On Thu, 26 Mar 2009, Bowie Bailey wrote:
spamassas...@corwyn.net wrote:
Is it possible to get spamassassin to score email addresses with 4
(or more) numeric digits in sequence in the user name?
header BB_NUMERIC_EMAIL To:addr =~ /\d{4...@]*@/
describe BB_NUMERIC_EMAIL Recipient address has 4 or more numbers
score BB_NUMERIC_EMAIL 1
This has the same problem as the procmail rule - it will FP on TO:
addresses with numeric components that are not in your domain. It would
also not hit for messages where the bogus local recipient was on the BCC:
list.
A more reliable way would be to check the locally-generated Received:
header for a "for <mum...@mydomain.com>" clause that gives the local
recipient's address.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
I'll have that son of a bitch eating out of dumpsters in less than
two years. -- MS CEO Steve Ballmer, on RedHat CEO Matt Szulik
-----------------------------------------------------------------------
64 days since Obama's inauguration and still no unicorn!
