spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Checking FROM FIELD for Keywords

Re: Checking FROM FIELD for Keywords

From: Jared Hall <jhall_at_nospam>
Date: Thu Oct 14 2010 - 15:32:07 GMT
To: wvpTV <reception@wvptv.co.uk>, SpamAssassin <users@spamassassin.apache.org>

Use the From:name check. Example:

header BAD_NAME From:name =~ /(Penny
Auctions|\bFree\b|\bCialis\b|\bViagra)/i
score BAD_NAME 5.0

Use caution, as always. Mind your regexes. For instance, in this
example, heaven forbid a
user named Joe Viagraola sends an Email, blah, blah, blah.

Regards,

Jared Hall
General Telecom, LLC.

wvpTV wrote:
> We've seen a recent explosion in spam that SpamAssassin does not flag, it
> seems mainly because the FROM (sender) field is being used for subject
> content, eg: VIAGRA, PORN etc etc
>
> Can anyone tell me how far off a standard filter update might be to carry
> out checks on the FROM field?
>
> Thanks.
>
>