<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi<br>
I'm sorry for my poor english...<br>
<br>
are you for usage of '^' ? because the string not start with
sender address, you can try withou it.<br>
<br>
Can you post to us a source code of spam mail?<br>
<br>
Maurizio<br>
<br>
</div>
<blockquote
cite="mid:CAJF2yJRrygrg6myKO_Trd=2OQUP7Qd3LkObE=XH=4h3he848Ew@mail.gmail.com"
type="cite">
<pre wrap="">Dear list,
I get mails from below FROM address.
<a class="moz-txt-link-abbreviated" href="mailto:airecom612+97d7d60a91d9695c9a4240f92d5c3cae@holistictips.net">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@holistictips.net</a>
<a class="moz-txt-link-abbreviated" href="mailto:airecom612+97d7d60a91d9695c9a4240f92d5c3cae@lotushealthfix.com">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@lotushealthfix.com</a>
<a class="moz-txt-link-abbreviated" href="mailto:airecom612+97d7d60a91d9695c9a4240f92d5c3cae@amazingwellness.net">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@amazingwellness.net</a>
<a class="moz-txt-link-abbreviated" href="mailto:airecom612+97d7d60a91d9695c9a4240f92d5c3cae@healthyseries.biz">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@healthyseries.biz</a>
<a class="moz-txt-link-abbreviated" href="mailto:airecom612+97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net">airecom612+97d7d60a91d9695c9a4240f92d5c3cae@therealizationofhealth.net</a>
username is always airecom612+97d7d60a91d9695c9a4240f92d5c3cae .
domain name will be different.
I put below file to quarantine it. But , It does NOT work. We still get it.
my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file is given below.
header SPAM11OctF1 From =~ /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i
describe SPAM11OctF1 From address contains the word airecom612@
score SPAM11OctF1 10.0
I went to <a class="moz-txt-link-freetext" href="https://regex101.com">https://regex101.com</a>
the above line (i.e -
/^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i ) matches.
Then, Why I still get these? any idea?
hope to hear from you.
</pre>
</blockquote>
<br>
<p><br>
</p>
<br>
<div class="moz-signature">-- <br>
<br>
<a href="https://www.etarom.com/"><img
src="cid:part1.170B0ABE.217AB5F6@etarom.com"></a><br>
Via del Tiglio 45 56012 Calcinaia (PI)<br>
Tel +39058759108<br>
cell 340 8398772<br>
E-mail: <a href="mailto:maurizio@etarom.com">maurizio@etarom.com</a><br>
Assistenza: <a href="mailto:assistenza@etarom.com">assistenza@etarom.com</a><br>
P.E.C. <a href="mailto:etarom@pec.etarom.com">etarom@pec.etarom.com</a><br>
<br>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tbody>
<tr>
<td width="40"><img
src="cid:part6.1284BC28.C4622100@etarom.com" alt=""
height="56" width="36"></td>
<td>Non indugiare oltre!, attiva adesso la tua casella di <strong>P</strong>osta
<strong>E</strong>lettronica <strong>C</strong>ertificata,
per maggiori informazioni consulta la nostra news <a
href="https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151">qui</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<span style="color: rgb(153, 153, 153);">
****************************************<br>
Qualora questo messaggio fosse da Voi ricevuto per errore
vogliate cortesemente darcene notizia a mezzo telefax o e-mail e
distruggere il messaggio ricevuto erroneamente.
Quanto precede ai fini del rispetto del D.Lgs 196/03 sulla
tutela dei dati personali.<br>
****************************************</span> <br>
</div>
</body>
</html>