> > are you for usage of '^' ? because the string not start with sender > address, you can try withou it. >
^ - start matching from the beginning of the string in regex anyway, without it, I can try. here's my new file ( without ^ ) my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file header SPAM11OctF1 From =~ /(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i describe SPAM11OctF1 From address contains the word airecom612@ score SPAM11OctF1 10.0 > > Can you post to us a source code of spam mail? > here's the log. Oct 12 02:55:37 mailgw amavis[1054]: (01054-03) Passed CLEAN [190.123.45.119] [190.123.45.119] airecom612+97d7d60a91d9695c9a4240f92d5c3...@therealizationofhealth.net - r...@mydomain.com Message-ID: 97d7d60a91d9695c9a4240f92d5c3...@therealizationofhealth.net mail_id: dOZ+MykHl9Z2 Hits: -0.047 size: 11977 queued_as: 32CE11084D 9548 ms Ideas are welcome. 12 Calcinaia (PI) > Tel +39058759108 > cell 340 8398772 > E-mail: mauri...@etarom.com > Assistenza: assiste...@etarom.com > P.E.C. eta...@pec.etarom.com > > Non indugiare oltre!, attiva adesso la tua casella di *P*osta *E*lettronica > *C*ertificata, per maggiori informazioni consulta la nostra news qui > <https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151> > > **************************************** > Qualora questo messaggio fosse da Voi ricevuto per errore vogliate > cortesemente darcene notizia a mezzo telefax o e-mail e distruggere il > messaggio ricevuto erroneamente. Quanto precede ai fini del rispetto del > D.Lgs 196/03 sulla tutela dei dati personali. > **************************************** > -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts