>-----Original Message----- >From: jdow [mailto:[EMAIL PROTECTED] >Sent: Wednesday, June 16, 2004 11:21 PM >To: [EMAIL PROTECTED] >Subject: Hm, newegg.com confirmation triggers wrong rule > > >2.8 FB_GET_MEDS BODY: /(?:place >f[o0]r|[0o]rder|get\s?(?:y[o0]ur)?|online|quality).{1,7}med[isz]/i > >I'm not sure if this is overly sensitive or not. As it turns out NewEgg >provides a very good pair of tools for determining legitimacy. > >header JD_NEWEGG_FROM From =~ /[EMAIL PROTECTED]/ >describe JD_NEWEGG_FROM Possibly from NewEgg.com >score JD_NEWEGG_FROM -0.1 > >body JD_REALLY_ME /<MY FULL NAME WITH INITIAL>/ >describe JD_REALLY_ME Has my name in salutation >score JD_REALLY_ME -3.0 > >meta JD_NEWEGG (JD_NEWEGG_FROM && JD_REALLY_ME) >describe JD_NEWEGG Good mail from NewEgg.com >score JD_NEWEGG -15.0 > >This needs to be customized for each individual since the good part of >the test is the full name with the middle initial. This will vary by >user. (Their header is "Dear " followed by the full name as it is >on the credit card. >
What line in there email did this rule hit? This is a pretty tight rule. BTW, I love newegg ;) --Chris (Desperate need of a new video card!)
