spam assassin rule to block a From address

Indunil Jayasooriya indunil75 at gmail.com
Wed Oct 12 12:24:32 CEST 2016


>
> are you for usage of '^' ? because the string not start with sender
> address, you can try withou it.
>


^ - start matching from the beginning of the string in regex

anyway, without it, I can try.



here's my new file ( without ^ )

my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file

header SPAM11OctF1 From =~
/(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i
describe SPAM11OctF1 From address contains the word airecom612@
score SPAM11OctF1 10.0



>
> Can you post to us a source code of spam mail?
>

here's the log.

Oct 12 02:55:37 mailgw amavis[1054]: (01054-03) Passed CLEAN
[190.123.45.119] [190.123.45.119]
airecom612+97d7d60a91d9695c9a4240f92d5c3cae at therealizationofhealth.net -
rept at mydomain.com Message-ID:
97d7d60a91d9695c9a4240f92d5c3cae at therealizationofhealth.net mail_id:
dOZ+MykHl9Z2 Hits: -0.047 size: 11977 queued_as: 32CE11084D 9548 ms


Ideas are welcome.




12 Calcinaia (PI)
> Tel +39058759108
> cell 340 8398772
> E-mail: maurizio at etarom.com
> Assistenza: assistenza at etarom.com
> P.E.C. etarom at pec.etarom.com
>
> Non indugiare oltre!, attiva adesso la tua casella di *P*osta *E*lettronica
> *C*ertificata, per maggiori informazioni consulta la nostra news qui
> <https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151>
>
> ****************************************
> Qualora questo messaggio fosse da Voi ricevuto per errore vogliate
> cortesemente darcene notizia a mezzo telefax o e-mail e distruggere il
> messaggio ricevuto erroneamente. Quanto precede ai fini del rispetto del
> D.Lgs 196/03 sulla tutela dei dati personali.
> ****************************************
>



-- 
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html   -  Download Sinhala
Fonts
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20161012/625e9e2d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postino_mini.gif
Type: image/gif
Size: 3021 bytes
Desc: not available
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20161012/625e9e2d/attachment.gif>


More information about the amavis-users mailing list