Exim System Filters - Match for expression and ip address

[Salmus]

In the last week my servers was 'bombed' with spam - to protect my users storage I defined some system filters:

if $message_body is "203.189.190.240" or
$message_body is "68.196.220.241" or
$message_body is "114.108.150.62" or
$message_body is "114.141.2.203" or
$message_body is "62.101.96.255" or
$message_body is "210.15.223.18" or
$message_body is "Karminis" or
$message_body is "karminis" or
$message_body is "privatescort" or
$message_body is "Simona 0767173091" or
$message_body is "210.15.223.18"
then
seen finish
endif


I've tried also with 'matches' and 'contains' - same ! It just doesn't match some of the mails ...

Any clue ?


Thanks

 

[mr.applesauce]

There is mail filters per domain in each end users box or use the blacklist files in /etc/virtual

 

[Salmus]

I've asked 'HOW TO MATCH' in system filters ... (expresion)

 

[scsi]

Try google.com