Pedro David Marco skrev den 2018-12-06 22:29:
if your rule worked, it would only match FROM or TO... the great advantage of the ALL is that i "sees" all headers in one string so we can match FROM 'and' TO at the same time
i know from my own rules it sometime possitive to limit data to what is wanted :=)
all header could be upto 64kb if i remember smtp specs well, so i would check this to see if i miss something with it, to tired for today to test it, my own intrest begin to make smtp test rules, inspired from rspamd into spamassassin, i will not disclose it, since spammers might listen here what i do, i stand behind open source, but will not help spammers make a game
i had using rspamd, but lost intrest in it, to complicated for me to manage, and ucl was and is not well supported in linux, why did thay not use xml where there is plenty of tools to build edit and manage it, thanks to spamassassin it not that complicated to make things working
