-----Original Message-----
From: Wolfgang Zeikat [mailto:[EMAIL PROTECTED]
Sent: Friday, October 13, 2006 9:49 AM
To: users@spamassassin.apache.org
Subject: Re: Is there any way to score this?
On 10/13/06 17:34, Wolfgang Zeikat wrote:
> Received =~ /from \S{1,30} \(unknown
> \[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]\)\s+by\s+your\.smtp\.server\.de
> sy/
>
> Replace "your.smtp.server" by your server's name ...
Oops, and leave out "\.desy" of course ;) And - just to make sure - that's a
header rule.
>
> Cheers,
>
> wolfgang
>
So does:
header UNKNOWN Received =~ /from \S{1,30}
\(unknown\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]\)\s+by\s+mail\.slave-tothe-b
ox\.net/
score UNKNOWN 3
describe UNKNOWN Unknown hosts
Look about right?
James
