Thanks for all helpful replies regarding writing the header rule! You are very right Karsten in what was the issue!
header FROM_EXAMPLE_COM Received =~ /from mail3\.example\.com/i The ? mark was the issue, I replaced that with a . and now things works much better. Greets, Chris On 10/24/07, Karsten Bräckelmann <[EMAIL PROTECTED]> wrote: > > > > > In RE syntax, the question mark means "optional". Thus, a SA rule > containing "mail?" will match "mai" or "mail", but it will *not* match > "mail3"... > > >
