On Jan 26, 2019, at 10:27 AM, John Hardin <jhar...@impsec.org> wrote: > > On Thu, 24 Jan 2019, Amir Caspi wrote: > >> On Jan 15, 2019, at 8:46 AM, John Hardin <jhar...@impsec.org> wrote: >>> >>>> On Dec 20, 2018, at 6:16 PM, Amir Caspi <ceph...@3phase.com> wrote: >>>>> >>>>> header AC_FROM_MANY_DOTS From =~ /<(?:\w{2,}\.){2,}\w+@/ >>> >>> Argh. I lost track of that over the holidays. Thanks for the reminder, >>> adding it now. >> >> Anything interesting with the results on sandboxing this rule? > > Not really, at least not by itself.
It looks like this rule was still being tested last month (I saw it hitting a bunch of my spams), but now appears to be gone (it's not hitting on spams that it normally would). Did you decide it wasn't sufficiently useful, either alone or in meta? Cheers. --- Amir