On 2014-08-23 11:59, Jeff wrote:
I recently started getting hammered by spam and nearly all of the spam
emails have one thing in common. The return-path header contains the
email address that the spam is being sent to.
Below is a sample header:
...
Return-Path: amazon-voucher-myname=mydomain....@indiarti.com
...
The green text above is the email address that the spam is being sent
to (i.e., myn...@mydomain.com <mailto:myn...@mydomain.com>).
Is there a way to write a custom SpamAssassin rule that will mark any
message as spam if the return-path contains the 'To' address,
regardless of what it may be, and the equal sign (i.e., user=domain.tld)?
Are you aware that such a rule would hit on this mailing list, and tons
of otherwise legitimate mail sent by mailing lists and bulk mailers alike?
The (slightly modified to neuter it) Return-Path for your message is:
Return-path:
<users-return-000000-davew=hireahit....@spamassassin.apache.org.example>
for my recipient address of da...@hireahit.com.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
