> > Saw a few of these come through last week. Guess I need a > rule upgrade to catch this? > > > --- the forwarded message follows ---
This is the spammer trick of saying the email is from you, to you. So it got Whitelisted. Here is _A_ solution. I believe the newest version of SA also solves this: header __CS_FROM_ME From =~ /[EMAIL PROTECTED]/i header __CS_TO_ME To =~ /[EMAIL PROTECTED]/i meta CS_SPAM_TRICK __CS_FROM_ME && __CS_TO_ME describe CS_SPAM_TRICK Spammer forged From + To my domain. score CS_SPAM_TRICK 104.11 # Silly, isn't it? Change the munged address to your own. Also You may need to increse the score!!! Yup, if you use AWL then after a while, it may have decided to take even more points off for you! :-) Really really crazy! *If Spamassassin and Spamhaus.org had a baby, what do you think it would look like?* --Chris Santerre ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
