[SOLVED] how to block mails by subject line

[chandu]

Hi,

Our users keep getting mails which contain subject line start with "Naukri.com" and they want to block these mails.

I have gone through zimbra wiki and below mentioned link which is very useful :

[SOLVED] blocking by subject or by IP

and i have added below high lighted line in /opt/zimbra/conf/postfix_header_checks

/filename=\"?(.*)\.(exe|bat)\"?$/
REJECT For security reasons we reject attachments of this type
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(exe|bat))"? \s*$/
REJECT Attachment type not allowed. File "$2" has the unacceptable extension "$3"
/^Subject:.*(Naukri.com)/ REJECT Banned Subject
~


and ran postfix reload and again checked but found that above high lighted line was not there...it was not accepting changes after relaoding postfix...Am i doing anything wrong ??? is this high lighted format is correct or need any changes??

Please help.

Thanks.

[uxbod]

/opt/zimbra/conf/postfix_header_checks.in and restart ZCS .. or make you life a little simpler a create a SpamAssassin rule. So, under /opt/zimbra/conf/spamassassin create a file called chandu.cf owned by zimbra:zimbra with the following contents

header     NAUKRI_BAN   Subject =~ /naukri\.com/i
describe   NAUKRI_BAN   Subject contains Naukri.com
score      NAUKRI_BAN   10

You may need to alter the score dependent on what your kill setting is.

[chandu]

Hi Uxbod,

Thanks for quick response..As u suggested, i have created .cf file under /opt/zimbra/conf/spamassassin and change the ownership.

My AV setting is as below :

kill percent : 66
Tag percent : 33

Can u pls suggest then wht will be the score for below rule and how to calculate it ?


header NAUKRI_BAN Subject =~ /naukri\.com/i
describe NAUKRI_BAN Subject contains Naukri.com
score NAUKRI_BAN 10


Do we need to restart any (zmantivirusctl or zmantispamctl) service to activate this rule ?


Thanks.

[uxbod]

That should be fine. zmantispamctl stop and start should pick up the new configuration file.

[chandu]

Thanks alot Uxbod...its working ...

[r8escjohn]

This worked for me also, where adding content to the postfix_header_checks did not! :-> Can I add multiple blocks in that xxxx.cf file using the same format?
Thanks!