On Wed, 09 Jul 2014 13:42:26 +0200 Benny Pedersen wrote: > On 9. jul. 2014 07.00.44 CEST, Sergio <sec...@gmail.com> wrote: > >It seems that my rule using "Received" instead of "From" did the > >trick, the rule is working now.
It should run only on the From header. Otherwise it may FP on VERP and similar rewriting schemes such as SRS. > It 2 diffrent spams :) > > >> These are the headers from > >> amazoncoupons-user=domain....@lastawhdak.com: > > > header BLACKLIST_REGEX From:address > > =~ /\=.*\.(com|net|org|biz)\@/i score BLACKLIST_REGEX 5 > > Change From:address to From:addr > > Or just > > blacklist_from *.(com|net|org|biz)@*.* > > More simple and should do the same imho I think you meant blacklist_from *=*.(com|net|org|biz)@*.* Even then it's not the same because blacklist_from runs on the envelope sender as well the From sender.
