On 5/21/15 1:41 PM, Axb wrote:
does this work?

header    LIST_ID_MARKET_EEK    List-ID =~ /emarketeerz/


I've tried this, and it doesn't appear to be working. I just received another message today, here are the headers (sanitized).


I would think that a simple match on "emarketeerz" would be sufficient. I am using sendmail, but I believe Postfix might be able to catch this using simple regex. But, shouldn't SpamAssassin be able to do the same? Are my rules incorrect?


header SPAM_MARKETEERS  From =~ /marketeerz/
describe SPAM_MARKETEERS Spam from a Google Group
score SPAM_MARKETEERS  1000

header LIST_ID_MARKET_EEK       List-ID =~ /emarketeerz/
describe LIST_ID_MARKET_EEK     Spam from a Google group
score LIST_ID_MARKET_EEK        1000

header SPAM_MARKETEERS1 To =~ /emarketeerz/
describe SPAM_MARKETEERS1 Spam from a Google Group
score SPAM_MARKETEERS1 1000

header SPAM_MARKETEERS2 To =~ /mktg.mgrr\@outlook.com/
describe SPAM_MARKETEERS2 Spam from a Google Group
score SPAM_MARKETEERS2 1000

header SPAM_MARKETEERS3 From =~ /mktg.mgrr1\@outlook.com/
describe SPAM_MARKETEERS3 Spam from a Google Group
score SPAM_MARKETEERS3 1000




Return-Path: <mktg42+bncbczl7c5k4yhbb5ubsgvqkgqe3f3u...@emarketeerz4.com>
Received: from user.com ([unix socket])
     by mail.user.com (Cyrus v2.4.17-Invoca-RPM-2.4.17-7) with LMTPA;
     Tue, 26 May 2015 05:46:37 -0400
X-Sieve: CMU Sieve 2.4
X-Envelope-From: mktg42+bncbczl7c5k4yhbb5ubsgvqkgqe3f3u...@emarketeerz4.com
X-Envelope-To: <u...@domain.com>
X-Originating-IP: 209.85.217.199
Received: from mail-lb0-f199.google.com (mail-lb0-f199.google.com [209.85.217.199]) by user.com (envelope-from mktg42+bncbczl7c5k4yhbb5ubsgvqkgqe3f3u...@emarketeerz4.com) (8.13.8/8.13.8) with ESMTP id t4Q9kTFL002451
        (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=FAIL)
        for <u...@domain.com>; Tue, 26 May 2015 05:46:35 -0400
Received: by lbcue7 with SMTP id ue7sf9691718lbc.3
        for <u...@domain.com>; Tue, 26 May 2015 02:46:31 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
h=x-gm-message-state:message-id:content-type:reply-to:from:to:subject
         :date:importance:in-reply-to:references:mime-version
:x-original-sender:x-original-authentication-results:precedence
         :mailing-list:list-id:list-post:list-help:list-archive
         :list-subscribe:list-unsubscribe;
        bh=tQKbOuNQxBaG0vMnfAIKy4lF2IfQb8mCh2RxyI48vls=;
b=FL32hufVCFV7GxagYXQsfJ1MhriDhegHCr1OD06Hb79aX+PdfD3QL0LoMEAnLXj2gF
me4MBLqi+5g7gcILqHudbw2T1NjyFW4oLhjy40UWZl/N0fT43Ix82jNLiDkNu+YKjT3c
TX1wDdirWjxo97DrsV/YP6/pdVkSj8AonCIDxxg6SrOpKbazCsgtPHHjLCg0O+TG7ZhO
8/kKvOLq5cVRBj/Qmcb8d5F26noNQ6jLJ3HBtJQID2veaN1JE90Xsy5iXmPyInlkp/6J
ojR5iOqshwbsxhkZIOr+qx03baOAGkuNZHoDgM3YvGVHelCDnah1c1RlTsjPAUoR/UuP
         JZKA==
X-Gm-Message-State: ALoCoQnqPLPa6rhoF3z+7+Hz2wXhoBGh0Wmum/H1TF8gVLM11v9eZZwFsmkeW7kvE/eWxqrRG3aT
X-Received: by 10.112.26.5 with SMTP id h5mr26850091lbg.4.1432633590821;
        Tue, 26 May 2015 02:46:30 -0700 (PDT)
X-BeenThere: mkt...@emarketeerz4.com
Received: by 10.180.77.228 with SMTP id v4ls588047wiw.2.gmail; Tue, 26 May
 2015 02:46:30 -0700 (PDT)
X-Received: by 10.180.106.10 with SMTP id gq10mr22835810wib.0.1432633590087;
        Tue, 26 May 2015 02:46:30 -0700 (PDT)
X-BeenThere: grou...@emarketeerz4.com
Received: by 10.180.82.166 with SMTP id j6ls597426wiy.18.gmail; Tue, 26 May
 2015 02:46:29 -0700 (PDT)
X-Received: by 10.180.106.137 with SMTP id gu9mr33343490wib.54.1432633589759;
        Tue, 26 May 2015 02:46:29 -0700 (PDT)
Received: from BAY004-OMC1S23.hotmail.com (bay004-omc1s23.hotmail.com. [65.54.190.34]) by mx.google.com with ESMTPS id m11si17165852wij.110.2015.05.26.02.46.28
        for <grou...@emarketeerz4.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Tue, 26 May 2015 02:46:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of mktg.mg...@outlook.com designates 65.54.190.34 as permitted sender) client-ip=65.54.190.34; Received: from BAY182-W6 ([65.54.190.59]) by BAY004-OMC1S23.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
     Tue, 26 May 2015 02:46:27 -0700
X-TMN: [pCOlxaTz0MWrTdeOzRhweKR2/GM/+1J8]
X-Originating-Email: [mktg.mg...@outlook.com]
Message-ID: <bay182-w60d0b506d54b545fa825fdf...@phx.gbl>
Content-Type: multipart/related;
    boundary="_4244e123-67c3-4066-8866-ff54405e25de_"
Reply-To: <inquiry-sa...@outlook.com>
From: E- Marketeers <mktg.mg...@outlook.com>
To: "grou...@emarketeerz1.com" <grou...@emarketeerz1.com>
Subject: Global Holidays Travel And Tours Online Booking
Date: Tue, 26 May 2015 09:46:26 +0000
Importance: Normal
In-Reply-To: <bay182-w15e6ceb40149667d645ed1df...@phx.gbl>
References: <CAFGNuY_S0G91oBtzR3KqBXAXhaa0=nDu74biYE6=w7ur8up...@mail.gmail.com>,<bay182-w815d998b10bbffdaf188fcdf...@phx.gbl>,<bay182-w871fe7d4214004af4a32c5df...@phx.gbl>,<bay182-w132fc567c9aede6d3379d1df...@phx.gbl>,<bay182-w85916cb041d6b8e25406bddf...@phx.gbl>,<bay182-w76505877212cafd2c62cddf...@phx.gbl>,<bay182-w59ad263781d2abbc841dadf...@phx.gbl>,<bay182-w15e6ceb40149667d645ed1df...@phx.gbl>
MIME-Version: 1.0
X-OriginalArrivalTime: 26 May 2015 09:46:27.0031 (UTC) FILETIME=[D5BA1670:01D09798]
X-Original-Sender: mktg.mg...@outlook.com
X-Original-Authentication-Results: mx.google.com; spf=pass (google.com: domain of mktg.mg...@outlook.com designates 65.54.190.34 as permitted sender) smtp.mail=mktg.mg...@outlook.com; dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Precedence: list
Mailing-list: list mkt...@emarketeerz4.com; contact mktg42+own...@emarketeerz4.com
List-ID: <mktg42.emarketeerz4.com>
X-Google-Group-Id: 346729582280
List-Post: <http://groups.google.com/a/emarketeerz4.com/group/mktg42/post>, <mailto:mkt...@emarketeerz4.com> List-Help: <http://support.google.com/a/emarketeerz4.com/bin/topic.py?topic=25838>,
 <mailto:mktg42+h...@emarketeerz4.com>
List-Archive: <http://groups.google.com/a/emarketeerz4.com/group/mktg42/>
List-Subscribe: <http://groups.google.com/a/emarketeerz4.com/group/mktg42/subscribe>,
 <mailto:mktg42+subscr...@emarketeerz4.com>
List-Unsubscribe: <mailto:googlegroups-manage+346729582280+unsubscr...@googlegroups.com>,
 <http://groups.google.com/a/emarketeerz4.com/group/mktg42/subscribe>


Reply via email to