On 1/1/2016 1:37 PM, Sebastian Wolfgarten wrote:
Dear all,

I wish you and your families a happy, prosperous and healthy year 2016!

As for me, I am spending the first day of the new year battling with some 
custom SA rule that seems to be ignored:

header FR_Spam2 Received =~ /e\d{1,2}+\.(.*)\.fr/i
score FR_Spam2 3.5

Is this rule correct from a syntactical perspective? I would say yes as 
pcregrep is fine with it.

Anyway, here is the scenario that I am trying to handle: I am getting *lots* of spam 
messages in French with random text with each of them contains a line like 
"Received from e(1 or 2 digit number).(some random hostname sometimes with 
dashes and sometimes without).fr“ - here is an example:
I suggest you run it through spamassassin on the command line with -D and check the output. /spamassassin/ -tD < sample-spam.txt /2/>/&1/ | grep -i FR_Spam2

My off the cuff guess is perhaps you are using a glue that tests the spam before that received line is added to the email.

Regards,
KAM

Reply via email to