Hello Elton,

Friday, November 18, 2005, 8:00:07 AM, you wrote:

ERC> I`m getting some spams with "Return-Path: ([EMAIL PROTECTED])".

>>>Return-Path: <[EMAIL PROTECTED]>
>>>Return-Path: <[EMAIL PROTECTED]>

ERC> Then I did this rule.

ERC> header EL_NOBODY_RP Return-Path =~ /[EMAIL PROTECTED]/i
ERC> describe EL_NOBODY_RP Contém nobody no return path
ERC> score EL_NOBODY_RP 1.0

ERC> What do you think about?
ERC> Is it a good idea?
ERC> Will it give me some ham?

Yes, it will match ham.
* Nov 11 2005, userid/password notification from network54.com
* Nov 5 2005, VCOM Registration confirmation
* Oct 4 2005, sun.com download registration confirmation
* Oct 4 2005, entech inventory program download confirmation


ERC> Elton Carvalho




-- 
Best regards,
 Robert                            mailto:[EMAIL PROTECTED]


Reply via email to