From: "Bowie Bailey" <[EMAIL PROTECTED]>

From: Mike Spamassassin [mailto:[EMAIL PROTECTED]

I have seen a rule to identify that the "From" address does not have
a "real name", which I presume is the description (i.e. in my case
"Mike Spamassassin").  I would like to have a rule which identifies
emails where the "To" address does not contain either "Mike" or
"Michael".  Has anyone created a similar rule, or can anyone point
me in the right direction.

As has been pointed out before, this is generally a bad idea.  There
are lots of newsletters and mailing lists (including this one) that
do not put your name in the "To" field.

If you want to try it, you can use a rule such as this:

   header NOT_MY_NAME To:name !~ /\b(?:Mike|Michael)\b/i
   score NOT_MY_NAME 0.5
   describe NOT_MY_NAME To does not contain Mike or Michael

Adjust the score to your liking.  Don't put it too high until you are
sure it's not going to produce too may false positives.

If you do this, you may need to whitelist some of your mailing lists
and newsletters.

And that's a problem if the mailing list does not filter spam at all.
The Linux Kernel Mailing List comes instantly to mind.

{^_^}

Reply via email to