On 10/17/2014 06:02 PM, Michael Opdenacker wrote:
Greetings,
I'm receiving a specific type of spam which From header is always like:
From: service by foobar <u...@example.org>
These guys always use "by foobar" or " foobar" (not the real string,
don't want them to notice in case they read the list archives) in the
sender description string, so they should be easy to catch, instead of
their domain name which changes constantly.
However, from the examples in the documentation, I believe that
"blacklist_from" only works on the e-mail address itself, and therefore
is likely to ignore the description string.
Am I right? If this is true, how would you give a penalty to messages
with a sender description containing " foobar" (need to match the space
before the recurring string too)?
Any tips are welcome!
header FOO From:name =~ /\bfoobar\b/
h2h
