>-----Original Message-----
>From: Matt Kettler [mailto:[EMAIL PROTECTED]
>Sent: Wednesday, August 11, 2004 11:27 AM
>To: Lean Cornelius; Matt Kettler; spamassassin user group
>Subject: Re: Rule Writing
>
>
>At 10:00 AM 8/11/2004, Lean Cornelius wrote:
>>I did not know that the to: will also match the cc: does the 
>from: also 
>>match the cc ?
>>That might be the reason for the mail being dropped.
>
>No... Cc: is a destination, not a source, so it's considered a 
>To header, 
>not a From header..
>
>Here's the list of headers SA considers to be "from" headers (from SA 
>2.63's EvalTests.pm, sub all_from_addrs())
>
>         $self->get ('From') .                  # std
>          $self->get ('Envelope-Sender') .       # qmail: new-inject(1)
>          $self->get ('Resent-Sender') .         # procmailrc manpage
>          $self->get ('X-Envelope-From') .       # procmailrc manpage
>          $self->get ('Return-Path') .           # Postfix, 
>sendmail; rfc821
>          $self->get ('Resent-From'));
>
>The To: address headers are: (again, 2.63's EvalTests.pm, this 
>time sub 
>all_to_addrs())
>          $self->get ('Resent-To') .             # std, rfc822
>          $self->get ('Resent-Cc'));             # std, rfc822
>
>          $self->get ('To') .                    # std
>          $self->get ('Apparently-To') .         # sendmail, 
>from envelope
>          $self->get ('Delivered-To') .          # Postfix, poss qmail
>          $self->get ('Envelope-Recipients') .   # qmail: new-inject(1)
>          $self->get ('Apparently-Resent-To') .  # procmailrc manpage
>          $self->get ('X-Envelope-To') .         # procmailrc manpage
>          $self->get ('Envelope-To') .           # exim
>          $self->get ('X-Delivered-To') .        # procmail quick start
>          $self->get ('X-Original-To') .         # procmail quick start
>          $self->get ('X-Rcpt-To') .             # procmail quick start
>          $self->get ('X-Real-To') .             # procmail quick start
>          $self->get ('Cc'));                    # std
>
>As well as anything in a Received: line that looks like "from 
>xxx by yyy 
>for <[EMAIL PROTECTED]>"



Matt, if not already there, this seems like great wiki material ;)

--Chris

Reply via email to