Ой, ошибся в \N. Вот так.

deny condition = ${if match{$bh_Received:}{from $sender_helo_name \N\(unknown \[([0-9]{1,3}\.){3}[0-9]{1,3}\]\)\N}}
         message        = Spammers network detected

Alexander Titaev писал 2016-11-25 09:36:
Здравствуйте, Max.

Вы писали 25 ноября 2016 г., 15:32:31:

Тогда можно как-то так.

   deny   condition      = ${if match{$bh_Received:}{\Nfrom
$sender_helo_name \(unknown \[([0-9]{1,3}\.){3}[0-9]{1,3}\]\)\N}}
          message        = Spammers network detected

Главное, чтобы "хорошие" при этом не рубились.

у меня так

        warn
        condition = ${if
match{$sender_helo_name}{(?i)\N^[-0-9-a-z]+\.(co\.ua|eu|ru)$\N}
{yes}{no}}
        condition = ${if
eq{$sender_helo_name}{${lc:$sender_address_domain}} {yes}{no}}
        condition = ${if match{$rh_Received:}{from
$sender_helo_name.*unknow.*\n.*by $sender_helo_name.*Postfix.*with
ESMTPA id.*;} {yes}{no}}
        add_header = X-SPAM-Like: from_by_unknown
        set acl_m_spam_msg = yes

--
With best regards,
Max Kostikov

BBM: 24CA5DF8 | W: https://kostikov.co

_______________________________________________
Exim-users mailing list
Exim-users@mailground.net
http://mailground.net/mailman/listinfo/exim-users

Ответить