Hello,
They are literally using * in the headers for to and from.
It could be a response to our bouncing of their Spam.
Thanks for the rule!
Frederic Tarasevicius
----- Original Message -----
From: "Matt Kettler" <[EMAIL PROTECTED]>
To: "Fred I-IS.COM" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Monday, August 04, 2003 10:34 PM
Subject: Re: [SAtalk] Header rule for [EMAIL PROTECTED]
> At 04:34 PM 8/4/2003 -0400, Fred I-IS.COM wrote:
> >Hello,
> >I noticed a few messages using [EMAIL PROTECTED] in the headers. (To, From,
CC).
> >The domain part is random, sometimes I see juno.com or hotmail.com or
> >china.com but I have many others.
> >
> >Can someone help me create a custom rule to trap this?
> >Thank you,
>
> There's literally a * in there, or is that just a figurative thing?
>
> If there's literally a * in there, this should do it, you can modify it
for
> To and Cc pretty readily:
>
> header LOCAL_FROM_ASTERISK From ~= /[EMAIL PROTECTED],50}\..{1,3}/
> score LOCAL_FROM_ASTERISK 1.0
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
>
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
