ConfigServer Community Forum

After a number of experiments and waiting for these emails to arrive, I may have figured it out.
Just in case anyone else needs this, this is what I came up with.

header FROM_YOURRULENAME ALL =~ /mydomain\.co\.uk@/i
score FROM_YOURRULENAME 0.1

Giving it a very low score for testing purposes.

I'm still struggling with this one if anyone can help at all. (envelope-from <bounce-mc.us4_8899577.1056541-sales=mydomain.co.uk@mail208.atl61.xxxx.net>) I'm looking to score this phrase "sales=mydomain.co.uk@" I see a rule in SA which may do the trick if I could get the rejex right. heade...

Actually, I think I stumbled on the answer.

Max Spam Check Size =

I'm seeing some spammy type emails being delivered where the headers are stating 'Not Spam - Too Large'
How do I fix this ?

max message size rules shows: FromOrTo: default 0

this seems to work

header MY_RULE_NAME Received =~ /bounce/
score MY_RULE_NAME 1..0


I'm still experimenting with a domain name

I came back to work this morning to find only 2 days worth, so I assume some sort of scheduled cron job is sheduled to run.

example headers from one of the emails

Received: from mail208.atl61.xxxx.net ([xxx.xx.xxx.xxx]:20649)
by my.server.co.uk with esmtp (Exim 4.89)
(envelope-from <bounce-mc.us4_8899577.1056541-sales=mydomain.co.uk@mail208.atl61.xxxx.net>)
id 1dLVyp-0001AS-3Z

After a week, i'm finally getting to grips with MS and spam assisin, however, could anyone suggest a custom SA rule to score these. We get a number of spam where the from field contains a valid user with = followed by domainand @ eg: anyword-user=mydomain.co.uk@spammersdomain.com Basically I'm looki...

Is there a particular time this will happen.
I've changed these settings to 2 days, reloaded and restarted MSFE, but still have entries in 'Mail Control' going back 3 days.

I did actually make some changes in spamassasin.cf, but after reading that link I now changed this to configserver.cf.

It seems to be working as planned.