[Mimedefang] Fw: [Sare-users] Spam with numbers in subj and body

[Matthew.van.Eerde at hbinc.com]

Jan Pieter Cornet wrote:
> On Wed, Jun 07, 2006 at 12:02:36PM -0400, Kevin A. McGrail wrote:
>>>> body            __KAM_NUMBER2   /\d{1,6}/
> 
> That __KAM_NUMBER2 test is identical to: "body NAME /\d/", or
> it matches every mail that contains a number in the body.

True as is.  It needs to be anchored if we want to catch wholly-numeric bodies.

body _BODY_CONSISTS_ENTIRELY_OF_A_SINGLE_NUMBER /^\d+$/

or with optional leading and trailing whitespace:
body _BODY_CONSISTS_ENTIRELY_OF_A_SINGLE_NUMBER /^\s*\d+\s*$/

or more generically:
body _BODY_IS_JUST_DIGITS_AND_WHITESPACE /^[\s\d]+$/

or allowing newlines too:
body _BODY_IS_JUST_DIGITS_AND_WHITESPACE /^[\s\d\r\n]+$/

-- 
Matthew.van.Eerde (at) hbinc.com               805.964.4554 x902
Hispanic Business Inc./HireDiversity.com       Software Engineer