Re: How to test for this suspicious From address?

2018-09-13 Thread Bill Cole
On 13 Sep 2018, at 11:24, Mark London wrote: Hi - I'm getting spam with From that contain 2 different From addresses, that I would like to try and detect: From: " x " I created a crude rule that was properly being triggered when I manually ran spamassassin on the email itself.

How to test for this suspicious From address?

2018-09-13 Thread Mark London
Hi - I'm getting spam with From that contain 2 different From addresses, that I would like to try and detect: From: " x " I created a crude rule that was properly being triggered when I manually ran spamassassin on the email itself. But when it arrives (via Mimedefang), the rule is