I'm trying to understand if VERY_SUSP_RECIPS in SA 2.11 does that it's
supposed to do.
Consider the following headers which triggered VERY_SUSP_RECIPS:
From: "Name" <[EMAIL PROTECTED]>
To: "Name 2" <[EMAIL PROTECTED]>,
"Name 3" <[EMAIL PROTECTED]>,
"Name 4" <[EMAIL PROTECTED]>,
"Name 5" <[EMAIL PROTECTED]>,
"Name 6" <[EMAIL PROTECTED]>,
"Name 7" <[EMAIL PROTECTED]>,
"Name 8" <[EMAIL PROTECTED]>,
"Name 9" <[EMAIL PROTECTED]>,
"Name A" <[EMAIL PROTECTED]>,
"Name B" <[EMAIL PROTECTED]>,
"Name C" <[EMAIL PROTECTED]>,
"Name D" <[EMAIL PROTECTED]>,
"Name E" <[EMAIL PROTECTED]>,
"Name F" <[EMAIL PROTECTED]>,
"Name G" <[EMAIL PROTECTED]>
Cc: "Name H" <[EMAIL PROTECTED]>,
"Name I" <[EMAIL PROTECTED]>
I thought VERY_SUSP_RECIPS was supposed to catch a mail sent to
marca@domain1
marcb@domain2
etc...
(i.e. Emails that start the same when spammers sort alphabetically
regardless of the domain and spam ten by ten)
Basically, is VERY_SUSP_RECIPS supposed to catch a mail sent to 10 people
within the same company?
If so, is there a rule that catches my marca, marcb, ... example?
Thanks
Marc
--
Microsoft is to operating systems & security ....
.... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/ | Finger [EMAIL PROTECTED] for PGP key
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
