> ah well. I was brainfucked. Thought (even though i already > used conditions in other parts of the exim configuration)
> that would check the message always but only deny it if.
>
> Okay, but if it isn't so: Everything is okay :-)
> Someone better qualified than me can probably confirm this, but my experience is
that if you have the condition first before the spam or malware test, if the
condition is not met then the test isn't run.
John