Hello dennis,
Thursday, July 14, 2005, 9:03:46 AM, you wrote:
dsc> On Jul 14, 2005, at 5:52 AM, Robert Menschel wrote:
>> header FROM_STARTS_WITH_NUMS From:addr =~ /^\d{6,}\S+\@/i
>> The email address used in the From header begins with 6 (or more)
>> digits. it's not hitting on 360SkinCare.com, but on the user part of
>> the email address (doesn't even look at the domain name).
dsc> The From line didn't start with numbers (unless I'm missing
dsc> your point). It was the username.
Exactly -- the user part of the email address,
"Firstname Lastname" <[EMAIL PROTECTED]>
^^^^^^^^
If that username starts with six digits, it hits that rule, as shown
in Loren's example.
dsc>> dinged at least four times for the same issue. If the latter, can I
dsc>> improve something with the webmail configuration to avoid this since
dsc>> webmail is a very common tool?
>> You can place the original/dial-up IP address only into the
>> X-Originating-Ip that you are already using, and not a Received
>> header. The first Received header should then show the email coming
>> from your (not dynamic) webmail server instead.
dsc> Good suggestion. Which rule will no longer get triggered by this change?
The dynamic IP / dial-up rules will then be avoided.
Bob Menschel
