i'm wondering if is possibile to put on hold emails that not have authenticated in Recieved header .
i've tryed with a simple negate operazione with pcre
!/^Received:.*Authenticated*/ HOLD
but don't works , nothing is mentioned about negation in pattern, anyone can suggest me a way to have this ?
thanks