Egad, ... and I just tripped over same rule. Anyway, found and commented that one out. REs I grok, but not Python. At some point I'm inclined to review some of these rules more closely ... notably also determining exactly where they're hitting a false positive match (e.g. line matched). And ... see if the rule might be reasonably "fixable", or ... if it's just too ill conceived for that to be reasonably feasible. At least until then ... that rule is disabled.

From: "Rick Moen" <rick@linuxmafia.com> Subject: (forw) Mail delivery failed: returning message to sender Date: Thu, 17 Aug 2017 06:41:08 -0700

Another overaggressive EximConfig rule. "^.*(ex|former|late).{0,30}(ch(ie|ei)f|comm?ander|defence|dictator|head|leader|minister|president|rebel|ruler).{0,25}(ya|lib(erian?)|nigeria|republic).*\\\$"

----- Forwarded message from Mail Delivery System <Mailer-Daemon@linuxmafia.com> -----

Date: Thu, 17 Aug 2017 06:32:19 -0700 From: Mail Delivery System <Mailer-Daemon@linuxmafia.com> To: rick@linuxmafia.com Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

balug-admin@temp.balug.org SMTP error from remote mail server after end of data: host mx.temp.balug.org [198.144.194.238]: 550-Rejected message body text: Scam text in body: 550-Former chief/commander/dictator/head of 550-state/leader/minister/president/rebel/ruler of Libya 550-. 550-[EximConfig-2.5-temp.balug.org-Body-Reject]