Here's where my n00b-ness comes out. How do I write this rule to function inversely? Is this on the right track?
header __MP_RCVD_MISMATCH eval:check_mailfrom_matches_rcvd() meta MP_RCVD_MISMATCH (__MP RCVD_MISMATCH > 1) score MP_RCVD_MISMATCH 0.5 I'm not sure how check_mailfrom_matches_rcvd() functions and what it returns if true/false. Thanks! Anthony Hoppe IS Support Technician II Menlo Park City School District (650) 321-7140 ext. 5272 aho...@mpcsd.org ----- Original Message ----- From: "Mark Martinec" <mark.martinec...@ijs.si> To: users@spamassassin.apache.org Sent: Friday, March 1, 2013 12:32:30 PM Subject: Re: Rule to check To and/or CC headers > Another thing I'd like to do, if possible, is check to see if the "From" > address matches the "return path" and add to the spam score if they > do not match. The inverse rule is already there (just use a meta rule negation of it): header RP_MATCHES_RCVD eval:check_mailfrom_matches_rcvd() describe RP_MATCHES_RCVD Envelope sender domain matches handover relay domain tflags RP_MATCHES_RCVD nice score RP_MATCHES_RCVD -0.551 -0.703 -0.551 -0.703 > I know they won't match completely in some cases, The From and envelope sender address do not match in many cases - like in almost all mailing list traffic. A mismatch is not worth more than a small fraction of a score point. Same applies to a mismatch between To/Cc and the envelope recipient address: these never match in mail from mailing lists. Mark
