@ Axb, >look at it this way.. the less a rule has to do the faster it is and less prone to error/FPs > >If you check ALL headers, SA will go thru long DKIM headers for a pattern which will not show up in DKIM header, it will look in X headers, From, To, etc,etc.. big waste of time and CPU cycles when all you want to check is Received: > >try with:
>header BLAH Received =~/\blayeredvpnzervices\.com\b I have changed all my ALL for Received, thank you for pointing this out. Regards, Sergio
