I'm still struggling with this one if anyone can help at all. (envelope-from <bounce-mc.us4_8899577.1056541-sales=mydomain.co.uk@mail208.atl61.xxxx.net>) I'm looking to score this phrase "sales=mydomain.co.uk@" I see a rule in SA which may do the trick if I could get the rejex right. header LOCAL_DE...

Actually, I think I stumbled on the answer.

Max Spam Check Size =

I'm seeing some spammy type emails being delivered where the headers are stating 'Not Spam - Too Large'
How do I fix this ?

max message size rules shows: FromOrTo: default 0

this seems to work

header MY_RULE_NAME Received =~ /bounce/
score MY_RULE_NAME 1..0


I'm still experimenting with a domain name

I came back to work this morning to find only 2 days worth, so I assume some sort of scheduled cron job is sheduled to run.

example headers from one of the emails

Received: from mail208.atl61.xxxx.net ([xxx.xx.xxx.xxx]:20649)
by my.server.co.uk with esmtp (Exim 4.89)
(envelope-from <bounce-mc.us4_8899577.1056541-sales=mydomain.co.uk@mail208.atl61.xxxx.net>)
id 1dLVyp-0001AS-3Z

After a week, i'm finally getting to grips with MS and spam assisin, however, could anyone suggest a custom SA rule to score these. We get a number of spam where the from field contains a valid user with = followed by domainand @ eg: anyword-user=mydomain.co.uk@spammersdomain.com Basically I'm looki...

Is there a particular time this will happen.
I've changed these settings to 2 days, reloaded and restarted MSFE, but still have entries in 'Mail Control' going back 3 days.

I did actually make some changes in spamassasin.cf, but after reading that link I now changed this to configserver.cf.

It seems to be working as planned.

I'm running Exim on CentOS with pop3 mail boxes. If I try to open an email via WHM 'Mail Delivery Reports' after the user has downloaded it, it fails, as the message no longer exists. However, I can still open the message via MSFE 'MailControl' Does MSFE store email messages after theyv'e been downl...