Hi,
There's lately a bunch of new spam who has "Fw: 12345" in the subject (for
example). All this spam dies nicely with Bayes and other regular rules. I'd
like to know, anyway, how could I write a rule that would catch it. This
spam has a common element for every one of its mails. For example, for those
mails whose subject has "Fw: 123456"
In the headers of the mail:
To: [EMAIL PROTECTED]
Subject: /^Fw:\s\d{3,6}$/
In the body of the mail:
/^Subject:\sjohn$/
How could a rule score catch those 3 things at a time? I know how to do it
for the headers part (someone in this lists told me how), but I don't know
how to relate that line of the body with the "To" part of the headers. I
mean, the "john" word in that line of the body matches the "john" word in
the "To". I hope I've explained myself enough :) Thanks for any suggestions
about this.
Ruben
