>
> are you for usage of '^' ? because the string not start with sender
> address, you can try withou it.
>


^ - start matching from the beginning of the string in regex

anyway, without it, I can try.



here's my new file ( without ^ )

my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file

header SPAM11OctF1 From =~
/(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i
describe SPAM11OctF1 From address contains the word airecom612@
score SPAM11OctF1 10.0



>
> Can you post to us a source code of spam mail?
>

here's the log.

Oct 12 02:55:37 mailgw amavis[1054]: (01054-03) Passed CLEAN
[190.123.45.119] [190.123.45.119]
airecom612+97d7d60a91d9695c9a4240f92d5c3...@therealizationofhealth.net -
r...@mydomain.com Message-ID:
97d7d60a91d9695c9a4240f92d5c3...@therealizationofhealth.net mail_id:
dOZ+MykHl9Z2 Hits: -0.047 size: 11977 queued_as: 32CE11084D 9548 ms


Ideas are welcome.




12 Calcinaia (PI)
> Tel +39058759108
> cell 340 8398772
> E-mail: mauri...@etarom.com
> Assistenza: assiste...@etarom.com
> P.E.C. eta...@pec.etarom.com
>
> Non indugiare oltre!, attiva adesso la tua casella di *P*osta *E*lettronica
> *C*ertificata, per maggiori informazioni consulta la nostra news qui
> <https://www.etarom.com/ETAROM/ShowNews.php?new=142e3a0dbdd57282212742d9025b8aa04aece90b4731f9f45c9bda1c8139a151>
>
> ****************************************
> Qualora questo messaggio fosse da Voi ricevuto per errore vogliate
> cortesemente darcene notizia a mezzo telefax o e-mail e distruggere il
> messaggio ricevuto erroneamente. Quanto precede ai fini del rispetto del
> D.Lgs 196/03 sulla tutela dei dati personali.
> ****************************************
>



-- 
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html   -  Download Sinhala
Fonts

Reply via email to