On Jan 15, 2019, at 8:46 AM, John Hardin <jhar...@impsec.org> wrote: > >> On Dec 20, 2018, at 6:16 PM, Amir Caspi <ceph...@3phase.com> wrote: >>> >>> header AC_FROM_MANY_DOTS From =~ /<(?:\w{2,}\.){2,}\w+@/ > > Argh. I lost track of that over the holidays. Thanks for the reminder, adding > it now.
Anything interesting with the results on sandboxing this rule? Thanks! --- Amir