You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Ned Slider <ne...@unixmail.co.uk> on 2011/02/20 16:42:23 UTC
Comma at end of To:
Hi List,
I noticed in a spam mail today the To: line ended in a comma:
To: user@example.com,
and always being on the lookout for potential new rules decided to
investigate.
Grepping my spam archive I see a small number of matches, but I can't
find any examples in ham.
Here's a quick and dirty rule:
header NSL_TO_ENDS_COMMA To =~ /,$/
describe NSL_TO_ENDS_COMMA To: ends with a comma
score NSL_TO_ENDS_COMMA 0.001
Does anyone else see this?
Re: Comma at end of To:
Posted by John Hardin <jh...@impsec.org>.
On Sun, 20 Feb 2011, Ned Slider wrote:
> Here's a quick and dirty rule:
>
> header NSL_TO_ENDS_COMMA To =~ /,$/
> describe NSL_TO_ENDS_COMMA To: ends with a comma
> score NSL_TO_ENDS_COMMA 0.001
Added to sandbox.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Any time law enforcement becomes a revenue center, the system
becomes corrupt.
-----------------------------------------------------------------------
2 days until George Washington's 279th Birthday
Re: Comma at end of To:
Posted by Benny Pedersen <me...@junc.org>.
On Sun, 20 Feb 2011 16:24:58 +0000, Ned Slider <ne...@unixmail.co.uk> wrote:
> http://pastebin.com/sXbLXFW5
> I don't see any references to roundcube.
received http
Re: Comma at end of To:
Posted by Ned Slider <ne...@unixmail.co.uk>.
On 20/02/11 15:49, Benny Pedersen wrote:
> On Sun, 20 Feb 2011 15:42:23 +0000, Ned Slider<ne...@unixmail.co.uk> wrote:
>
>> Does anyone else see this?
>
> one or more versions of roundcube make this, is it roundcube in your
> samples ?
>
>
>
Not sure, here's a sample:
http://pastebin.com/sXbLXFW5
I don't see any references to roundcube.
Re: Comma at end of To:
Posted by Benny Pedersen <me...@junc.org>.
On Sun, 20 Feb 2011 15:42:23 +0000, Ned Slider <ne...@unixmail.co.uk> wrote:
> Does anyone else see this?
one or more versions of roundcube make this, is it roundcube in your
samples ?