Re: Spam from addresses where full name mirrors left-hand side of address

On Tue, 3 Apr 2018, RW wrote: On Mon, 2 Apr 2018 11:33:27 -0700 (PDT) John Hardin wrote: On Mon, 2 Apr 2018, Amir Caspi wrote: many organizations -- especially government or other large orgs -- also use firstname.middleinitial.lastname as their user part. So require a minimum length for

Re: Spam from addresses where full name mirrors left-hand side of address

On Mon, 2 Apr 2018 11:33:27 -0700 (PDT) John Hardin wrote: > On Mon, 2 Apr 2018, Amir Caspi wrote: > > > many organizations -- especially government or other > > large orgs -- also use firstname.middleinitial.lastname as their > > user part. > > So require a minimum length for the middle

Re: Spam from addresses where full name mirrors left-hand side of address

On Mon, 2 Apr 2018, Amir Caspi wrote: many organizations -- especially government or other large orgs -- also use firstname.middleinitial.lastname as their user part. So require a minimum length for the middle part: header THREE_WORD_MONTY From =~ /(\w+) (\w{2,}) (\w+) <\1.\2.\3/ A meta

Re: Spam from addresses where full name mirrors left-hand side of address

On Apr 1, 2018, at 11:33 PM, Rich Wales wrote: > > I do realize some perfectly legitimate "From:" lines conform to this same > pattern, and the only way to really tell the difference may be via AI or a > real human brain. Not just "some" legitimate mail... a LOT of legitimate

Re: Spam from addresses where full name mirrors left-hand side of address

On 2 Apr 2018, at 1:33 (-0400), Rich Wales wrote: [I tried asking this question a couple of days ago, but I've seen no signs that it made it out to the list -- possibly because the sample e-mail addresses I included in my question might have caused it to be flagged as spam.  So here goes again,

Spam from addresses where full name mirrors left-hand side of address

[I tried asking this question a couple of days ago, but I've seen no signs that it made it out to the list -- possibly because the sample e-mail addresses I included in my question might have caused it to be flagged as spam.  So here goes again, this time with the addresses mangled a bit.] I see