SA Rule help question

["Rose, Bobby" <br...@med.wayne.edu>]

Does anyone know how a rule can be written to compare two header markers for similar info?  I don't think SA can do variable storage so I was thinking maybe a regex rule that normalizes what I want to focus on from a header in the regex search of another header.  For example, let's say that I wanted to see if the same email address is in a X-Envelope-From header and Reply-To header?  That's not exactly what I was looking to do but is similar.

Thanks for any suggestions
Bobby Rose



________________________________
This document may include proprietary and confidential information of Wayne State University Physician Group and may only be read by those person(s) to whom it is addressed. If you have received this e-mail message in error, please notify us immediately. This document may not be reproduced, copied, distributed, published, modified or furnished to third parties, without prior written consent of Wayne State University Physician Group. Thank you.

Re: SA Rule help question

[John Hardin <jh...@impsec.org>]

On Fri, 30 Oct 2009, Rose, Bobby wrote:

> Does anyone know how a rule can be written to compare two header markers 
> for similar info?

Take a look at MAILER_EQ_ORG here:

http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?view=log

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   ...the Fates notice those who buy chainsaws...
                                               -- www.darwinawards.com
-----------------------------------------------------------------------
  Tomorrow: Halloween