Filter incoming mail by Specific Header Value

[danfbach]

Hello,

We have a spam issue in which emails, sent originally to another email address, are then being forwarded in bulk to one of our support emails.
Since forwarding an email changes some of the headers, standard email blacklisting options do not work. The emails are not inherently "spam" in a traditional sense. Many of the emails aren't even actually spam, they're newsletters or just garbage that is meant to just be annoying, so they have a low spam score that gets through filters.

As the "spam" is only being forwarded from one email, I would like to filter by the "Resent-From:" header, as it is always the same email address.

Is there a way to accomplish this with exim configuration?

 

[danfbach]

It looks like postfix has a "header_checks" conf that could accomplish this, but i can't seem to find an exim equivalent

 

[cPRex]

Hey there! Could you use the cPanel >> Email Filters tool instead of directly modifying Exim itself? That has options for "Any header" and you can even use regex to match the value you're looking for.

If that won't work for your case, then yes, you'll have to do some additional research on doing this directly in Exim, as I don't know of a specific value off the top of my head that would handle that.

 

[danfbach]

I wasn't aware of the email filters.
Thanks, I'll give that a try!

 

[cPRex]

Try it out and let us know!