<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">I think that the <span id="result_box"
class="short_text" lang="en"><span class="">parenthesis</span></span>
are <span id="result_box" class="short_text" tabindex="-1"
lang="en"><span class="">not necessary</span></span> and the @
must be escaped<br>
<br>
^.*airecom612\+97d7d60a91d9695c9a4240f92d5c3cae\@<br>
<br>
for check on <a class="moz-txt-link-freetext"
href="https://regex101.com">https://regex101.com</a> you can try
the regex on complete mail source code like this:<br>
<br>
......<br>
......<br>
<pre>X-Received: by 10.194.204.198 with SMTP id la6mr8163648wjc.2.1476250191474;
Tue, 11 Oct 2016 22:29:51 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.194.122.104 with HTTP; Tue, 11 Oct 2016 22:29:51 -0700 (PDT)
From: Indunil Jayasooriya <a class="moz-txt-link-rfc2396E" href="mailto:indunil75@gmail.com"><indunil75@gmail.com></a>
Date: Wed, 12 Oct 2016 10:59:51 +0530
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:CAJF2yJRrygrg6myKO_Trd=2OQUP7Qd3LkObE=XH=4h3he848Ew@mail.gmail.com"><CAJF2yJRrygrg6myKO_Trd=2OQUP7Qd3LkObE=XH=4h3he848Ew@mail.gmail.com></a>
Subject: spam assassin rule to block a From address
To: <a class="moz-txt-link-abbreviated" href="mailto:amavis-users@amavis.org">amavis-users@amavis.org</a>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: <a class="moz-txt-link-abbreviated" href="mailto:amavis-users@amavis.org">amavis-users@amavis.org</a>
......
.......
</pre>
</div>
<blockquote
cite="mid:CAJF2yJRT1jrjadPCch3eREGu+u2Y7gqGiQXavtnVkZPdtmbf-g@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px
solid rgb(204,204,204);padding-left:1ex"
class="gmail_quote">
<div bgcolor="#FFFFFF">
<div class="gmail-m_-7209696962865706134moz-cite-prefix">
<br>
are you for usage of '^' ? because the string not
start with sender address, you can try withou it.<br>
</div>
</div>
</blockquote>
<div><br>
<br>
^ - start matching from the beginning of the string in
regex<br>
<br>
</div>
<div>anyway, without it, I can try.<br>
</div>
<div><br>
</div>
<div> <br>
<br>
</div>
<div>here's my new file ( without ^ )<br>
<br>
my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file <br>
<br>
header SPAM11OctF1 From =~
/(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i<br>
describe SPAM11OctF1 From address contains the word
airecom612@<br>
score SPAM11OctF1 10.0<br>
<br>
<br>
</div>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px
solid rgb(204,204,204);padding-left:1ex"
class="gmail_quote">
<div bgcolor="#FFFFFF">
<div class="gmail-m_-7209696962865706134moz-cite-prefix">
<br>
Can you post to us a source code of spam mail?<br>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>here's the log. <br>
</div>
<div><br>
Oct 12 02:55:37 mailgw amavis[1054]: (01054-03) Passed
CLEAN [190.123.45.119] [190.123.45.119] <a
moz-do-not-send="true"
href="mailto:airecom612%2B97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net</a>
- <a moz-do-not-send="true"
href="mailto:rept@mydomain.com">rept@mydomain.com</a>
Message-ID: <a moz-do-not-send="true"
href="mailto:97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net">97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net</a>
mail_id: dOZ+MykHl9Z2 Hits: -0.047 size: 11977 queued_as:
32CE11084D 9548 ms <br>
<br>
<br>
</div>
<div>Ideas are welcome. <br>
<br>
<br>
</div>
<div><br>
<br>
</div>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px
solid rgb(204,204,204);padding-left:1ex"
class="gmail_quote">
<div bgcolor="#FFFFFF">12 Calcinaia (PI)<br>
<div class="gmail-m_-7209696962865706134moz-signature">
Tel <a moz-do-not-send="true" target="_blank"
value="+39058759108" href="tel:%2B39058759108">+39058759108</a><br>
cell 340 8398772<br>
E-mail: <a moz-do-not-send="true" target="_blank"
href="mailto:maurizio@etarom.com">maurizio@etarom.com</a><br>
Assistenza: <a moz-do-not-send="true" target="_blank"
href="mailto:assistenza@etarom.com">assistenza@etarom.com</a><br>
P.E.C. <a moz-do-not-send="true" target="_blank"
href="mailto:etarom@pec.etarom.com">etarom@pec.etarom.com</a><br>
<br>
<table border="0" cellpadding="1" cellspacing="1"
width="100%">
<tbody>
<tr>
<td width="40"><img alt=""
src="cid:part13.53DE3408.713E02F3@etarom.com"
height="56" width="36"></td>
<td>Non indugiare oltre!, attiva adesso la tua
casella di <b>P</b>osta <b>E</b>lettronica <b>C</b>ertificata,
per maggiori informazioni consulta la nostra
news <a moz-do-not-send="true"
target="_blank"
href="https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151">qui</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<span style="color:rgb(153,153,153)">
******************************<wbr>**********<br>
Qualora questo messaggio fosse da Voi ricevuto per
errore vogliate cortesemente darcene notizia a mezzo
telefax o e-mail e distruggere il messaggio ricevuto
erroneamente. Quanto precede ai fini del rispetto
del D.Lgs 196/03 sulla tutela dei dati personali.<br>
******************************<wbr>**********</span>
<br>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature">
<div dir="ltr">cat /etc/motd<br>
<br>
Thank you<br>
Indunil Jayasooriya <br>
<a moz-do-not-send="true" target="_blank"
href="http://www.theravadanet.net/">http://www.theravadanet.net/</a><br>
<a moz-do-not-send="true" target="_blank"
href="http://www.siyabas.lk/sinhala_how_to_install.html">http://www.siyabas.lk/sinhala_how_to_install.html</a>
- Download Sinhala Fonts<br>
<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<p><br>
</p>
<br>
<div class="moz-signature">-- <br>
<br>
<a href="https://www.etarom.com/"><img
src="cid:part17.9CD0B72C.9C0926FF@etarom.com"></a><br>
Via del Tiglio 45 56012 Calcinaia (PI)<br>
Tel +39058759108<br>
cell 340 8398772<br>
E-mail: <a href="mailto:maurizio@etarom.com">maurizio@etarom.com</a><br>
Assistenza: <a href="mailto:assistenza@etarom.com">assistenza@etarom.com</a><br>
P.E.C. <a href="mailto:etarom@pec.etarom.com">etarom@pec.etarom.com</a><br>
<br>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tbody>
<tr>
<td width="40"><img
src="cid:part22.48ADC648.44B4B63C@etarom.com" alt=""
height="56" width="36"></td>
<td>Non indugiare oltre!, attiva adesso la tua casella di <strong>P</strong>osta
<strong>E</strong>lettronica <strong>C</strong>ertificata,
per maggiori informazioni consulta la nostra news <a
href="https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151">qui</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<span style="color: rgb(153, 153, 153);">
****************************************<br>
Qualora questo messaggio fosse da Voi ricevuto per errore
vogliate cortesemente darcene notizia a mezzo telefax o e-mail e
distruggere il messaggio ricevuto erroneamente.
Quanto precede ai fini del rispetto del D.Lgs 196/03 sulla
tutela dei dati personali.<br>
****************************************</span> <br>
</div>
</body>
</html>