Spam rules

[Glenn Steen]

Valentin,

Denis is of course right that you need handle stuff like this in
SpamAssassin.
The reason MailScanner blacklist rules like that don't match is because
they operate solely on the SMTP envelope sender (the "MAIL FROM:<
someone at example.net>" command issued by the sending MTA during the SMTP
conversation). This sender address need have no correlation whatsoever with
the header lines inside the message (From:, Reply-to: etc). The tool for
acting on header/body-lines is, as stated, SpamAssassin.

Cheers
-- 
-- Glenn


On 17 July 2014 14:38, Denis Beauchemin <Denis.Beauchemin at usherbrooke.ca>
wrote:

> This should have gone on separate lines:
>
> Describe MYRULE01 Reply To: someone at somewhere.com
>
> Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i
>
> Score MYRULE01 10
>
> Denis
>
> -----Message d'origine-----
> De : mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov
> Envoyé : 17 juillet 2014 07:35 À : MailScanner discussion Objet : Spam rules
>
> Hi all!
>
> I'm receiving spam from (for ex.) someone at somewhere.com . I set this in
> my spam.blacklist.rules:
>
> From:  someone at somewhere.com  yes
>
> but this does not work because someone at somewhere.com is not From: address
> but Replay To: address in the letters headers. From:
> address changes frequently.
>
> How can I mark this as spam ?
>
> Regards!
> Valentin Laskov
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140805/4e3eebcc/attachment.html