-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Chris,

Wednesday, August 20, 2003, 7:15:31 AM, you wrote:

CS> What do you guys think of this simple header line:
CS> Received: from Evan ([81.68.237.96])

CS> How does this regex look?
CS> header WRKSTATION_NAME Received =~ /^from \w+
CS>        \(\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]\)/
CS> describe WRKSTATION_NAME Email server didn't have a FQDN
CS> score WRKSTATION_NAME 0.01

Your regex matches two emails in my corpus, both from the same foreign
source, to two email addresses we've published for foreign vendors.
Therefore I can't say it matches spam, but certainly it matches an
unusual occurrence.

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP0QvJZebK8E4qh1HEQJncgCdGYs4O41GXyb74ubVGQIop3sIEIwAn3S0
0WIsQN/m6F/9ETAREpe2S0fy
=ALqJ
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to