spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Help! Filter spam with "less than&q

Re: Help! Filter spam with "less than" symbol in recipient

From: John Hardin <jhardin_at_nospam>
Date: Fri Oct 15 2010 - 13:38:01 GMT
To: users@spamassassin.apache.org

On Fri, 15 Oct 2010, Niente0 wrote:

> Yet Another Ninja wrote:
>>
>> On 2010-10-15 14:18, Niente0 wrote:
>>
>> Untested:
>>
>> # To: "<"<info@aags.com>
>> header TO1 To =~ /^\"\<\"\</
>
> Thank you!
> I tested it but it still doesn't work. :-(
>
> For testing purposes, I created a fake user in my Outlook address book, with
> name "<" and email equal to an alias of my email. I sent him (myself) a test
> message and it passed. I examined the header of the incoming message and
> there are spamassassin infos, so it passed through SA rules and ignored the
> "less than" filtering rule...

Outlook may be putting a space like mailers are supposed to:
    "<" <mumble@example.com>

How about:

   header TO1 To =~ /"\S"/

Granted, it's not specific to "<" but a one-character name is also
somewhat suspicious.

-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Sheep have only two speeds: graze and stampede. -- LTC Grossman ----------------------------------------------------------------------- 63 days until TRON Legacy