Re: Rule to check return-path for To address

[Dave Warren <da...@hireahit.com>]

On 2014-08-23 11:59, Jeff wrote:
>
> I recently started getting hammered by spam and nearly all of the spam 
> emails have one thing in common. The return-path header contains the 
> email address that the spam is being sent to.
>
> Below is a sample header:
> ...
> Return-Path: amazon-voucher-myname=mydomain.com@indiarti.com
> ...
>
> The green text above is the email address that the spam is being sent 
> to (i.e., myname@mydomain.com <ma...@mydomain.com>).
>
> Is there a way to write a custom SpamAssassin rule that will mark any 
> message as spam if the return-path contains the 'To' address, 
> regardless of what it may be, and the equal sign (i.e., user=domain.tld)?
>


Are you aware that such a rule would hit on this mailing list, and tons 
of otherwise legitimate mail sent by mailing lists and bulk mailers alike?

The (slightly modified to neuter it) Return-Path for your message is:

Return-path: 
<us...@spamassassin.apache.org.example> 
for my recipient address of davew@hireahit.com.

-- 
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren