OT: sa rule question

[Steven Andrews]

Perfect; thank you for the education on what's going on rather than just
the example.

The domain doesn't have any actual users so nobody to subscribe to
mailing lists.

Thanks,

Steve 

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Gareth
Sent: Wednesday, September 05, 2007 10:53 AM
To: MailScanner discussion
Subject: Re: OT: sa rule question

How about :-

header LOCAL_TLA_ADDRESS      To =~ /\b\w\w\w at domain\.com\b/i
score LOCAL_TLA_ADDRESS       -10.0

\b matches a word boundry so it basically stops it matching
morethan3letters at domain.com

\w matches a letter

The problem I can forsee is things like mailing lists where the To:
field does not match the recipients email address.

On Wed, 2007-09-05 at 14:01, Steven Andrews wrote:
> I've got an oddball scenario I've got to deal with.  I've got a box 
> servicing multiple domains and on one domain I've got to take just 
> about any 3digit format at domain.com and pass it on, that and a few 
> specific email addresses; anything else, i want to toss.
>  
> What I'm planning, and please correct my logic if necessary, is to 
> create a rule to penalize all mail to that domain, say 10 points, 
> effectively making it high spam.  Then, have another rule that 
> reverses the penalty (-10) on all mail to xxx at domain.com and to 
> specificaddress at domain.com
>  
> I've got the penalty phase rule working and i understand how to do it 
> for specificaddress at domain.com, but i'm weak with the regex to match 
> any 3 letters at domain.com.
>  
> anyone got a quick sec to show me an example?
>  
> Thanks,
>  
> Steve
> 
> ______________________________________________________________________
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!