Spam queries

Junior Member
Posts: 118
Joined: Thu Nov 15, 2007 12:02 pm
Location: Townsville, Australia

Spam queries

Postby Stuart » Wed Feb 03, 2016 11:56 pm

Is it possible to create a filter that can automatically run sa-learn for ham and spam (if SpamAssassin is located on the email server) if predefined conditions (spam score) relating to the email are met?

Below are the internet headers from a spam email that I have received that is similar to many. I notice that there is are headers called Return Path and Received, spammers seem to fabricate the return path address from known peoples actual names, however it is rare that their email addresses contain their full names (it is by using known names that these emails are not automatically named). Is it possible to block emails as spam using the Return Path or Received headers (Header fields contain From To & Subject) contained in the incoming email?

Return-Path: GeoffWingLun@labyrinthgroup.com.au
Delivered-To: stuart@xxxxxxxxx.com.au
Received: from mail.platinumdomains.com.au (mail.xxxxxxxxx.com.au [127.0.0.1])
by mail.xxxxxxxxx.com.au with ESMTP
; Wed, 3 Feb 2016 22:41:40 +1000
Received: from mail.labyrinthgroup.com.au ([203.217.101.192]) by platinumdomains.com.au with MailEnable ESMTP; Wed, 3 Feb 2016 20:24:50 +0800
Date: Tue, 3 Feb 2016 01:24:38 +0000
From: Geoff Wing Lun <GeoffWingLun@labyrinthgroup.com.au>
To: "rodneyjaswinsky" <rodneyjaswinsky@hotmail.com>, "Rohan" <rohan@glowworm.com.au>, "Romayne Westwood" <r.westwood55@gmail.com>, "Sharon Dewsbury First National Real Estate Whitsun" <sharon@fnwc.com.au>, "spitfire85" <spitfire85@bigpond.com>, "stefan zieger" <stefan.zieger@gmx.ne>, "stefanlakh" <stefanlakh@westnet.com.au>, "stellajoseph" <stellajoseph@live.com>, "stuart" <stuart@xxxxxxxxx.com.au>, "swhp" <swhp@rogers.com>, "Taro" <taro@taroakita.com>, "taro akita" <taro.akita@yahoo.com>, "technicalrequest" <technicalrequest@yoshimura-rd.com>, "Troy Leanne" <pigginn@hotmail.com>, "tylermatt6" <tylermatt6@gmail.com>, "Vahagn Demirtchian" <vahagn.demirtchian@oanda.com>, "Vicki Renew" <Vicki.Renew@townsville.qld.gov.au>, "wright suse" <wright.suse@gmail.com>, "yhoubolt" <yhoubolt@bigpond.net.au>, "yhoulbolt" <yhoulbolt@bigpond.net.au>
Message-ID: <ea68d9a63d3e$47a1aaf1$4d90c4bc$@labyrinthgroup.com.au>
Subject: re:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_5104_3ED34815.61BC276F"

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Re: Spam queries

Postby Alexander Telegin » Thu Feb 04, 2016 7:41 pm

Hi Stuart,

Yes, you can block with custom filter

Code: Select all
if header field Return-Path contains
and if header field Received contains

Return to Filters and scripts

Who is online

Users browsing this forum: No registered users and 0 guests