Hello,
I noticed a few messages using [EMAIL PROTECTED] in the headers. (To, From, CC).
The domain part is random, sometimes I see juno.com or hotmail.com or china.com but I have many others.
Can someone help me create a custom rule to trap this? Thank you,
There's literally a * in there, or is that just a figurative thing?
If there's literally a * in there, this should do it, you can modify it for To and Cc pretty readily:
header LOCAL_FROM_ASTERISK From ~= /[EMAIL PROTECTED],50}\..{1,3}/
score LOCAL_FROM_ASTERISK 1.0------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
