On Mon, 2 Apr 2018 11:33:27 -0700 (PDT)
John Hardin wrote:
> On Mon, 2 Apr 2018, Amir Caspi wrote:
>
> > many organizations -- especially government or other
> > large orgs -- also use firstname.middleinitial.lastname as their
> > user part.
>
> So require a minimum length for the middle part:
>
> header THREE_WORD_MONTY From =~ /(\w+) (\w{2,}) (\w+) <\1.\2.\3/
>
> > A meta rule using multi-dots could work, by either looking for
> > specific keywords or matching with other spammy indicators... but
> > by itself there's no real way to distinguish these AFAICT. I think
> > a meta rule is the only safe way to go, but personally I would
> > _NOT_ use a rule like the one suggested where the quoted part
> > equals the user part, since every firstname.lastname address will
> > get caught that way.
>
> Your comment is valid, but the suggested rule requires three parts,
> so won't hit on firstname.lastname-style mailbox naming.
>
> However, since it's looking for periods, it won't hit the dash- and
> underscore-delimited versions.
It looks for . not \.
