вот тело спама:
Код: Выделить всё
Return-path: <cn-corp@domain.ua>
Envelope-to: system-filter
Delivery-date: Tue, 11 May 2010 09:14:51 +0300
Received: from domain.ua ([80.78.xx.xx] helo=mail.domain.ua)
by my.domain.ua with esmtp (Exim 4.69 (FreeBSD))
(envelope-from <cn-corp@domain.ua>)
id 1OBijy-000LWi-Aw
for user@my.domain.ua; Tue, 11 May 2010 09:14:51 +0300
Resent-From: <cn-corp@domain.ua>
Resent-To: <user@my.domain.ua>
Resent-Date: Tue, 11 May 2010 09:16:28 +0300
X-Loop: <cn-corp@domain.ua>
X-Spam-Status: No, hits=0.0 required=4.0
tests=TOTAL_SCORE: 0.000
X-Spam-Level:
Received: from pheromony.com.ua ([94.75.247.130])
by mail.domain.ua
for cn-corp@domain.ua;
Tue, 11 May 2010 09:16:11 +0300
Received: from mail.ru (unknown [91.203.146.85])
by pheromony.com.ua (Postfix) with ESMTP id 85CE61EB85AF;
Tue, 11 May 2010 07:11:33 +0200 (CEST)
Message-ID: <703F0CC8373D4C679E9E6C39DD44046C@vlados-bdd3c35c>
Reply-To: "TGT" <tgtes@karagos.com>
From: "TGT" <tgtes@karagos.com>
To: =?windows-1251?B?yOHu6/8t4+jn5evr4A==?= <ytrogqof@mail.ru>
Subject: =?windows-1251?B?yu4gxO3+IM/u4eXk+yE=?=
Date: Tue, 11 May 2010 09:15:27 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
Type="multipart/alternative";
boundary="----=_NextPart_000_0285_01CAF0EA.7EDE6CC0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-Spam-Description: if spam count > 50 - this is spam
X-Spam-Count: 40
так вот. думал что-то типа такого:
Код: Выделить всё
warn condition = ${if eqi{$return_path}{cn-corp@domain.ua}{yes}{no}}
hosts = !+relay_from_hosts : *
set acl_m0 = ${eval:$acl_m0+20}
logwrite = "STAGE5: ACL m0 set = $acl_m0 for host=$sender_host_name [$sender_host_address] with HELO=$sender_helo_name - +20 SPAM for cn-corp@domain.ua"
думал, может на основе Resent-From: сделать, но что-то не смог найти переменную, которая бы возвращала содержимое этого поля.
может что еще подскажете?
