Christopher Lindsey writes:
:0
* ^Comments:.*authenticated\ sender\ is
* ^()\/(Comments:.*authenticated\ sender|X-PMFLAGS)
If you use that, you'll tag as spam (or /dev/null, as this recipe does)
legitimate email sent by Pegasus Mail versions 2.55 and later.
Pegasus Mail hasn't added either the X-Mailer: or Comments: headers since
version 2.54, but it still adds X-PMFLAGS. As a result, trapping based on
the presence of X-PMFLAGS but the absence of the X-Mailer header is no
longer safe. (It would catch this message, for example.)
--
korthmat(_at_)cps(_dot_)msu(_dot_)edu http://www.cps.msu.edu/~korthmat
*** People who send me UCE/UBE will be crucified. ***
"_Troops_ is filmed on location with the men of the Imperial Forces.
All suspects are guilty--period. Otherwise, they wouldn't be suspect,
would they?" --Kevin Rubio's _Troops_