On 8 Nov 2017, at 11:16, Dianne Skoll wrote:
On Wed, 8 Nov 2017 11:02:16 -0500
Rob McEwen <r...@invaluement.com> wrote:
This seems to be catching most of them:
Subject: Invoice [A-Z]{2,3}\d{7}\b
Yes, that'll work. Maybe a better approach is a combo rule that looks
in the headers for Content-Type: .*art/mixed but NOT multipart/mixed
I don't know offhand how to create such a rule in SpamAssassin, but I
imagine
a meta rule could take care of it.
Untested:
description SCC_MIME_BOGUSCT1 Bogus /mixed Content-Type
header SCC_MIME_BOGUSCT1 Content-Type =~ /^(?<!multipart)\/mixed/
score SCC_MIME_BOGUSCT1 2
