custom exim filter for incoming mail

amjad.q

March 18, 2018 10:07

I would like to add a custom exim filter files for incoming mail which has a link with "php?" then delivered it to spam folder or mark it as spam like give it a spam score I can't use the SpamAssassin for that becouse the SpamAssassin doesn't scan the mail which has a big size, no recommended to make the SpamAssassin scanning large messages that can lead to increased CPU or memory usage so the exim filter look like below, but I couldn't complete its wording to do what I need =================== #links with .php & html - roul if $message_body contains ".php?" and $message_body contains "http" then ......... endif =================== Thanks

Comments

18 comments

24x7server

March 18, 2018 15:20
Hi, You can use /etc/antivirus.empty file to check if you are get use it for your benefit. I happen to not find appropriate link because of some restrictions on this forum. However, if you search for antivirus.empty file in Google, you can get the parameters that you can put to test..
0
amjad.q

March 19, 2018 18:16
Hello, Thanks
anyone can advise
0
keat63

March 20, 2018 11:15
would 'then fail' not do what you want ?
0
amjad.q

March 20, 2018 11:57
I wouldn't make them fail, I want delivered to spam folder
0
cPanelMichael

March 20, 2018 18:34
Hello, I believe you'd want to use the "Deliver to Folder" filter action. EX: save "$home/mail/$domain/$local_part/.Spam/" 660
Note the ".Spam" folder would need to exist under all accounts for this to work, so you'd need to ensure that occurs. There's a thread on that topic at: Thank you.
0
amjad.q

March 20, 2018 21:58
Hello, I have tested it but it didn't work with me, the mail didn't deliver at all, not to inbox or spam box ,Even when I checked the Mail Delivery Reports the email not exist
save "$home/mail/$domain/$local_part/.Spam/" 660

The Spam Box is enable and the .spamassassinboxenable file already exist and the spam box show in the email window, But when I check the email files there 3 files only (cur, new and tmp) below the rule which I used if ("$h_from:" contains "email@mydomain.com") then save "$home/mail/$domain/$local_part/.Spam/" 660 endif
Note : the exim filter work with me normal when I use another rule Thanks
0
cPanelMichael

March 21, 2018 17:33
Hello, These type of custom rules are unsupported. It's possible the custom filter rule needs to be modified further, or you did not correctly setup the filter. Can you verify the specific steps you took to add the filter and then the specific steps you took to test it? Thank you.
0
amjad.q

March 21, 2018 17:57
Hello, I have added my file in /usr/local/cpanel/etc/exim/sysfilter/options/, then I enabled my new filter from Exim Configuration Manager >filters and saved Then I have take loot at /etc/cpanel_exim_system_filter, it's show my new rule has been added normal as below # END - Included from /usr/local/cpanel/etc/exim/sysfilter/options/attachments # BEGIN - Included from /usr/local/cpanel/etc/exim/sysfilter/options/my_test_rule # (Use the Basic Editor in the Exim Configuration Manager in WHM to change) # or manually edit /etc/exim.conf.localopts and run /scripts/buildeximconf if ("$h_from:" contains "xxxx@gmail.com") then save "$home/mail/$domain/$local_part/.Spam/" 660 endif # END - Included from /usr/local/cpanel/etc/exim/sysfilter/options/my_test_rule # BEGIN - Included from /usr/local/cpanel/etc/exim/sysfilter/options/spam_rewrite
Then I tested to send email from my gmail account which in the rule to email account in my server
0
cPanelMichael

March 21, 2018 18:39
Hello, In "WHM >> Exim Configuration Manager", under the "Filters" tab, are you using a custom filter for the "System Filter File" option? If so, you'd need to add your custom filter rules to that custom system filter file itself instead of adding them as separate filter files under the options directory. There's a thread on this topic at:
0
amjad.q

March 21, 2018 18:56
In "WHM >> Exim Configuration Manager", under the "Filters" tab, are you using a custom filter for the "System Filter File" option? If so, you'd need to add your custom filter rules to that custom system filter file itself instead of adding them as separate filter files under the options directory. There's a thread on this topic at:

Yes, I'm using System Filter File and my filter has been added to cpanel_exim_system_filter as I reported above The filter work when I use another action as (fail) ,But when I use the action (save "$home/mail/$domain/$local_part/.Spam/" 660), I dosn't work if ("$h_from:" contains "xxxx@gmail.com") then fail
The above filter work with me but the below filter doesn't work if ("$h_from:" contains "xxxx@gmail.com") then save "$home/mail/$domain/$local_part/.Spam/" 660 endif
My problem with the action Thanks you
0
cPanelMichael

March 22, 2018 19:23
The filter work when I use another action as (fail) ,But when I use the action (save "$home/mail/$domain/$local_part/.Spam/" 660), I dosn't work

Hello, It's possible that specific rule won't work for the purpose you intend it to. It's only offered as an example submitted by another user at: You may want to consider reaching out to a system administrator or posting to the Exim User's mailing list for help developing a custom Exim system filter rule that does what you need it to do, as it's typically outside the scope of support we can provide: Thank you.
0
amjad.q

March 22, 2018 20:14
Hello, what about if can do the purpose by different way, if there action to change the Spam static for example if ("$h_from:" contains "xxxx@gmail.com") then X-Spam-Score = Yes endif
OR if ("$h_from:" contains "xxxx@gmail.com") then spam_score = 100 endif
We just need to make the email be as spam and delivered to spam folder by anyway from the exim filter, so can we control or change the spam static form the EXIM ? I wish if anyone have information advise us Thanks you
0
cPanelMichael

March 23, 2018 16:21
Hello, Here's a thread that you may find helpful: Keep in mind these custom filter rules are unsupported. You may want to consult with a system administrator for help setting them up if the user-submitted examples are not working the way you need them to: Thank you.
0
stormy

February 11, 2019 18:03
Hello, I believe you'd want to use the "Deliver to Folder" filter action. EX: save "$home/mail/$domain/$local_part/.Spam/" 660
Note the ".Spam" folder would need to exist under all accounts for this to work, so you'd need to ensure that occurs. There's a thread on that topic at:
0
cPanelMichael

February 13, 2019 16:46
Hi @stormy, The following method is unsupported and untested, but it was provided by a customer in a support ticket and reported to address a similar issue: 1. Remove 660 from the filter line: save "$home/mail/$domain/$local_part/.Spam/" 660
So that it looks like this: save "$home/mail/$domain/$local_part/.Spam/"
Then, browse to WHM >> Exim Configuration Manager >> Advanced Editor and add the following entries to the CONFIG and TRANSPORTSTART sections: SECTION CONFIG >> Add Additional Configuration Setting: system_filter_directory_transport = custom_spam_filter
Section: TRANSPORTSTART custom_spam_filter: driver = appendfile delivery_date_add envelope_to_add return_path_add group = cpaneleximfilter user = cpaneleximfilter mode = 0660 maildir_format = true create_directory = true
Let me know if this helps. Thank you.
0
stormy

February 13, 2019 18:10
Thank you. I ended up using a simple custom SpamAssassin rule to deal with my particular problem, so I haven't tried it, but I appreciate you providing the solution. I might need it in the future.
0
cPanelMichael

February 13, 2019 18:21
Thank you. I ended up using a simple custom SpamAssassin rule to deal with my particular problem

I'm glad to see you were able to address the issue. Do you mind sharing the specific rule you setup? Thanks!
0
stormy

February 13, 2019 18:27
Oh I simply added: blacklist_from *@BADDOMAINHERE.com
to /etc/mail/spamassassin/local.cf
0

Please sign in to leave a comment.

Comments

Didn't find what you were looking for?