> > how can i block this Mailer :
> > X-Mailer: Accucast (http://www.accucast.com)
>
> > i tried to do it by this rule:
> > header MAILER_ACCUCAST ALL =~ /^Accucast\b/i
> > describe MAILER_ACCUCAST Uses Spam Mailer Accucast
> > score MAILER_ACCUCAST 2.0
>
> > But it does not work.
Try instead:
header MAILER_ACCUCAST X-Mailer =~ /^Accucast\b/i
The ^ was killing you in 'ALL', since the start of the line in that case is
"X-Mailer".
>
> > Also i receive daily a lot of mails of this kind, and no of the
> > rules work:
> > Content-Type: multipart/mixed;
boundary="---------=_1087316685-30886-44748804"
> > Mime-Version: 1.0
> > Smtp:
> > X-Lead: 814140
> > X-Virus-Scanned: by amavisd-new-20030616-p7 (Debian) at sbgit.com
> > Content-Transfer-Encoding: 7bit
I'm not immediately clear on what you want to catch here. Is it that X-Lead
header? Or something about the MIME boundary? Or something else?
Assuming X-Lead, you can probably do
header X_LEAD_FOUND X-Lead:exists
Loren
