On Fri, 27 Feb 2004 17:21:43 -0500, Stephen Sloan wrote: > I have one SPAMmer that always sends his/her email to the same > (invalid) > user, "JARED". > > Here is a copy of a message with appropriate headers: > > From: "William Lenker" <[EMAIL PROTECTED]> > To: "JARED SLOAN" <[EMAIL PROTECTED]> > Subject: Your application regarding your LOS ANGELES property > Date: Thu Feb 19 01:41:50 2004 EST > MIME-Version: 1.0 > Content-type: text/plain; charset=US-ASCII > X-Spam-Status: No, hits=2.9 required=8.0 > tests=BAYES_70,INVALID_DATE > version=2.55 > X-Spam-Level: ** > X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19- > exp) > > > JARED, > > I received your information recently and, as one of your lenders > looking to > submit a bid on your residence in LOS ANGELES, I would like to ask > that you > review the information below. It appears some data is missing that > is > necessary to process your application. > > Your immediate attention to this matter will facilitate the > processing of > your application. > http://4DB4008737B8400Ffb5e0c43a3e5657b.traditionofbeingthere.com > > Thank you, > > William Lenker > Vice President > Lockland > > Here is the custom rule I wrote: > > header JARED ToCc =~ /"JARED SLOAN" <[EMAIL PROTECTED]> /i > > describe JARED Addressed to JARED > > score JARED 40.00 > > > It's not catching the SPAM, what did I do wrong? I followed the > examples at > http://www.exit0.us/index.php/RM_ToRules, Bob Menschel's To Rules > page.
Hi, Remove the space from the end and it'll work :-) header JARED ToCc =~ /"JARED SLOAN" <[EMAIL PROTECTED]>/i Kind regards, Mat
