On Dec 20, 2018, at 6:16 PM, Amir Caspi <ceph...@3phase.com> wrote:
>
> header AC_FROM_MANY_DOTS From =~ /<(?:\w{2,}\.){2,}\w+@/
>
> John, could you update the sandbox rule to the above? That should whittle
> down FPs. I'd recommend leaving it as 2 letters, though, since a number of
> spammy addresses are things like john.at.amazon or some such like that.
John, just curious on whether there are any results from sandboxing this rule,
and whether it -- or some variant -- might be a good addition? (Likely within
a meta, I'm sure.)
Thanks and happy new year!
--- Amir
