just right the rule to check for that instead of worrying about which digits are present. Then
you only have to worry about what happens when they change the two characters after the X- :-)
On Dec 22, 2003, at 11:52 AM, Yackley, Matt wrote:
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent J. Nordquist Sent: Monday, December 22, 2003 11:36 AM To: [EMAIL PROTECTED] Subject: [SAtalk] X-MT-nn: header (variable headers in general)
I've noticed several messages (all spam) with this header:
X-MT-17: 1906684 X-MT-25: 1906684 etc.
The value is always the same, but the header name itself varies. I could define 100 rules for all 2-digit possibilities but next they'll probably go to three (or sixteen).
Is there a way to write a rule that tests for a header whose name matches a certain pattern?
-- Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html * Fast pipe * Always on * Get out of the way - Tim Bray http://tinyurl.com/7sti
Hi Brent, You might be able to use something like this:
full YM_TEST_XMT /^X-MT-[0-9]{1,5}: [0-9]{4,8}/ describe YM_TEST_XMT Message contains X-MT-nn header score YM_TEST_XMT 0.1
In my quarantine I have several hundred spams that contain this header, the second set of numbers varies and is not always the same.
Anyone else have a better way to work this rule?
Thanks, matt
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk