Re: [EXIM] blocking messages...

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: Bruce Bowler
CC: exim-users
Subject: Re: [EXIM] blocking messages...
On Tue, 10 Feb 1998, Bruce Bowler wrote:

> To my "highly trained eye", it sure looked like spam to me (call me
> paranoid, but when the reply-to, to, from and return-path headers are all
> the same and there's an x-authentication-warning header, bells go off. In
> this case, the body of the message didn't help their cause either :-).
>
> How do I tell exim to reject and/or freeze similarly styled messages?


I am considering adding a simple "scoring" feature to the filter, which
will make this kind of thing much easier. For the moment, you have to
trust to complicated stuff like

if "$h_reply-to" is "$h_to" and
   "$h_reply-to" is "$h_from" and
   "$h_reply-to" is "$return_path" and
   "$h_x-authentication-warning" is not "" 
then
  freeze
endif          



-- 
Philip Hazel                   University Computing Service,
ph10@???             New Museums Site, Cambridge CB2 3QG,
P.Hazel@???          England.  Phone: +44 1223 334714



--
*** Exim information can be found at http://www.exim.org/ ***