spam assassin rule to block a From address

[Maurizio Poli]

Hi
I'm sorry for my poor english...

are you for usage of '^' ? because the string not start with sender 
address, you can try withou it.

Can you post to us a source code of spam mail?

Maurizio

> Dear list,
>
> I get mails from below FROM address.
>
> airecom612+97d7d60a91d9695c9a4240f92d5c3cae at holistictips.net
> airecom612+97d7d60a91d9695c9a4240f92d5c3cae at lotushealthfix.com
> airecom612+97d7d60a91d9695c9a4240f92d5c3cae at amazingwellness.net
> airecom612+97d7d60a91d9695c9a4240f92d5c3cae at healthyseries.biz
> airecom612+97d7d60a91d9695c9a4240f92d5c3cae at therealizationofhealth.net
>
>
> username is always airecom612+97d7d60a91d9695c9a4240f92d5c3cae .
> domain name will be different.
>
> I put below file to quarantine it. But , It does NOT work. We still get it.
>
>
> my  /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file is given below.
>
>
> header SPAM11OctF1 From =~ /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i
> describe SPAM11OctF1 From address contains the word airecom612@
> score SPAM11OctF1 10.0
>
>
>
> I went to https://regex101.com
>
> the above line  (i.e -
> /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i  ) matches.
>
> Then, Why I still get these? any idea?
>
> hope to hear from you.
>
>



-- 

<https://www.etarom.com/>
Via del Tiglio 45 56012 Calcinaia (PI)
Tel +39058759108
cell 340 8398772
E-mail: maurizio at etarom.com <mailto:maurizio at etarom.com>
Assistenza: assistenza at etarom.com <mailto:assistenza at etarom.com>
P.E.C. etarom at pec.etarom.com <mailto:etarom at pec.etarom.com>

	Non indugiare oltre!, attiva adesso la tua casella di *P*osta 
*E*lettronica *C*ertificata, per maggiori informazioni consulta la 
nostra news qui 
<https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151> 




****************************************
Qualora questo messaggio fosse da Voi ricevuto per errore vogliate 
cortesemente darcene notizia a mezzo telefax o e-mail e distruggere il 
messaggio ricevuto erroneamente. Quanto precede ai fini del rispetto del 
D.Lgs 196/03 sulla tutela dei dati personali.
****************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20161012/9f415fc3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logo.gif
Type: image/gif
Size: 2033 bytes
Desc: not available
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20161012/9f415fc3/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postino_mini.gif
Type: image/gif
Size: 3021 bytes
Desc: not available
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20161012/9f415fc3/attachment-0001.gif>