spam assassin rule to block a From address

[Indunil Jayasooriya]

Dear list,

I get mails from below FROM address.

airecom612+97d7d60a91d9695c9a4240f92d5c3cae at holistictips.net
airecom612+97d7d60a91d9695c9a4240f92d5c3cae at lotushealthfix.com
airecom612+97d7d60a91d9695c9a4240f92d5c3cae at amazingwellness.net
airecom612+97d7d60a91d9695c9a4240f92d5c3cae at healthyseries.biz
airecom612+97d7d60a91d9695c9a4240f92d5c3cae at therealizationofhealth.net


username is always airecom612+97d7d60a91d9695c9a4240f92d5c3cae .
domain name will be different.

I put below file to quarantine it. But , It does NOT work. We still get it.


my  /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file is given below.


header SPAM11OctF1 From =~ /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i
describe SPAM11OctF1 From address contains the word airecom612@
score SPAM11OctF1 10.0



I went to https://regex101.com

the above line  (i.e -
/^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i  ) matches.

Then, Why I still get these? any idea?

hope to hear from you.


-- 
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html   -  Download Sinhala Fonts