You could write it as a header rule, like...

header ANNOYING_SPAMMER Received =~ /193\.95\.75\.135/
describe ANNOYING_SPAMMER Mark mail from 193.95.75.135 as spam
score ANNOYING_SPAMMER 5

If you have control over your MTA, you might investigate using its mechanism to block mail from that IP. For instance, in sendmail you'd use the access table, and the entry would look something like...

193.95.75.135 REJECT

Rejecting at the MTA would be more efficient, since 1) it doesn't sound like you get anything but spam from that source and 2) your server doesn't have to do any more processing of the message.

----- Original Message ----- From: "Wael ELLOUZE" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Monday, January 23, 2006 03:38
Subject: Block IP source


Hello everyone,
I want to block (or mark it as SPAM) all emails that comes from a specific originate IP adress (because he send every time with different email adress).
How can i make that with spamassassin ?

Thank you for your respond !

This is a header of an mail and i want to block all emails coming from web2002 (193.95.75.135)

From [EMAIL PROTECTED]
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from tounes.ati.tn (193.95.66.21) by tunet.tn with SMTP; for <[EMAIL PROTECTED]>;
Received: from smtpout.gnet.tn (smtpout.gnet.tn [193.95.75.71])
Received: from smtp.gnet.tn (smtp.gnet.tn [193.95.75.75]) by smtpout.gnet.tn (Postfix) with ESMTP for <[EMAIL PROTECTED]> Received: from servspam (unknown [193.95.75.135]) by smtp.gnet.tn (Postfix) with SMTP for <[EMAIL PROTECTED]>;
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Tarek Smiri:::Brainstorm SARL
Date: Sun, 18 Sep 2005 10:23:35 +0100
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_19FC0_01C5BC39.749E5B20"
Content-Location: http://www.bourseauto.com/bs/bs.htm
X-Mailer: Microsoft CDO for Windows 2000
Thread-Index: AcW8MRLOS4SqDAslR9+4J25VSihZZg==
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506

Reply via email to