On Sat, 31 Oct 2009, Chris wrote:
Here's a couple of rule I use, can't remember who originally posted
them:
/me raises hand
describe TO_TOO_MANY To: too many recipients
header TO_TOO_MANY To =~ /(?:,[^,]{1,80}){20}/
score TO_TOO_MANY 0.3
describe TO_WAY_TOO_MANY To: way too many recipients
header TO_WAY_TOO_MANY To =~ /(?:,[^,]{1,80}){30}/
score TO_WAY_TOO_MANY 0.3
describe CC_TOO_MANY CC: too many recipients
header CC_TOO_MANY CC =~ /(?:,[^,]{1,80}){15}/
score CC_TOO_MANY 0.3
You can vary the number in {} to whatever suits you.
...and the scores, of course.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...the Fates notice those who buy chainsaws...
-- www.darwinawards.com
-----------------------------------------------------------------------
Today: Halloween
