On 9. jul. 2014 07.00.44 CEST, Sergio <sec...@gmail.com> wrote: >It seems that my rule using "Received" instead of "From" did the trick, >the rule is working now.
It 2 diffrent spams :) >> These are the headers from amazoncoupons-user=domain....@lastawhdak.com: > header BLACKLIST_REGEX From:address =~ /\=.*\.(com|net|org|biz)\@/i > score BLACKLIST_REGEX 5 Change From:address to From:addr Or just blacklist_from *.(com|net|org|biz)@*.* More simple and should do the same imho