On Mon, 12 Jul 2010, Michelle Konzack wrote:
From: "Coupon Dept." <CouponDeptdOS_V`CcOP 
IW^GIdATOn2PbJK_/v...@perezcentral.com>

I realize that the spammers will soon recognize that you are filtering them, but for the moment, why not score heavily on the 'unusual' characters inside these coded addresses?

header LOC_WEIRD_FROM From =~ /<[...@\>]*[\^\`\ ]...@\>]*@/
score LOC_WEIRD_FROM 2
# not too high a score, just enough to tip them over...
# note: the '[...@\>]*' confines the match to within a local address part

- C

Reply via email to