On Tue, 10 Feb 1998, Bruce Bowler wrote:
> To my "highly trained eye", it sure looked like spam to me (call me
> paranoid, but when the reply-to, to, from and return-path headers are all
> the same and there's an x-authentication-warning header, bells go off. In
> this case, the body of the message didn't help their cause either :-).
>
> How do I tell exim to reject and/or freeze similarly styled messages?
I am considering adding a simple "scoring" feature to the filter, which
will make this kind of thing much easier. For the moment, you have to
trust to complicated stuff like
if "$h_reply-to" is "$h_to" and
"$h_reply-to" is "$h_from" and
"$h_reply-to" is "$return_path" and
"$h_x-authentication-warning" is not ""
then
freeze
endif
--
Philip Hazel University Computing Service,
ph10@??? New Museums Site, Cambridge CB2 3QG,
P.Hazel@??? England. Phone: +44 1223 334714
--
*** Exim information can be found at
http://www.exim.org/ ***