10-01-2003, 06:07 PM -
Submitted regular expression.
This is a condition that mixes regular expression with "standard" text comparison.
I find it very usefull to flag spam that have a string of recipients (it could be in the "To" or "Cc" field), sharing the same ISP in their email address.
Ex: "To: denis@talk21.com; paul@talk21.com; billy@talk21.com;...".
"To" (or Cc) contains (my address):
This can be applied to the "Cc", but also to both the "To" and "Cc" (unless you use a very common address, in which case this could be a genuine email, also sent to a friend with the same ISP).
"To" contains (my address):
"To" contains regular expression:
This is a condition that mixes regular expression with "standard" text comparison.
I find it very usefull to flag spam that have a string of recipients (it could be in the "To" or "Cc" field), sharing the same ISP in their email address.
Ex: "To: denis@talk21.com; paul@talk21.com; billy@talk21.com;...".
"To" (or Cc) contains (my address):
Quote:denis@talk21.comAnd "To" contains regular expression:
Quote:[^s]@talk21.comBasically, it says, if the "To" contains my address, and also contains another "talk21.com" address where the last letter before the "@" is not "s" (the last letter in my name), flag the message.
This can be applied to the "Cc", but also to both the "To" and "Cc" (unless you use a very common address, in which case this could be a genuine email, also sent to a friend with the same ISP).
"To" contains (my address):
Quote:denis@talk21.comAnd "Cc" contains regular expression:
Quote:[^s]@talk21.comor
"To" contains regular expression:
Quote:[^s]@talk21.comAnd "Cc" contains (my address):
Quote:denis@talk21.com