<?xml version='1.0' encoding='utf-8'?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:thr="http://purl.org/syndication/thread/1.0"><updated>2011-04-13T18:40:22Z</updated><id>tag:limedaley.com,2018:/isso/thread/post/procmail-filter-from-addresses</id><title>Comments for limedaley.com/post/procmail-filter-from-addresses</title><entry><id>tag:limedaley.com,2018:/isso/36/299</id><title>Comment #299</title><updated>2011-04-13T18:40:22Z</updated><author><name>Jon Daley</name></author><link href="https://limedaley.com/post/procmail-filter-from-addresses#isso-299" /><content type="html">&lt;p&gt;I got one legitimate email today that failed the above formula, so I changed it to:&lt;/p&gt;
&lt;p&gt;* &lt;sup&gt;From:[&lt;/sup&gt;@]+@alumni[^@]+@alumni&lt;/p&gt;
&lt;p&gt;since all of this sort of spam so far has used my college alumni domain.&lt;/p&gt;
&lt;p&gt;Hopefully, the spamassassin guys can make a rule that works more generally.  Maybe simply looking for three @ characters would work, otherwise, you have to parse the address more fully - ignoring stuff within the quote signs.&lt;/p&gt;</content></entry></feed>