On 5/28/06, Phil (Sphinx) <[EMAIL PROTECTED]> wrote:
I also tried to set up my own rule : header NETW_BCC_MANY ^Bcc =~ /,.*,.*,/
The Bcc header is stripped out by the transport system, so you can't compare on it directly. What you have to discover is whether there are a lot of recipients in the SMTP envelope who do not appear in the To/Cc headers. Generally this has to be done by the MTA (e.g. sendmail, exim, postfix, whatever) because the envelope is not available by the time SpamAssassin gets involved.