On 6 Dec 2018, at 15:25, Pedro David Marco wrote:

 Thanks Bill and John...
Your words make sense to me. It seems that ALL means that SA puts all headers into a Perl string (including \n chars) and tries the regex... As John Hardin correctly states,  a dot does not match  the \n  but this is changed with the "s" regex flag.  
In fact it works like a charm if i try a rule like this:
   header        TESTRULE2         ALL  =~   /From=.*pedro.*  To=.*pedro.*/ism 
This is a mistery...  :-?

No mystery: misunderstanding. I thought you were expecting multiple hits, but now I realize that you are just asking about the debug message.

This is entirely a debug message artifact. In fact, '/.+/' will match the entire header block, however the 'dbg()' function won't print all of that, apparently due to an expansion artifact in Mail::SpamAssassin::Logger


--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole

Reply via email to