John Hardin wrote:
> On Thu, 26 Mar 2009, Bowie Bailey wrote:
>
> > spamassas...@corwyn.net wrote:
> > > Is it possible to get spamassassin to score email addresses with 4
> > > (or more) numeric digits in sequence in the user name?
> >
> > header BB_NUMERIC_EMAIL To:addr =~ /\d{4...@]*@/
> > describe BB_NUMERIC_EMAIL Recipient address has 4 or more numbers
> > score BB_NUMERIC_EMAIL 1
>
> This has the same problem as the procmail rule - it will FP on TO:
> addresses with numeric components that are not in your domain. It
> would also not hit for messages where the bogus local recipient was
> on the BCC: list.
True, but being in the local domain was not specified in the question.
And if it is a recipient address, I would assume that the MTA would
refuse non-local domains anyway.
> A more reliable way would be to check the locally-generated Received:
> header for a "for <mum...@mydomain.com>" clause that gives the local
> recipient's address.
Assuming that you are running SA in the delivery thread and not during
the SMTP conversation.
--
Bowie
