On Sat, 22 Sep 2018 22:55:49 +0100 Michael Grant wrote: > The URIBL plugin looks for URLs in the subject and message body. > > Is there some way to coax it to look in the other headers as well, for > example the From: Reply-to: or the Received headers?
You can create individual rules for "From:" like: askdns AUTHOR_IN_URIBL_BLACK _AUTHORDOMAIN_.multi.uribl.com A 2 However since I wrote this I've had 25 hits compared with 940 for URIBL_BLACK. Only 4 spams hit AUTHOR_IN_URIBL_BLACK without URIBL_BLACK.
