<div dir="ltr">Valentin,<div><br></div><div>Denis is of course right that you need handle stuff like this in SpamAssassin.</div><div>The reason MailScanner blacklist rules like that don't match is because they operate solely on the SMTP envelope sender (the "MAIL FROM:<<a href="mailto:someone@example.net">someone@example.net</a>>" command issued by the sending MTA during the SMTP conversation). This sender address need have no correlation whatsoever with the header lines inside the message (From:, Reply-to: etc). The tool for acting on header/body-lines is, as stated, SpamAssassin.</div>
<div><br></div><div>Cheers</div><div>-- </div><div>-- Glenn</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 17 July 2014 14:38, Denis Beauchemin <span dir="ltr"><<a href="mailto:Denis.Beauchemin@usherbrooke.ca" target="_blank">Denis.Beauchemin@usherbrooke.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">This should have gone on separate lines:<br>
<div class="HOEnZb"><div class="h5"><br>
Describe MYRULE01 Reply To: <a href="mailto:someone@somewhere.com">someone@somewhere.com</a><br>
<br>
Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i<br>
<br>
Score MYRULE01 10<br>
<br>
Denis<br>
<br>
-----Message d'origine-----<br>
De : <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>] De la part de Valentin Laskov Envoyé : 17 juillet 2014 07:35 À : MailScanner discussion Objet : Spam rules<br>
<br>
Hi all!<br>
<br>
I'm receiving spam from (for ex.) <a href="mailto:someone@somewhere.com">someone@somewhere.com</a> . I set this in my spam.blacklist.rules:<br>
<br>
From: <a href="mailto:someone@somewhere.com">someone@somewhere.com</a> yes<br>
<br>
but this does not work because <a href="mailto:someone@somewhere.com">someone@somewhere.com</a> is not From: address but Replay To: address in the letters headers. From:<br>
address changes frequently.<br>
<br>
How can I mark this as spam ?<br>
<br>
Regards!<br>
Valentin Laskov<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>-- Glenn<br>email: glenn < dot > steen < at > gmail < dot > com<br>work: glenn < dot > steen < at > ap1 < dot > se
</div>