On Tue, 31 Aug 2010, Len Conrad wrote:
At 12:41 AM 8/31/2010, you wrote:
On Mon, 30 Aug 2010, Len Conrad wrote:
for
1. rejects of high-rate @sender.garbage.domain or rhsbl garbage domains
Can you provide a sample of each pls?
My msg had nearly 250+ examples of 12-letter <garbage-domain>.tld
But it had no example of such actually being used in a message header or
body.
Len
Detecting either of those _should_ be trivial, but I'd like to see a
sample before suggesting rules.
Okay, how well do these work for you?
header FROM_12LTRDOM From =~ /\...@[a-z]{12}\./
uri URI_12LTRDOM m,://(?:[^./]+\.)*[a-z]{12}\.[^./]+/,
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
It is not the business of government to make men virtuous or
religious, or to preserve the fool from the consequences of his own
folly. -- Henry George
-----------------------------------------------------------------------
108 days until TRON Legacy
