> -----Original Message----- > From: RC [mailto:[EMAIL PROTECTED] > Sent: Friday, March 19, 2004 4:52 PM > To: [EMAIL PROTECTED] > Subject: first custom header rule? > > > A lot of spam slipping past my bayes db has a To header of: > > To: [EMAIL PROTECTED] > > Am a newbie when it comes to writing rules and regular expressions, > so I took a look at Matt Kettler's howto and made this rule: > > header LOCAL_MINSTERHILL To =~ /minsterhill\.com/i > describe LOCAL_MINSTERHILL sent to minsterhill.com > score LOCAL_MINSTERHILL 6.0 > > Does this look correct to everyone? >
Yes it looks correct. However you may want to add the '@' sign to it so you don't get FPs from domains like sminsterhill.com, or hockeyminsterhill.com, ........ --Chris
