Somehow my email has gotten tangled up in some new spam / support forum / support emails thing, along with other people. Every reply by a real person saying “STOP, FOR THE LOVE OF GOD” comes to me and everyone else. (Why do some people just want to watch the world burn?"

I’ve added a filter like so:

It is the ONLY filter on ANY mailbox in the entire installation. But it’s clearly not working. “Why did you choose the ‘from’ header?” you ask. I tested on the rspamd UI and all the emails (no matter who it’s from) show a value with that domain in it when I test for the “from” header. (Though a lot of these are forwards of forwards, etc.)

Is there a filter option I can use that says “ANYWHERE in the entire email, if you find ‘whitelabeledppc.com’, trigger this filter / ruleset” ?

    • DocFraggle

      • Community Hero
      Moolevel 281
    • Post #2
    • Edited

    Maybe we’re even talking about the same spam wave 🙂

    You can add it here:

    There were some waves a few weeks ago which used the same approach (some broken Google mailing lists iirc)

    System -> Configuration -> Global filter maps -> RegEx maps (check the box)

    Edit: I just saw I had a paste error there 🙂 should be

    /.+gun\.starci\.net/i

      Have something to say?

      Join the community by quickly registering to participate in this discussion. We'd like to see you joining our great moo-community!

      DocFraggle Okay, so I added that. I mean, it might or probably will work. But that’s not quite what I was asking about. That’s very much based on the “from” header. I just want to know if there’s something for a given text value anywhere in the email envelope. This solution (and mine in the SoGo filter setup) are based on the “from” header only.

      Also, why would I have to do this thing, when it’s exactly what the filter I added should do? (Other than being global vs. just my email address, which I’d prefer just mine until other users report similar issues.)

        CaptainPalapa Aye, Captain! I’m on the same spam list and created a filter for any recipient that contains “whitelabeledppc.com”. Hope this helps.

          No one is typing