Hello Ruben,
Was it you who posted this rule? Sorry if yes and I mentioned Loren's name.
Would not it be
ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: (?:|hello|hey)*\1\b/i
Please notice the first |, this would fall for "no word" between Fw: and
recipient name.
Thank you for your help.
Irina
====================
----- Original Message -----
From: "Ruben Cardenal" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Friday, February 10, 2006 10:55 AM
Subject: RE: Little custom rule
> Hi,
>
> You just need to modify a bit the regexp:
>
> ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: (hello)*\1\b/i
>
> That would match both cases. If you want to include another words apart
> from "hello" do it with (word1|word2|etc).
>
> Ruben
>
> > -----Mensaje original-----
> > De: Irina [mailto:[EMAIL PROTECTED]
> > Enviado el: viernes, 10 de febrero de 2006 16:30
> > Para: Loren Wilton; users@spamassassin.apache.org
> > Asunto: Re: Little custom rule
> >
> > Hello Loren,
> >
> > First thank you for this rule - it helped a lot with catching this kind
of
> > spam.
> >
> > There is another one, similar to this, but with a word in between Fw:
and
> > name. It looks like this
> > Subject: Fw: hello aallena
> >
> > Your rule filters for
> > Subject: Fw: aallena
> >
> > where aallena is a recipient ([EMAIL PROTECTED] let's say)
> >
> > I am sorry but I am not sure where hello would go to when I write
another
> > rule. Could you help if you don't mind?
> >
> > Thank you for your help in advance.
> >
> > Irina
> > ===========================
> >
> > ----- Original Message -----
> > From: "Loren Wilton" <[EMAIL PROTECTED]>
> > To: "Ruben Cardenal" <[EMAIL PROTECTED]>; <users@spamassassin.apache.org>
> > Sent: Monday, February 06, 2006 3:52 PM
> > Subject: RE: Little custom rule
> >
> >
> > > >It seems it doesn't want to work, it just didn't match this:
> > > >
> > > >From: "rkfexklqc" <[EMAIL PROTECTED]>
> > > >To: [EMAIL PROTECTED]
> > > >Subject: Fw: oscarbru
> > >
> > > Ah, ok. As I said, it would match names in <> characters, and not one
> > of
> > the dozen or so other valid formats. You have one of those other
formats.
> > Try this instead (also untested):
> > >
> > > header __LW_BLAH1 ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw:
> > > \1\b/i
> > >
> > > Loren
> > >
> > >
> >
>
>
>
