I have one SPAMmer that always sends his/her email to the same (invalid) user, "JARED".
Here is a copy of a message with appropriate headers: From: "William Lenker" <[EMAIL PROTECTED]> To: "JARED SLOAN" <[EMAIL PROTECTED]> Subject: Your application regarding your LOS ANGELES property Date: Thu Feb 19 01:41:50 2004 EST MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII X-Spam-Status: No, hits=2.9 required=8.0 tests=BAYES_70,INVALID_DATE version=2.55 X-Spam-Level: ** X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) JARED, I received your information recently and, as one of your lenders looking to submit a bid on your residence in LOS ANGELES, I would like to ask that you review the information below. It appears some data is missing that is necessary to process your application. Your immediate attention to this matter will facilitate the processing of your application. http://4DB4008737B8400Ffb5e0c43a3e5657b.traditionofbeingthere.com Thank you, William Lenker Vice President Lockland Here is the custom rule I wrote: header JARED ToCc =~ /"JARED SLOAN" <[EMAIL PROTECTED]> /i describe JARED Addressed to JARED score JARED 40.00 It's not catching the SPAM, what did I do wrong? I followed the examples at http://www.exit0.us/index.php/RM_ToRules, Bob Menschel's To Rules page.
