On Mon, 14 Jan 2019, Amir Caspi wrote:
On Dec 20, 2018, at 6:16 PM, Amir Caspi <ceph...@3phase.com> wrote:
header AC_FROM_MANY_DOTS From =~ /<(?:\w{2,}\.){2,}\w+@/
John, could you update the sandbox rule to the above? That should whittle down
FPs. I'd recommend leaving it as 2 letters, though, since a number of spammy
addresses are things like john.at.amazon or some such like that.
John, just curious on whether there are any results from sandboxing this rule,
and whether it -- or some variant -- might be a good addition? (Likely within
a meta, I'm sure.)
Thanks and happy new year!
Argh. I lost track of that over the holidays. Thanks for the reminder,
adding it now.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
All I could think about was this bear is so close to me I can
see its teeth. I could have kissed it. I wished I had a gun.
-- Alyson Jones-Robinson
-----------------------------------------------------------------------
2 days until Benjamin Franklin's 313th Birthday