Re: [SAtalk] Can you use a matched element in one rule against another match in a second rule?

On Wed, Jan 14, 2004 at 06:10:56PM -0500, Matt Kettler wrote: > At 05:46 PM 1/14/2004, Scott Lambert wrote: > >I would like to be able to match the forged HELO then use it in a > >variable for the two X-AntiAbuse lines. Possible? > > meta rules allow you to do boolean and or arithmetic match-ups.

Re: [SAtalk] Can you use a matched element in one rule against another match in a second rule?

At 05:46 PM 1/14/2004, Scott Lambert wrote: I would like to be able to match the forged HELO then use it in a variable for the two X-AntiAbuse lines. Possible? meta rules allow you to do boolean and or arithmetic match-ups... ie: meta LOCAL_DRUGS_DIET_PAIN (__LOCAL_DRUGS_DIET && __LOCAL_DRUG

[SAtalk] Can you use a matched element in one rule against another match in a second rule?

I've been getting spam with a forged HELO and using the same HELO string in the X-AntiAbuse headers. Here are the relevent lines: Received: from mailtopager.net (ACB8FA80.ipt.aol.com [172.184.250.128]) by mail.lambertfam.org (8.12.10/8.12.10/UTIL-INCH-3.0.10) with SMTP id hBQ27Svo001799