> On May 22, 2017, at 2:47 PM, Clifford Gonsalves
> <[email protected]> wrote:
>
> The reason behind the rule is that, someone keeps creative new addresses at
> Gmail/Yahoo/Hotmail with word “welcome” in the email address and sends spam
> emails to our mailboxes.
Improve your spam filtering, independently of whether "welcome" is part of the
address...
> What will the best way to add this rule?
You've still not explained whether the unwanted address is in the
RFC2821 envelope sender, RFC2822 "From" author, "Reply-To", ...
The best approach is to not add such rules. But if you most, add
them only for a short time. You can use a regexp/pcre rule with
check_sender_access if the address is the envelope sender, and
set a "sunset date" on the rule to retire it after at most a month.
Such spam MOs tend to not last a long time.
--
Viktor.
