> BLOCK_WORM_NDR FILTER_POSTMASTER and FILTER_FAILED and > (FILTER_SUBJECTS or > FILTER_ATTACHMENTS)
Maybe it would be also usefull if we could set up a filter like ====== FILTER_DECLUDE_SIGN ====== BODY 0 CONTAINS X-Declude ================================ and then use it in the combo test like BLOCK_WORM_NDR FILTER_POSTMASTER and ... and not FILTER_DECLUDE_SIGN so this should prevent from false positives if the NDR contains the header of a legit and non deliverable message that was send trough our server. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.