On Tue, 9 Feb 2010, John Hardin wrote:
On Mon, 8 Feb 2010, Adam Katz wrote:
Maybe it's just because I'm testing on the command line, but FROM_URI
appears to only fire if there's a character in front of the "www."
portion.
It does. I'm explicitly targeting a quoted comment part. My rule is somewhat
tighter than yours in an attempt to mimimize FPs, admittedly at the cost of
missing some spams.
Tweaked that a bit, it will now hit on www.{etc} at the beginning of an
unquoted comment in the From: header.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Politicians never accuse you of "greed" for wanting other people's
money, only for wanting to keep your own money. -- Joseph Sobran
-----------------------------------------------------------------------
3 days until Abraham Lincoln's and Charles Darwin's 201st Birthdays
