On Thu, Mar 26, 2009 at 09:40:34AM -0400, spamassas...@corwyn.net wrote: > Is it possible to get spamassassin to score email addresses with 4 (or > more) numeric digits in sequence in the user name? > > (seems like a lot of our spam comes in for garbage users with user names > that are strings of numbers).
If you use procmail before spamassassin you can use the following rule which I created with help from someone on this list (thanks Karsten!): # This one matches anything which has more than 5 digits in the name: # catch bad numerical To: headers :0: * ^TO_.*[0-9][0-9][0-9][0-9][0-9] /dev/null #(or a quarantine location...) NOTE: I use *5* digits ever since I found that I was missing out on a distribution list because one of the group's recipients had an address something like "myname2...@somemail.com" It is probably just as easy to create a spamassassin rule along similar lines but you'll have to wait for one of the gurus to come along for that... HTH Mark
pgpCP5VZq95gc.pgp
Description: PGP signature