I cannot think of any legimate emails that would contain X-MT in their header so why not
just right the rule to check for that instead of worrying about which digits are present. Then
you only have to worry about what happens when they change the two characters after the X- :-)


On Dec 22, 2003, at 11:52 AM, Yackley, Matt wrote:



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brent J. Nordquist
Sent: Monday, December 22, 2003 11:36 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] X-MT-nn: header (variable headers in general)

I've noticed several messages (all spam) with this header:

X-MT-17: 1906684
X-MT-25: 1906684
etc.

The value is always the same, but the header name itself
varies.  I could
define 100 rules for all 2-digit possibilities but next
they'll probably
go to three (or sixteen).

Is there a way to write a rule that tests for a header whose
name matches
a certain pattern?

--
Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN
Other contact information:
http://kepler.acns.bethel.edu/~bjn/contact.html
* Fast pipe * Always on * Get out of the way - Tim Bray
http://tinyurl.com/7sti


Hi Brent, You might be able to use something like this:

full     YM_TEST_XMT /^X-MT-[0-9]{1,5}: [0-9]{4,8}/
describe YM_TEST_XMT Message contains X-MT-nn header
score    YM_TEST_XMT 0.1

In my quarantine I have several hundred spams that contain this header,
the second set of numbers varies and is not always the same.

Anyone else have a better way to work this rule?

Thanks,
matt


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to