You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by ma...@sbgit.com on 2004/06/16 09:19:33 UTC

How to block this

Hi,

how can i block this Mailer :
X-Mailer: Accucast (http://www.accucast.com)

i tried to do it by this rule:
header   MAILER_ACCUCAST	ALL =~ /^Accucast\b/i
describe MAILER_ACCUCAST	Uses Spam Mailer Accucast
score    MAILER_ACCUCAST	2.0

But it does not work.

Also i receive daily a lot of mails of this kind, and no of the 
rules work:
Content-Type: multipart/mixed; boundary="---------=_1087316685-30886-44748804"
Mime-Version: 1.0
Smtp: 
X-Lead: 814140
X-Virus-Scanned: by amavisd-new-20030616-p7 (Debian) at sbgit.com
Content-Transfer-Encoding: 7bit

I downloaded nearly all rule sets from the internet i can get.

Thanks Peter

Re: How to block this

Posted by Loren Wilton <lw...@earthlink.net>.
> > how can i block this Mailer :
> > X-Mailer: Accucast (http://www.accucast.com)
>
> > i tried to do it by this rule:
> > header   MAILER_ACCUCAST        ALL =~ /^Accucast\b/i
> > describe MAILER_ACCUCAST        Uses Spam Mailer Accucast
> > score    MAILER_ACCUCAST        2.0
>
> > But it does not work.

Try instead:

header   MAILER_ACCUCAST        X-Mailer =~ /^Accucast\b/i

The ^ was killing you in 'ALL', since the start of the line in that case is
"X-Mailer".


>
> > Also i receive daily a lot of mails of this kind, and no of the
> > rules work:
> > Content-Type: multipart/mixed;
boundary="---------=_1087316685-30886-44748804"
> > Mime-Version: 1.0
> > Smtp:
> > X-Lead: 814140
> > X-Virus-Scanned: by amavisd-new-20030616-p7 (Debian) at sbgit.com
> > Content-Transfer-Encoding: 7bit

I'm not immediately clear on what you want to catch here.  Is it that X-Lead
header?  Or something about the MIME boundary?  Or something else?

Assuming X-Lead, you can probably do

header X_LEAD_FOUND    X-Lead:exists


    Loren

Re: How to block this

Posted by Jeff Chan <je...@surbl.org>.
On Wednesday, June 16, 2004, 12:19:33 AM, mailsec mailsec wrote:
> Hi,

> how can i block this Mailer :
> X-Mailer: Accucast (http://www.accucast.com)

> i tried to do it by this rule:
> header   MAILER_ACCUCAST        ALL =~ /^Accucast\b/i
> describe MAILER_ACCUCAST        Uses Spam Mailer Accucast
> score    MAILER_ACCUCAST        2.0

> But it does not work.

> Also i receive daily a lot of mails of this kind, and no of the 
> rules work:
> Content-Type: multipart/mixed; boundary="---------=_1087316685-30886-44748804"
> Mime-Version: 1.0
> Smtp: 
> X-Lead: 814140
> X-Virus-Scanned: by amavisd-new-20030616-p7 (Debian) at sbgit.com
> Content-Transfer-Encoding: 7bit

> I downloaded nearly all rule sets from the internet i can get.

> Thanks Peter

Hi Peter,
Please ask this on the users list:

  spamassassin-users@incubator.apache.org

Jeff C.