Hi John,
I have not seen a valid email from a .link domain. I would suggest adding
enough weight to them to hold the mail.
MAILFROM <weight> ENDSWITH .link
Replace the <weight> token with the weight you want to add.
This simple test takes less CPU than PCRE.
Darin.
-----Original Message-----
From: John
Sent: Saturday, December 06, 2014 11:20 AM
To: [email protected]
Subject: [MBF] Filter help
I'm getting quite a bit of spam from a sender who's email address ends
with a number followed by .link
for example 2.link
there are various numbers and characters prior to the number.
is there a simple way to catch these. I'm guessing PCRE?
thanks
John Doyle
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to
<[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>