> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Brent J. Nordquist
> Sent: Monday, December 22, 2003 11:36 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] X-MT-nn: header (variable headers in general)
>
> I've noticed several messages (all spam) with this header:
>
> X-MT-17: 1906684
> X-MT-25: 1906684
> etc.
>
> The value is always the same, but the header name itself
> varies. I could
> define 100 rules for all 2-digit possibilities but next
> they'll probably
> go to three (or sixteen).
>
> Is there a way to write a rule that tests for a header whose
> name matches
> a certain pattern?
>
> --
> Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN
> Other contact information:
> http://kepler.acns.bethel.edu/~bjn/contact.html
> * Fast pipe * Always on * Get out of the way - Tim Bray
> http://tinyurl.com/7sti
>
Hi Brent,
You might be able to use something like this:
full YM_TEST_XMT /^X-MT-[0-9]{1,5}: [0-9]{4,8}/
describe YM_TEST_XMT Message contains X-MT-nn header
score YM_TEST_XMT 0.1
In my quarantine I have several hundred spams that contain this header,
the second set of numbers varies and is not always the same.
Anyone else have a better way to work this rule?
Thanks,
matt
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
