Dear list, I get mails from below FROM address.
airecom612+97d7d60a91d9695c9a4240f92d5c3...@holistictips.net airecom612+97d7d60a91d9695c9a4240f92d5c3...@lotushealthfix.com airecom612+97d7d60a91d9695c9a4240f92d5c3...@amazingwellness.net airecom612+97d7d60a91d9695c9a4240f92d5c3...@healthyseries.biz airecom612+97d7d60a91d9695c9a4240f92d5c3...@therealizationofhealth.net username is always airecom612+97d7d60a91d9695c9a4240f92d5c3cae . domain name will be different. I put below file to quarantine it. But , It does NOT work. We still get it. my /etc/mail/spamassassin/SPAM_11Oct2016_From_1.cf file is given below. header SPAM11OctF1 From =~ /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i describe SPAM11OctF1 From address contains the word airecom612@ score SPAM11OctF1 10.0 I went to https://regex101.com the above line (i.e - /^(airecom612\+97d7d60a91d9695c9a4240f92d5c3cae)@/i ) matches. Then, Why I still get these? any idea? hope to hear from you. -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts