On Tue, 23 Sep 2003, Professional Software Engineering
<PSE-L(_at_)mail(_dot_)professi(_dot_)(_dot_)(_dot_):
At 18:16 2003-09-23 -0400, Dick Adams wrote:
At the end of the subject line of some spam, ... spaces followed by
four numbers. Does anyone have a recipe for detecting this?
...
# subject trailed by 4 digits (and optionally, whitespace beyond them)
:0:
* ^Subject:.*[0-9][0-9][0-9][0-9][ ]*$
spew.mbx
Prior to reading this I had sent a valid email what had 4 consecutive
digits at the end of the Subject: so your pattern would have created a
false-positive. So happens that my subject line had alphabetics in there
too (it was a university course code) that might be useable as a
discriminator for identifying real as opposed to mis-identified spam.
The original poster did say "spaces followed by four digits" something
that your pattern does not cope with.
Regards, Trevor
<>< Re: deemed!
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail