OT: sa rule question

[Gareth]

How about :-

header LOCAL_TLA_ADDRESS      To =~ /\b\w\w\w at domain\.com\b/i
score LOCAL_TLA_ADDRESS       -10.0

\b matches a word boundry so it basically stops it matching
morethan3letters at domain.com

\w matches a letter

The problem I can forsee is things like mailing lists where the To:
field does not match the recipients email address.

On Wed, 2007-09-05 at 14:01, Steven Andrews wrote:
> I've got an oddball scenario I've got to deal with.  I've got a box
> servicing multiple domains and on one domain I've got to take just
> about any 3digit format at domain.com and pass it on, that and a few
> specific email addresses; anything else, i want to toss.
>  
> What I'm planning, and please correct my logic if necessary, is to
> create a rule to penalize all mail to that domain, say 10 points,
> effectively making it high spam.  Then, have another rule that
> reverses the penalty (-10) on all mail to xxx at domain.com and to
> specificaddress at domain.com
>  
> I've got the penalty phase rule working and i understand how to do it
> for specificaddress at domain.com, but i'm weak with the regex to match
> any 3 letters at domain.com.
>  
> anyone got a quick sec to show me an example?
>  
> Thanks,
>  
> Steve
> 
> ______________________________________________________________________
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!