On Mon, 14 Jan 2019, Amir Caspi wrote:

On Dec 20, 2018, at 6:16 PM, Amir Caspi <ceph...@3phase.com> wrote:

header  AC_FROM_MANY_DOTS       From =~ /<(?:\w{2,}\.){2,}\w+@/

John, could you update the sandbox rule to the above?  That should whittle down 
FPs. I'd recommend leaving it as 2 letters, though, since a number of spammy 
addresses are things like john.at.amazon or some such like that.

John, just curious on whether there are any results from sandboxing this rule, 
and whether it -- or some variant -- might be a good addition?  (Likely within 
a meta, I'm sure.)

Thanks and happy new year!

Argh. I lost track of that over the holidays. Thanks for the reminder, adding it now.



--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  All I could think about was this bear is so close to me I can
  see its teeth. I could have kissed it. I wished I had a gun.
                                             -- Alyson Jones-Robinson
-----------------------------------------------------------------------
 2 days until Benjamin Franklin's 313th Birthday

Reply via email to