Hello, They are literally using * in the headers for to and from. It could be a response to our bouncing of their Spam. Thanks for the rule!
Frederic Tarasevicius ----- Original Message ----- From: "Matt Kettler" <[EMAIL PROTECTED]> To: "Fred I-IS.COM" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, August 04, 2003 10:34 PM Subject: Re: [SAtalk] Header rule for [EMAIL PROTECTED] > At 04:34 PM 8/4/2003 -0400, Fred I-IS.COM wrote: > >Hello, > >I noticed a few messages using [EMAIL PROTECTED] in the headers. (To, From, CC). > >The domain part is random, sometimes I see juno.com or hotmail.com or > >china.com but I have many others. > > > >Can someone help me create a custom rule to trap this? > >Thank you, > > There's literally a * in there, or is that just a figurative thing? > > If there's literally a * in there, this should do it, you can modify it for > To and Cc pretty readily: > > header LOCAL_FROM_ASTERISK From ~= /[EMAIL PROTECTED],50}\..{1,3}/ > score LOCAL_FROM_ASTERISK 1.0 > > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk