In an effort to push some border line spam over into full fledged spam i wrote this rule. As i do not know if there is a variable that store the "to" i make it for the whole domain. It has been working quite well with no FP however some real mailing lists have gotten the score up a bit (if they use the email address in a remove link). Does anyone see any problem doing this? and is there any error in my code?
uri HN_EMAIL1 /\@(npn.ca|hypernet.ca|prospectus.com|)/i describe HN_EMAIL1 there is a url with what looks like a email address in it score HN_EMAIL1 3.00 Paul PS. Thanks to Mat for helping me with this.
