hi everybody
We receive a lot of annoying emails from a conference company that always change their name, subject and email address using free email services (som[email protected], [email protected], [email protected], etc).
The only text that always repeat on the message's body is:
... Tels (33) 3121 1350 con 10 Líneas / Lada Nacional Sin Costo : 01800 8417770
Para desuscribir su correo ...
I created the next rule on the Account Level Filtering section to delete these messages (.cpanel/filter.yaml):
-----------------------------------
-
actions:
-
action: save
dest: /dev/null
enabled: 1
filtername: Cursos Avanzado
rules:
-
match: matches
opt: or
part: $message_body
val: 8.?.?4.?.?1.?.?7.?.?7.?.?7.?.?0
-
match: matches
opt: or
part: $message_body
val: 3.?.?1.?.?2.?.?1.?.?1.?.?3.?.?5.?.?0
-
match: matches
opt: or
part: $message_body
val: "[Dd]esuscribir"
unescaped: 1
-----------------------------------------------
Explained:
--regex 1 match: 8417770 with 1,2 o no spaces or characters between the numbers-- or --regex 2 match: 31211350 with 1,2 o no spaces or characters between the numbers-- or --regex 3 match Desuscrubir or desuscribir--)
I test it on cpanl and return this
...Testing Exim filter file "/etc/vfilters/mydomain.com.mx"
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Filtering set up at least one significant delivery or other action.
No other deliveries will occur.
...
But we still receive more than 50 messages daily with this text in every of our 54 email accounts. 
can anybody help me?
(sorry about my english, i promise i will improve it)
We receive a lot of annoying emails from a conference company that always change their name, subject and email address using free email services (som[email protected], [email protected], [email protected], etc).
The only text that always repeat on the message's body is:
... Tels (33) 3121 1350 con 10 Líneas / Lada Nacional Sin Costo : 01800 8417770
Para desuscribir su correo ...
I created the next rule on the Account Level Filtering section to delete these messages (.cpanel/filter.yaml):
-----------------------------------
-
actions:
-
action: save
dest: /dev/null
enabled: 1
filtername: Cursos Avanzado
rules:
-
match: matches
opt: or
part: $message_body
val: 8.?.?4.?.?1.?.?7.?.?7.?.?7.?.?0
-
match: matches
opt: or
part: $message_body
val: 3.?.?1.?.?2.?.?1.?.?1.?.?3.?.?5.?.?0
-
match: matches
opt: or
part: $message_body
val: "[Dd]esuscribir"
unescaped: 1
-----------------------------------------------
Explained:
--regex 1 match: 8417770 with 1,2 o no spaces or characters between the numbers-- or --regex 2 match: 31211350 with 1,2 o no spaces or characters between the numbers-- or --regex 3 match Desuscrubir or desuscribir--)
I test it on cpanl and return this
...Testing Exim filter file "/etc/vfilters/mydomain.com.mx"
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Save message to: /dev/null 0660
Filtering set up at least one significant delivery or other action.
No other deliveries will occur.
...
can anybody help me?
(sorry about my english, i promise i will improve it)