On Fri, 29 Dec 2006, vertito wrote:

>  You can configure your MTA to restrict the number of recipients
> and deny any excess ones.

That has zero to do with the CC: header, as the MTA will block based
on the number of SMTP envelope recipients rather than the message
headers.

Monty Ree wrote:

> I have received some spam mails which have lots of mail-lists
> randomly at CC(carbon copy). So I would like to filter spam-mail
> which has over 10 e-mail address at CC or BCC like below.

Here's what I use:

describe CC_TOO_MANY Cc: too many recipients
header   CC_TOO_MANY Cc =~ /(?:,[^,]{1,50}){20}/

If you want to score at ten, change it to {10} instead of {20}.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Liberals love sex ed because it teaches kids to be safe around their
  sex organs. Conservatives love gun education because it teaches kids
  to be safe around guns. However, both believe that the other's
  education goals lead to dangers too terrible to contemplate.
-----------------------------------------------------------------------
 676 days until the Presidential Election



Reply via email to