--On Wednesday, August 06, 2014 4:37 PM +0100 Paul Stead
<paul.st...@zeninternet.co.uk> wrote:
I've been having a play with the two rules mentioned, this seems to work
for me:
header __LOC_DIGITS_FROM From:name =~ /\.\d{7,8}$/
body __LOC_DIGITS_CONFUSER / (\d){7,8} .{1,250} ([0-9a-f]{32})
.{1,250}[\g1|\g2].{1,250}[\g1|\g2]/
Joining these together in a meta rule seems to be picking up the emails
I expect them to.
Would you be willing to share your full finalized ruleset? This spam is
really obnoxious.
Thanks!
--Quanah
--
Quanah Gibson-Mount
Server Architect
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
