Hello all, Please forgive me for consuming off-topic bandwith with this question but I don't really want to subscribe to the Procmail list for what is, I hope, a very simple question.
I get a lot of spam that has a series of numbers in the "To" address, either
in the form To: [EMAIL PROTECTED] or [EMAIL PROTECTED]
I have written an SA rule in my local.cf which quite effectively deals with
this (header MY_ANTI_NUMERICAL_TO To =~ /\d{4,[EMAIL PROTECTED]/) I score it at
3.5 and it works very well.
I am so pleased with this rule that I decided to give my poor old SA a
well-deserved rest from this rubbish and take these spams out at Procmail
time.
Trying to get a Procmail match using the same regex however has completely
eluded me and will quite possibly drive me mad...
I have tried:
:0:
* ^TO_/\d{4,[EMAIL PROTECTED]/
In-SpaM
Or variants such as:
* ^TO_\d{4,[EMAIL PROTECTED]
* ^TO_[0-9]{4,[EMAIL PROTECTED]
* ^TO_.*\d{4,[EMAIL PROTECTED]
* ^To: \d{4,[EMAIL PROTECTED]
* ^TO().*[0-9]{4,}.*
Or about a thousand different combinations of the above.
None of them seem to match.
Regex is not my thing (as you can clearly see!) but I know this list is awash
with regex gurus (some of your stuff makes my eyes water) not to mention
Procmail experts so I hope someone can give me a give fix...
Thanks in advance.
AD
pgptC8Q4zoZGn.pgp
Description: PGP signature
