On Tue, 3 Nov 2015, Richard Mealing wrote:
From: John Hardin [mailto:jhar...@impsec.org]
So, to generalize the pattern: *your* (the recipient) domain is
(somewhere) in the username part of the From email address?
Hi John - Yup!
From address is - fastnet.co.uk.12056010.bob.jones885@vmta27.to
-Original Message-
From: John Hardin [mailto:jhar...@impsec.org]
Sent: 03 November 2015 17:18
To: users@spamassassin.apache.org
Subject: RE: New rules..
On Tue, 3 Nov 2015, Richard Mealing wrote:
> So I'm looking for something that would block this -
>
> fastnet.co.uk.12056010.bob.jone
On Tue, 3 Nov 2015, Richard Mealing wrote:
So I'm looking for something that would block this -
fastnet.co.uk.12056010.bob.jones885@vmta27.toprea...
I was thinking of just creating a rule to sort this out with something like -
^fastnet\.co\.uk.\d+..*@
header FROM_IS_FAKE_FASTNET From =~
From: Joe Quinn [mailto:jqu...@pccc.com]
Sent: 02 November 2015 17:13
To: users@spamassassin.apache.org
Subject: Re: New rules..
On 11/2/2015 12:00 PM, Richard Mealing wrote:
Hi there,
Would this be the best list to talk about new rules for spamassassin?
I'm new here..
Thanks,
Rich
This would
