views:

429

answers:

1

actually i am trying to write one rule in local.cf spamassassin

what i need is to block all Viagra emails.

as you know in these emails some time thay write Viagra,VIAGRA,VIAGRA(c) and some time it is in Subject, some time Name, some time Body of message

can you please tell me what will be rule exactly to stop all these emails.

Thanks

+2  A: 

Well, you can try these kind of simple rules:

header   VIAGRA_SUBJECT Subject =~ /viagra/i
header   VIAGRA_FROM    From =~ /viagra/i
meta     VIAGRA_HEADER VIAGRA_FROM && VIAGRA_SUBJECT
score    VIAGRA_HEADER 10.0
describe VIAGRA_HEADER Block Mails with Viagra in subject

body     VIAGRA_BODY /viagra/i
score    VIAGRA_BODY 10.0
describe VIAGRA_BODY Block Mails with Viagra in body
Patrick MARIE