In the message headers you quoted, I think the trailing ">" after the domain name is what's not matching. Try changing your header blacklist file to this: From: *goldswatches.com* Return-Path: *goldswatches.com* IOW, just add an asterisk at the end of each pattern. That should do it.
-- Sam Clippinger On May 18, 2017, at 8:54 AM, Pablo Murillo (rednet) via spamdyke-users <spamdyke-users@spamdyke.org> wrote: > Hi > > I'm testing some things and I found that Rejecting Messages by Header Content > is not working as I expected > I have spamdyke 5.0.1 with header-blacklist-file=/spamdb/blacklist_header > I'm trying to filter all mails from goldswatches.com, and I have this lines > in the file > > From:*goldswatches.com > Return-Path:*goldswatches.com > > This is the right way to write it or I´m doing something wrong ? > > The emails from goldswatches.com are not blocked > > This is a one line in maillog: > ----------------------------------------------- > May 18 00:12:36 mx1 spamdyke[1193]: ALLOWED from: > kzkqnor...@s2.goldswatches.com to: mariano@xxxxxxxxxxx origin_ip: > 162.243.97.219 origin_rdns: s2.goldswatches.com auth: (unknown) encryption: > (none) reason: 250_ok_1495077156_qp_1253 > ----------------------------------------------- > > > This is the header of one email from goldswatches.com > ------------------------------------------------- > Return-Path: <itnenor...@s3.goldswatches.com> > Received: (qmail 44869 invoked from network); 18 May 2017 10:10:57 -0000 > Received: from unknown (HELO mx1.XXXXXXX) (XXXXXXXXXX) > by XXXXXXXXXXX with SMTP; 18 May 2017 10:10:57 -0000 > Received: (qmail 87160 invoked from network); 18 May 2017 10:23:56 -0000 > Received: from unknown (HELO s3.goldswatches.com) (162.243.98.6) > by mx1.XXXXXXXX with SMTP; 18 May 2017 10:23:56 -0000 > To: info@XXXXXXXX > Subject: Cura tu ansiedad sin ir al psicologo ......PgBi > Message-ID: <3103194f36699b53547d9110096e8...@s3.goldswatches.com> > Date: Thu, 18 May 2017 08:14:14 +0000 > From: "Ansiedad...QK2c" <itnenor...@s3.goldswatches.com> > Reply-To: ansie...@masansiedadyanomasansiedade4df.com > MIME-Version: 1.0 > X-Mailer-LID: 397,393 > List-Unsubscribe: > <http:///unsubscribe.php?M=20824260&C=f755f7996861e7aee2a99b421300e773&L=393&N=2853> > X-Mailer-RecptId: 20824260 > X-Mailer-SID: 2853 > X-Mailer-Sent-By: 1 > Content-Type: text/html; charset="UTF-8" > Content-Transfer-Encoding: 8bit > ---------------------------------------------------- > > > _______________________________________________ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users
_______________________________________________ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users