-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Chris,
Wednesday, August 20, 2003, 7:15:31 AM, you wrote: CS> What do you guys think of this simple header line: CS> Received: from Evan ([81.68.237.96]) CS> How does this regex look? CS> header WRKSTATION_NAME Received =~ /^from \w+ CS> \(\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]\)/ CS> describe WRKSTATION_NAME Email server didn't have a FQDN CS> score WRKSTATION_NAME 0.01 Your regex matches two emails in my corpus, both from the same foreign source, to two email addresses we've published for foreign vendors. Therefore I can't say it matches spam, but certainly it matches an unusual occurrence. Bob Menschel -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBP0QvJZebK8E4qh1HEQJncgCdGYs4O41GXyb74ubVGQIop3sIEIwAn3S0 0WIsQN/m6F/9ETAREpe2S0fy =ALqJ -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.net email is sponsored by Dice.com. Did you know that Dice has over 25,000 tech jobs available today? From careers in IT to Engineering to Tech Sales, Dice has tech jobs from the best hiring companies. http://www.dice.com/index.epl?rel_code=104 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk