On 5/10/2011 9:22 AM, Mynabbler wrote: > Bowie Bailey wrote: >>> header __MN_IWCAP Subject =~ /[a-z][A-Z][a-z]/ >>> tflags __MN_IWCAP multiple >>> meta MN_IWCAP __MN_IWCAP >= 3 >> So hopefully you aren't expecting any emails from a Hotmail user >> discussing iPods or iPads....or McDonalds.... :) > It searches for three occurrences or more. So, they would ought to compose a > subject like "Shall I bring my iPod or my iPad to McDonalds", and daft > enough to be using a free mail provider. Yes. In the meantime I only see the > rule hitting spam: > > Subject: Typ eOfCap sule sSa tis fac tor yForVerySt ric tBuy er s > Subject: SeeLate stPill sAma zingAdv ant ages > Subject: TakeAdv an tag eOfToda y' sNe wTabl ets > Subject: No velPillOff erAHoli sti cPro ce ssToHe al th > > ... and it is interesting to see how long it takes for the ruLese tTob ecoMe > oBso letE because of changed tactics after publicly publishing a specific > rule.
Ah. I missed the meta limiting it to 3 or more hits. If it works well, maybe we can add it to the stock ruleset. -- Bowie
