On 15/10/2010 12:01, Niente0 wrote:
Hello all, here's my problem:
I'm receiving alot of spam which has a "<" (less than symbol) in the
recipient field. For example, I have this in the header:

To: "<"<abo...@koala.it>

I'd need a spamassassin rule that's able to catch this spam, I had no
success. The "less than" symbol seems to be uncatchable! (even if
backslashed). I'm wondering if there's a rule to filter a recipient name.
For the sender, I normally use this one:

header  FROM1           From:name =~ /EuroPrime Casino/i

so I suppose that for the recipient it should be like this (I didn't find
any documentation about it):

header  TO1           To:name =~ /EuroPrime Casino/i

in particular (to filter the less than symbol):

header  TO1           To:name =~ /\</i

but it seems no to work... Could you please help me? I'm desperate!
Thanks :-)
Have you tried escaping it with \x3c ?

--
Best Regards,

Giles Coochey
NetSecSpec Ltd
NL Mobile: +31 626 508 131
Gib Mobile: +350 5401 6693
Email/MSN/Live Messenger: gi...@coochey.net
Skype: gilescoochey


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to