Loren - Unfortunately, LW_BOGUS_ORDER doesn't get triggered for my email, because there is no List-Id.   The email actually came from a microsoft account.  - Mark

header  __LW_SUB_INVOICE Subject =~ /\b(?:invoice|order)\b/
header  __LW_FROM_INVOICE From =~ /\b(?:invoice|order)\b/
header  __LW_ABC_LISTID List-Id =~ /\w{13}\s+\<ab/   # some <ab>, some <abc>

meta  LW_BOGUS_ORDER (__LW_SUB_INVOICE || __LW_FROM_INVOICE) && __LW_ABC_LISTID
score  LW_BOGUS_ORDER 5
describe LW_BOGUS_ORDER Fake order or invoice

On 6/19/2021 4:41 PM, users-digest-h...@spamassassin.apache.org wrote:
A number of the rules I passed along are generic "order" rules rather than Amazon specific. I had to go back to last month's spam to find an Amazon order spam, but I've gotten a dozen or so fake orders for other things this month, all of which hit on the LW_BOGUS_ORDER rule


Reply via email to