Gerard E. Seibert via clamav-users wrote:
On Mon, 23 Dec 2019 08:04:13 +0100, Alessandro Vesely via clamav-users
stated:
Perhaps you could try and match From:snopescom-.*@cmail20.com?
Actually, it is the "@cmail20.com" part changes also.
<snopescom-cdrdrik1jrhddllj...@cmail19.com>
I've also got cmail1 and cmail2 in my ham collection, and I expect the
rest of the range gets used in various mail flows as well.
I really wish ESPs wouldn't do this, it makes it even more difficult to
properly whitelist senders using their services.
-kgd
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
