>One of my customers got the following. I only saw one email from this IP >address. I started to do a header check for "Warning about your e-mail >account"
I tossed in the following: /^Subject:..?(E-?mail account (disabling|security|utilization) warning|(Important )?notify about (using )?(your|the) e-mail account|Warning about your e-mail account)/ REJECT Subject looked like beagle.k virus Watch the word wrap if you try that. I broke it up at places where there is a space. So when you put it back together, make sure those spaces are there. And if anyone sees a flaw in that regexp, let me know. --Eric
