Hi, i need some wisdom from SA monks please... Can anyone explain briefly how header ALL work? if i try a rule like this: header TESTRULE1 ALL =~ /.+/ism Using -D debug mode i only "see" the first header of the email... shouldn't i see all headers?
it works nice if i check for something slightly more complex, such as.... header TESTRULE2 ALL =~ /From=.*pedro.* To=.*pedro.*/ism but i am trying to understand how it works... and why i only see one line in Debug mode... Thx, --------PedroD
