Hi John,

I have not seen a valid email from a .link domain. I would suggest adding enough weight to them to hold the mail.

MAILFROM    <weight>    ENDSWITH    .link

Replace the <weight> token with the weight you want to add.

This simple test takes less CPU than PCRE.

Darin.

-----Original Message----- From: John
Sent: Saturday, December 06, 2014 11:20 AM
To: [email protected]
Subject: [MBF] Filter help

I'm getting quite a bit of spam from a sender who's email address ends
with a number followed by .link
for example   2.link
there are various numbers and characters prior to the number.
is there a simple way to catch these. I'm guessing PCRE?

thanks
John Doyle



#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>

Reply via email to