Re: Pattern SPAM seen today with full-name ending with dot-digits.

2014-08-05 Thread Alex
Hi, On Tue, Aug 5, 2014 at 1:20 PM, Andy Balholm wrote: > > On Aug 5, 2014, at 10:16 AM, Philip Prindeville < > philipp_s...@redfish-solutions.com> wrote: > > > Saw the following SPAM: > > > > http://pastebin.com/eLm1iRpN > > That’s the same group of spams that I just posted a rule for, but I’m

Re: Pattern SPAM seen today with full-name ending with dot-digits.

2014-08-05 Thread Andy Balholm
On Aug 5, 2014, at 10:16 AM, Philip Prindeville wrote: > Saw the following SPAM: > > http://pastebin.com/eLm1iRpN That’s the same group of spams that I just posted a rule for, but I’m looking at the repeated numbers in the last paragraph.

Pattern SPAM seen today with full-name ending with dot-digits.

2014-08-05 Thread Philip Prindeville
Saw the following SPAM: http://pastebin.com/eLm1iRpN Note that: header From:name =~ /\.\d{7,8}$/ seems to detect it reliably. Easier than trying to detect the “notice” or “ref.no.” etc. that some have at the end of the subject line.