I'm trying to match this and similar phish mail subjects:

Subject: CONGRATULATION YOUR EMAIL HAS WON $500,000.00USD


postmap -q matches this expression, but this is too broad.
/Subject:.*won.*\d.*/             REJECT Probable phish

In the second, and variations, escaping the $ doesn't seem to work.
/Subject:.*won.*\$\d.*/           REJECT Probable phish
/Subject:.*won \$\d.*/            REJECT Probable phish

What the heck am I missing WRT making $ literal?

-- 
Stan

Reply via email to