On Fri, 5 Dec 2014, Gibbs, David wrote:
On 12/4/2014 10:22 AM, Gibbs, David wrote:
I've seen a number of spam messages come through with multiple header
lines ... some of them are blank.
Any suggestions for a rule to trap this?
FWIW: here's the rule I came up with ... seems to work adequately.
header __COUNT_SUBJ Subject =~ /.*/
You might want to be a little bit more paranoid and explicitly anchor
that:
header __COUNT_SUBJ Subject =~ /^.*$/
I know .* is greedy and shouldn't overlap on multiple matches, but this
helps make sure.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Our government wants to do everything it can "for the children,"
except sparing them crushing tax burdens.
-----------------------------------------------------------------------
10 days until Bill of Rights day
