Re: to: header is not in my domain

2020-10-20 Thread Martin Gregorie
On Tue, 2020-10-20 at 22:49 +0100, RW wrote: > On Tue, 20 Oct 2020 21:34:08 +0100 > Martin Gregorie wrote: > > , not exactly what you're asking for, but e-mails where the From: > > domain doesn't match the domain in Message-ID: are very often spam > > and > > so could be worth a point or two. >

Re: to: header is not in my domain

2020-10-20 Thread Benny Pedersen
Martin Gregorie skrev den 2020-10-20 23:48: header __TORULE /(addr1addr2|...)/ header __BCCRULE /(add1|addr2|...)/ meta MYRULE !( __TORULE || __BCCRULE) score MYRULE 6.0 what MTA does not remove bcc headers ?

Re: to: header is not in my domain

2020-10-20 Thread RW
On Tue, 20 Oct 2020 21:34:08 +0100 Martin Gregorie wrote: , not exactly what you're asking for, but e-mails where the From: > domain doesn't match the domain in Message-ID: are very often spam and > so could be worth a point or two. And lots of ham will fail that too.

Re: to: header is not in my domain

2020-10-20 Thread Martin Gregorie
On Tue, 2020-10-20 at 21:34 +0100, Martin Gregorie wrote: > On Tue, 2020-10-20 at 19:29 +0100, Miki wrote: > > Hi, how to score this e-mails? > > I know I can give negative score if To: IS my domain, but I do not > > like this solution. > > Any suggestions? > > > Why do that? Its the exact

Re: to: header is not in my domain

2020-10-20 Thread Benny Pedersen
Miki skrev den 2020-10-20 21:38: Thanks for quick reply, but blacklist what? +1 The problem is I do not know this spammy domains. see maillist headers, you know me now :=) I want to give a score when To: field is NOT in anyaddr...@mydomain.com read manuels in perldoc

Re: to: header is not in my domain

2020-10-20 Thread Bill Cole
On 20 Oct 2020, at 16:06, Miki wrote: Are you telling me it's that simple. I want to score the emails without my domain in To field. I can do this both ways 1. Score when To: contain main domain negatively header HDR To=~ /\@mydomain\.com/i describe

Re: to: header is not in my domain

2020-10-20 Thread Martin Gregorie
On Tue, 2020-10-20 at 19:29 +0100, Miki wrote: > Hi, how to score this e-mails? > I know I can give negative score if To: IS my domain, but I do not > like this solution. > Any suggestions? > Why do that? Its the exact reverse of something that does work pretty well: write a rule that gives a

Re: to: header is not in my domain

2020-10-20 Thread Miki
WOOW. Thank you very much. I owe you one :) wt., 20 paź 2020 o 20:52 Alan Hodgson napisał(a): > On Tue, 2020-10-20 at 20:38 +0100, Miki wrote: > > Thanks for quick reply, but blacklist what? > The problem is I do not know this spammy domains. > I want to give a score when To: field is NOT in

Re: to: header is not in my domain

2020-10-20 Thread Miki
Are you telling me it's that simple. I want to score the emails without my domain in To field. I can do this both ways 1. Score when To: contain main domain negatively header HDR To=~ /\@mydomain\.com/i describeHDR To mydomain score

Re: to: header is not in my domain

2020-10-20 Thread Alan Hodgson
On Tue, 2020-10-20 at 20:38 +0100, Miki wrote: > Thanks for quick reply, but blacklist what? > The problem is I do not know this spammy domains. > I want to give a score when To: field is NOT in anyaddr...@mydomain.com Not tested, but something like this should work: header __LOCAL_TO_ME To =~

Re: to: header is not in my domain

2020-10-20 Thread Dave Wreski
Thanks for quick reply, but blacklist what? The problem is I do not know this spammy domains. I want to give a score when To: field is NOT in anyaddr...@mydomain.com If only it were that easy. You'll notice that recipients of this mailing list receive mail to the mailing list address, not to

Re: to: header is not in my domain

2020-10-20 Thread Miki
Thanks for quick reply, but blacklist what? The problem is I do not know this spammy domains. I want to give a score when To: field is NOT in anyaddr...@mydomain.com cheers Miki wt., 20 paź 2020 o 20:25 Benny Pedersen napisał(a): > Miki skrev den 2020-10-20 21:19: > > Let's say my domain is

Re: to: header is not in my domain

2020-10-20 Thread Benny Pedersen
Miki skrev den 2020-10-20 21:19: Let's say my domain is mydomain.com [2]. 99% of all the e-mails have: To: m...@mydomain.com But some e-mails, most likely sent using BCC are coming with: To: anyu...@anydomain.com Nearly all of them are spam. blacklist_to then set blacklist_from to same this

Re: to: header is not in my domain

2020-10-20 Thread Miki
Let's say my domain is mydomain.com. 99% of all the e-mails have: To: m...@mydomain.com But some e-mails, most likely sent using BCC are coming with: To: anyu...@anydomain.com Nearly all of them are spam. cheers Miki wt., 20 paź 2020 o 20:14 Benny Pedersen napisał(a): > Miki skrev den

Re: to: header is not in my domain

2020-10-20 Thread Benny Pedersen
Miki skrev den 2020-10-20 20:29: Hi, how to score this e-mails? what email ? I know I can give negative score if To: IS my domain, but I do not please dont help spammers like this solution. Any suggestions? is users@spamassassin.apache.org you liked to give negative scores to ? then

to: header is not in my domain

2020-10-20 Thread Miki
Hi, how to score this e-mails? I know I can give negative score if To: IS my domain, but I do not like this solution. Any suggestions? cheers Miki