OT: sa rule question

[Steven Andrews]

I've got an oddball scenario I've got to deal with.  I've got a box
servicing multiple domains and on one domain I've got to take just about
any 3digit format at domain.com and pass it on, that and a few specific
email addresses; anything else, i want to toss.
 
What I'm planning, and please correct my logic if necessary, is to
create a rule to penalize all mail to that domain, say 10 points,
effectively making it high spam.  Then, have another rule that reverses
the penalty (-10) on all mail to xxx at domain.com and to
specificaddress at domain.com
 
I've got the penalty phase rule working and i understand how to do it
for specificaddress at domain.com, but i'm weak with the regex to match any
3 letters at domain.com.
 
anyone got a quick sec to show me an example?
 
Thanks,
 
Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070905/b72a195e/attachment.html