On Thu, 2009-03-26 at 09:40 -0400, spamassas...@corwyn.net wrote:
> Is it possible to get spamassassin to score email addresses with 4
> (or more) numeric digits in sequence in the user name?
Sure...
> (seems like a lot of our spam comes in for garbage users with user
> names that are strings of numbers).
header FROM_NUMS From:addr =~ /\d{4}.*\@/
score FROM_NUMS 1.0
describe FROM_NUMS 4 consecutive digits in the From user part
Be careful to score it too high, though. This does occur in valid,
usually private free-mailer addresses.
Also can be adjusted, if you want to catch any 4 digits, even with
non-digits interspersed.
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
