[antispam-f] Rule with And action
- From: Dave Barnett <as10@xxxxxxxxxxxxxxxxx>
- To: antispam@xxxxxxxxxxxxx
- Date: Thu, 02 Nov 2006 13:14:26 GMT
ISTR Harriet commenting about Spam with X-MimeOLE: = something. I
can't find that post but noticed that recent spams with Subject: Re:
(My) <a number> often come with "X-Mailer: Microsoft Outlook Express
6.00.2800.1106" and "X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1106". This is usually accompanied with a time zone -0800.
So, thought I, let's see if a rule combining the two would work.
Never having tried the 'And' action before, a 'Defer' seemed sensible.
Lo and behold! The first download after writing the rule caught one.
The log shows:
"Message 2 deferred on rule 127:
Defer Date: = *-0800*
And X-MimeOLE: = Produced By Microsoft MimeOLE V6.00.2800.1106
Date: Thu, 2 Nov 2006 03:21:12 -0800
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106"
(that gives the rule I used).
I'm dead chuffed!
--
Dave
Keep GMT all year
Other related posts:
