Sieve script to block emails sent to text.number@my-address? [SOLVED]
 

I'm getting a lot of backscatter email with this pattern. Is there a way to filter it out? I never use text.number@, but do use text@ so it should be safe enough to filter out the former. The only question is - how?

Thanks!

You can filter such addresses using a regular expression. Before doing so, ensure you are using the controls Fastmail already provides to discard backscatter. Adding custom rules is something to avoid until standard controls fail to achieve the desired effect. If you have already enabled discarding of backscatter, such messages are still leaking through, and you need help setting up a rule with a regular expression, please post again.

A regex suggestion to catch the dominant address type, based on Melomac's in the main Backscatter thread:

\w+\.\d+@sub\.domain\.tld

My backscatter rules based on individual samples number about a dozen now, I'd like to use something more effective, which would be a sieve regex.

FirstLast.nn@sub.domain.tld is the consistent format. After name and . there are 2-5 digits, the subdomain always the same, based on my main account address.

This has been beyond annoying. Yes I have Backscatter enabled in Spam protection, there's no 'mark as read' option.

I just sent a question to Fastmail Support about this. Hopefully they can come up with a solution.

Kurian from Fastmail Support was very helpful. He suggested a script which I then tweaked a bit, and now this issue is solved. Here's the final script:

To quote Kurian:

Interesting thank you....

Is there a way to update the title of a thread to mark is as solved?

I just want to update that this script works perfectly. About 10 spam emails a day now arrive in the trash instead of my mailbox. Hopefully the spammers continue to use the text.number format, because it's easy to filter and is a format I'm not personally using.

You can use discard; stop; } then you wont see them at all...:D:D:D

That's what Kurian suggested, but I prefer the script to mark as read and move to trash to be able to better troubleshoot false positives etc.