Spam rules

[Valentin Laskov]

Hi all!

I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules:

From: someone at somewhere.com yes

but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From:
address changes frequently.

How can I mark this as spam ?

Regards!
Valentin Laskov

[Denis Beauchemin]

Valentin,

Create a SpamAssassin rule in /etc/MailScanner/spam.assassin.prefs.conf:
Describe MYRULE01 Reply To: someone at somewhere.com
Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i
Score MYRULE01 10

Denis

-----Message d'origine-----
De?: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov
Envoy??: 17 juillet 2014 07:35
??: MailScanner discussion
Objet?: Spam rules

Hi all!

I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules:

From: someone at somewhere.com yes

but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From:
address changes frequently.

How can I mark this as spam ?

Regards!
Valentin Laskov

[Denis Beauchemin]

This should have gone on separate lines:

Describe MYRULE01 Reply To: someone at somewhere.com

Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i

Score MYRULE01 10

Denis

-----Message d'origine-----
De?: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov Envoy??: 17 juillet 2014 07:35 ??: MailScanner discussion Objet?: Spam rules

Hi all!

I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules:

From: someone at somewhere.com yes

but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From:
address changes frequently.

How can I mark this as spam ?

Regards!
Valentin Laskov

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

[Glenn Steen]

Valentin,

Denis is of course right that you need handle stuff like this in
SpamAssassin.
The reason MailScanner blacklist rules like that don't match is because
they operate solely on the SMTP envelope sender (the "MAIL FROM:<
someone at example.net>" command issued by the sending MTA during the SMTP
conversation). This sender address need have no correlation whatsoever with
the header lines inside the message (From:, Reply-to: etc). The tool for
acting on header/body-lines is, as stated, SpamAssassin.

Cheers
--
-- Glenn


On 17 July 2014 14:38, Denis Beauchemin <Denis.Beauchemin at usherbrooke.ca>

Post by Denis Beauchemin
Describe MYRULE01 Reply To: someone at somewhere.com
Score MYRULE01 10
Denis
-----Message d'origine-----
mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov
Envoy? : 17 juillet 2014 07:35 ? : MailScanner discussion Objet : Spam rules
Hi all!
I'm receiving spam from (for ex.) someone at somewhere.com . I set this in
From: someone at somewhere.com yes
but this does not work because someone at somewhere.com is not From: address
address changes frequently.
How can I mark this as spam ?
Regards!
Valentin Laskov
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!