discarded (system filter)

[benito]

I have a problem with my mail server, have some mails discarded and dont know wich filter is:

2006-07-19 17:20:54 1G3IXM-0003rv-Vh Subject: FW: NUEVA: HP LaserJet 1018
2006-07-19 17:20:54 SMTP connection from [83.21.xx.xx]:4344 I=[207.44.xx.xx]:25 (TCP/IP connection count = 3)
2006-07-19 17:20:55 1G3IXM-0003rv-Vh <= [email protected] H=(atlrel9.xxx.com) [156.153.xx.xx]:33477 I=[207.44.xx.xx]:25 P=esmtps X=TLSv1:AES256-SHA:256 C$
2006-07-19 17:20:55 SMTP connection from (atlrel9.xxx.com) [156.153.xx.xx]:33477 I=[207.44.xx.xx]:25 closed by QUIT
2006-07-19 17:20:55 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1G3IXM-0003rv-Vh
2006-07-19 17:20:55 1G3IXM-0003rv-Vh => discarded (system filter)
2006-07-19 17:20:55 1G3IXM-0003rv-Vh Completed QT=3s

Anyone knows what filter can discard this message by that way ?

 

[benito]

Dont ask me why, but that message is discarded only when this word is on the email body:

Specialist

 

[rvskin]

Check the filter at /etc/antivirus.exim. If don't find check in /etc/vfilters/.

 

[benito]

Thanks !!!, the problem was in the file /etc/antivirus.exim. I have to comment the lines:

# or $header_subject: contains "Cialis"

And

# or $message_body: contains "Cialis"

This lines was banning emails with the word "Specialist" on it. There is any way to block "cialis" but not "Specialist" ?

 

[racassel]

Did you find an answer to this? I just posted. Need to be able to force an exact match

 

[benito]

Now im using ASSP Deluxe

 

[mctDarren]

Use a regular expression:

or $header_subject: contains "\bcialis\b"

\b is a regex word seperator. I didn't test this, but it should work.