[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: Is Spamassassin anchored or not ?
From:       "Loren Wilton" <lwilton () earthlink ! net>
Date:       2005-04-30 23:43:28
Message-ID: 0e5901c54dde$692443f0$7d25a8c0 () watson1
[Download RAW message or body]

> Strange as it may seem the spam that I'm trying to catch always comes in
as
> To: Joe Blow <real@example.com>

Late on chiming in on this, but I would write a rule for that specific
address (only) as

header JOEBLOW    ToCc =~ /^\s*Joe\sBlow\s{0,5}<real\@example\.com>/i

If (from what I recall of your original rule) "joe blow" is really a
nmemonic for any two-word name, and it always contains alphas, and they
always have initial caps, I would write:

header JOEBLOW ToCc =~
/^\s*[A-Z]\w+\s{1,5}[A-Z]\w+\s{0,5}<\w+\@\w+\.(?i:com|net|biz|info)>/    #
no /i

Or something close along those lines.

        Loren

[prev in list] [next in list] [prev in thread] [next in thread]