[Rspamd-Users] Multimap filter header "To:"

Emanuel Gonzalez emanuel_gonzalez at live.com.ar
Fri Sep 6 12:34:31 UTC 2019


Hi.!

I am creating a filter to search within the header "To:" the account "account!@update.com" since I was seeing some cases of Microsoft phishing attempts.

## multimap conf

DONWEB_BLK_H_TO {
       type = "header";
       header = "to";
       filter = "email:addr"
       map = "${LOCAL_CONFDIR}/local.d/bkl_h_to.map.inc";
       regexp = true;
   }

##

/.*\@update\.com/

email Headers

From: security Account <chsjin at hotmail.com>
To: "account!@update.com" <account!@update.com>
Subject: =?iso-8859-1?Q?__Actualizaci=F3n_de_correo_electr=F3nico?=
Thread-Topic: =?iso-8859-1?Q?__Actualizaci=F3n_de_correo_electr=F3nico?=
Thread-Index: AQHVZKRJ755Ta1eYG0S0dQt4P/u90g==

my configuration is incorrect since it doesn't work.!!

Regards,


More information about the Users mailing list