Detecting missing headers

[Loren Wilton <lw...@earthlink.net>]

I've noted that those annoying bodyless spams also lack a To: header.  Now,
while someone might send you a spam with only a subject line, it is unlikely
that a real mailer will send you a message without a To: line, AND without a
body.  And for that matter, with a blank subject.  Be kinda useless,
wouldn't it?

So how do I detect that the To header is missing?  The SA rules for header
matching say that the tests have to match the header capitalization exactly,
so that Cc won't match a misformatted CC.  This implies to me that To is
going to have a hard time matching a field that isn't there so that I can
check the text and see if it is empty.

Any suggestions?

        Loren