This is the extract from exim log...
2005-05-18 10:45:13 1DYPnM-0002fA-At <=
[email protected] H=tomts52-srv.bellnexxia.net [209.226.175.177] P=esmtp S=261668
[email protected] T="Meubles Busch logo" from <
[email protected]> for
[email protected]
2005-05-18 10:45:13 1DYPnM-0002fA-At => /home/pluk/.spamassassin/spam <
[email protected]> F=<
[email protected]> R=domain_filter T=address_file S=261828
2005-05-18 10:45:13 1DYPnM-0002fA-At Completed
I've switched the spam mail to drop into the spam box. the filter is as such...
# Exim Filter
# created by DirectAdmin, version 1.24.1
# Do not modify this file as any changes will be
# overwritten when the user makes a change.
# (data is only written to this file, not read)
if error_message then finish endif
if
$header_subject: contains "sex" or $header_body: contains "sex" or $message_body: contains "sex"
or $header_subject: contains "cialis" or $header_body: contains "cialis" or $message_body: contains "cialis"
or $header_subject: contains "V'lAGRA" or $header_body: contains "V'lAGRA" or $message_body: contains "V'lAGRA"
or $header_subject: contains "Vallium" or $header_body: contains "Vallium" or $message_body: contains "Vallium"
or $header_subject: contains "WALLIUM" or $header_body: contains "WALLIUM" or $message_body: contains "WALLIUM"
or $header_subject: contains "WIAGRA" or $header_body: contains "WIAGRA" or $message_body: contains "WIAGRA"
or $header_subject: contains "CIALIS" or $header_body: contains "CIALIS" or $message_body: contains "CIALIS"
or $header_subject: contains "Cialis" or $header_body: contains "Cialis" or $message_body: contains "Cialis"
or $header_subject: contains "XXX" or $header_body: contains "XXX" or $message_body: contains "XXX"
or $header_subject: contains "xxx" or $header_body: contains "xxx" or $message_body: contains "xxx"
or $header_subject: contains "viagra" or $header_body: contains "viagra" or $message_body: contains "viagra"
or $header_subject: contains "Viagara" or $header_body: contains "Viagara" or $message_body: contains "Viagara"
or $header_subject: contains "ciallis" or $header_body: contains "ciallis" or $message_body: contains "ciallis"
or $header_subject: contains "C1ALlS" or $header_body: contains "C1ALlS" or $message_body: contains "C1ALlS"
then
save /home/pluk/.spamassassin/spam 660
finish
endif
if
$header_subject: contains "****" or $header_body: contains "****" or $header_from: contains "****"
or $header_subject: contains "****" or $header_body: contains "****" or $header_from: contains "****"
or $header_subject: contains " ass " or $header_body: contains " ass " or $header_from: contains " ass "
or $header_subject: contains "asshole" or $header_body: contains "asshole" or $header_from: contains "asshole"
or $header_subject: contains "bitch" or $header_body: contains "bitch" or $header_from: contains "bitch"
or $header_subject: contains " **** " or $header_body: contains " **** " or $header_from: contains " **** "
or $header_subject: contains " whore " or $header_body: contains " whore " or $header_from: contains " whore "
or $header_subject: contains " sex " or $header_body: contains " sex " or $header_from: contains " sex "
or $header_subject: contains " sexy " or $header_body: contains " sexy " or $header_from: contains " sexy "
or $header_subject: contains " sexiest " or $header_body: contains " sexiest " or $header_from: contains " sexiest "
or $header_subject: contains " **** " or $header_body: contains " **** " or $header_from: contains " **** "
or $header_subject: contains " ****ty " or $header_body: contains " ****ty " or $header_from: contains " ****ty "
then
save /home/pluk/.spamassassin/spam 660
finish
endif
I could forward you the email if you wish (Basically 2 jpg included with no text body. Header don't have those filter names.
If the attachements contains any filter names, can it consider as spam???