On Friday 27 February 2004 04:14 pm, Bram Mertens wrote: > Hi > > I have received quite a few messages where my own address was used as > the from address. While most of those are now caught by other filters > I'd like to add a check for this. > > Right now I have the following in ~/.spamassassin/user_prefs: > header LOCAL_TEST_RULE From =~ > /(?<!Bram\sMertens)\s<[EMAIL PROTECTED]>/ score LOCAL_TEST_RULE > 0.1 > describe LOCAL_TEST_RULE Is someone faking to be me? >
Don't know if this is what you're looking for but its what I use, its very effective. I didn't write it, just modified an existing rule I found. header RM_t_bobbf ToCc =~ /[EMAIL PROTECTED]/ # 98%+ spam describe RM_t_bobbf Definate spam destination email address score RM_t_bobbf 10.0 header RM_t_bobbf2 From =~ /[EMAIL PROTECTED]/i describe RM_t_bobbf2 Definately not from me score RM_t_bobbf2 9.0 header RM_t_bobbf3 From =~ /[EMAIL PROTECTED]/i describe RM_t_bobbf3 I may have sent it as a test, probably not score RM_t_bobbf3 9.0 Chris -- Regards Chris A 100% Microsoft free computer Registered Linux User 283774 http://counter.li.org 8:17pm up 3 days, 22:36, 3 users, load average: 0.18, 0.43, 0.48
