On Wed, Jan 05, 2005 at 11:26:22AM -0600, Steve Bondy wrote: > Is it safe to write a rule that triggers on the content of the Message > ID header?
The 70_sare_header.cf found here: http://www.rulesemporium.com/rules/70_sare_header.cf has a number of message ID rules that work pretty well. A custom rule that I wrote does well for me as well: header WIERD_MSGID Message-ID =~ /<[A-Z]{15,40}@/ describe WIERD_MSGID Spamlooking Message-ID <[EMAIL PROTECTED]> score WIERD_MSGID 0.5 Mike -- /-----------------------------------------\ | Michael Barnes <[EMAIL PROTECTED]> | | UNIX Systems Administrator | | College of William and Mary | | Phone: (757) 879-3930 | \-----------------------------------------/