On Wed, Jan 05, 2005 at 11:26:22AM -0600, Steve Bondy wrote:
> Is it safe to write a rule that triggers on the content of the Message
> ID header?

The 70_sare_header.cf found here:

  http://www.rulesemporium.com/rules/70_sare_header.cf 

has a number of message ID rules that work pretty well.  A custom rule
that I wrote does well for me as well:

header    WIERD_MSGID        Message-ID =~ /<[A-Z]{15,40}@/
describe  WIERD_MSGID        Spamlooking Message-ID <[EMAIL PROTECTED]>
score     WIERD_MSGID        0.5

Mike

-- 
/-----------------------------------------\
| Michael Barnes <[EMAIL PROTECTED]> |
| UNIX Systems Administrator              |
| College of William and Mary             |
| Phone: (757) 879-3930                   |
\-----------------------------------------/

Reply via email to