Re: SA rule for userid in subject?

2006-03-13 Thread Jonathan Engbrecht
Thanks all.  I'm test driving the below-listed rule and it seems to be good and fast as you suggest. I'm a bit jittery on the multi-line rules right now due to an "incident" with what I thought was a brilliant RE that ended up gumming up our system really bad a few weeks back. Thanks again. J

SA rule for userid in subject?

2006-03-10 Thread Jonathan Engbrecht
hello assassin-types, I'm seeing a lot of image-only spam of the following form: rcpt to: @domain.com Subject: Fw: Is there a way to create a simple spamassassin rule that will hit on this? I could use () and \1 in regular expressions and a giant, multi-line matching RE (probably), but I'