I want to move part of my system_filter to exiscan.
if $header_X-Mailer: contains "Advanced Mass Sender" or
$header_X-Mailer: contains "Mail Bomber" or
$header_X-Mailer: contains "Gammadyne Mailer" or
$header_X-Mailer: contains "eGroups Message Poster" or
$header_X-Mailer: contains "NetMasters SMTP" or
$header_X-Mailer: contains "Mail Sender" or
$header_X-Mailer: contains "PersMail" or
$header_X-Mailer: contains "GMail2 " or
$header_X-Mailer: contains "Dynamic Opt-In Emailer" or
$header_X-Mailer: contains "CyberCreek" or
$header_X-Mailer: contains "IntelliMerge" or
$header_X-Mailer: contains "Atlas Mailer" or
$header_X-Mailer: contains "MultiMailer" or
$header_X-Server: contains "Direct Remailer" or
$header_X-Mailer: contains "QuickSender" or
$header_X-Mailer: contains "Mailloop" or
$header_X-Mailer: contains "jpfree Group Mail" or
$header_X-Mailer: contains "%XMailer%" or
$header_X-Mailer: contains "MMailer" or
$header_X-Mailer: contains "QuickSender" or
$header_X-Mailer: contains "JiXing"
then
seen finish
endif
First look at exiscan_regex_data = ^X-Mailer.*Mail\\sSender have no look.
Message with ^X-Mailer: Mail Sender$ in body pass these regexp.
What exiscan_regex_data shall look like?
--
VVS56-RIPE