar info? I don't think SA can do variable storage so I was thinking maybe a regex rule that normalizes what I want to focus on from a header in the regex search of another header. For example, let's say that I wanted to see if the same email address is in a X-Envelope-From header and Reply-To header? That's not exactly what I was looking to do but is similar.

Thanks for any suggestions
Bobby Rose



________________________________
This document may include proprietary and confidential information of Wayne State University Physician Group and may only be read by those person(s) to whom it is addressed. If you have received this e-mail message in error, please notify us immediately. This document may not be reproduced, copied, distributed, published, modified or furnished to third parties, without prior written consent of Wayne State University Physician Group. Thank you.


jhardin at impsec

Oct 30, 2009, 12:34 PM

Post #2 of 2 (121 views)
Permalink
Re: SA Rule help question [In reply to]

On Fri, 30 Oct 2009, Rose, Bobby wrote:

> Does anyone know how a rule can be written to compare two header markers
> for similar info?

Take a look at MAILER_EQ_ORG here:

http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?view=log

--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin[at]impsec.org FALaholic #11174 pgpk -a jhardin[at]impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...the Fates notice those who buy chainsaws...
-- www.darwinawards.com
-----------------------------------------------------------------------
Tomorrow: Halloween

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.