On Fri, 12 Jun 2020 09:22:40 -0400 AJ Weber wrote: > I want to try adding a score for a sender whose address uses a TLD > with > 3 chars. > > I realize there are some legit ones, but I'm going to test it with a > low score and see what it catches.
What I did was grep my mail for TLDs seeen in ham and then create a rule __NORMAL_TLD I then score a point for: __HAS_FROM && ! __NORMAL_TLD This probably wont scale well beyond a few users though. If I were a bit more energetic I'd autogenerate the rule from cron.
